Skip to content
Legal

Privacy Policy

This policy explains what data we collect, why we collect it, how we use it, and what rights you have over it. We've written it to be readable — not just legally compliant.

Effective1 January 2026
Last updated1 January 2026
Versionv1.0
01

Who We Are

Influcraft is operated by Influcraft Private Limited, a company incorporated in India with its registered office in Bhubaneswar, Odisha. We build a creator operating system that helps brands and creators manage campaigns, workflows, teams, and payments.

For the purposes of this Privacy Policy, Influcraft Private Limited is the data controller— meaning we determine how and why your personal data is processed. When you use Influcraft's platform, products, or website (collectively, "the Services"), this policy applies to you.

If you have questions about how we handle your data or want to exercise any of your rights, contact us at privacy@influcraft.com. We aim to respond within 30 days.

02

What Data We Collect

We only collect data that is necessary to provide and improve our Services. The categories of data we collect depend on how you interact with us.

Category
Examples
Source
Account data
Name, email address, password (hashed), profile photo, role (brand / creator)
You, directly
Campaign data
Brief content, deliverable details, deadlines, campaign notes, files you upload
You, directly
Payment data
Transaction amounts, payment status, bank account details (held by payment provider), invoices
You + payment provider
Usage data
Pages visited, features used, click events, session duration, error logs
Automatic (platform)
Device & technical data
IP address, browser type, operating system, device identifiers, timezone
Automatic (platform)
Communications
Emails you send us, support requests, feedback forms, press or careers enquiries
You, directly
What we do not collect
We do not collect full payment card numbers — these are handled by our payment providers and never reach our servers.
We do not buy, rent, or acquire personal data from third-party data brokers.
We do not collect sensitive personal data (health information, political opinions, biometric data) unless you choose to provide it in a campaign brief or other context.
03

How We Use Your Data

We use your data to provide, operate, and improve the Services. Specifically:

To deliver the Services: creating and managing your account, running campaign workflows, processing payments, and enabling collaboration between creators and brands.
To communicate with you: sending transactional emails (account confirmations, payment receipts, campaign updates), responding to support requests, and delivering product announcements you have opted into.
To improve and develop the platform: analysing usage patterns, diagnosing technical issues, and informing product decisions. We use aggregated and anonymised data where possible.
To ensure safety and prevent fraud: monitoring for suspicious activity, enforcing our Terms of Service, and protecting the integrity of payments held in escrow.
To comply with legal obligations: retaining records required by law, responding to lawful requests from authorities, and meeting our tax and financial reporting obligations.

We do not sell your personal data. We do not use your data to serve third-party advertising. We do not use your campaign content or business data to train AI models without explicit consent.

04

Legal Basis for Processing

We process your personal data on one of the following legal grounds, depending on the context:

Contract: Processing is necessary to perform our agreement with you — for example, to create your account, run campaigns, or release payments.
Legitimate interests: We process data to improve our platform, detect fraud, and ensure security, provided these interests are not overridden by your rights.
Legal obligation: We process data when required to comply with applicable laws — for example, financial record-keeping obligations.
Consent: For optional communications such as product updates or marketing emails, we rely on your explicit consent. You can withdraw consent at any time.
05

Sharing Your Data

We do not sell, trade, or rent personal data. We share your data only in the following circumstances:

Service providers

We use trusted third-party vendors to help us operate the platform — including cloud hosting, payment processing, email delivery, and analytics. These providers act as data processors on our behalf and are contractually bound to protect your data and use it only for the purposes we specify.

Other users on the platform

When you use Influcraft to collaborate — for example, a brand inviting a creator to a campaign — certain profile and campaign data is shared between those parties as part of the product's core function. You control what you share within the platform.

Legal requirements

We may disclose data if required by law, court order, or a lawful request from a government authority — for example, in response to a valid subpoena. We will notify you where legally permitted to do so.

Business transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

06

Data Retention

We retain your personal data only for as long as necessary to provide the Services and to meet our legal, financial, and regulatory obligations.

Account data is retained for the duration of your account. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.
Payment records are retained for a minimum of 7 years in accordance with Indian financial record-keeping requirements.
Campaign and workflow data is retained for as long as the relevant campaign is active, and for up to 12 months after campaign closure, unless you request earlier deletion.
Usage and technical data is retained for up to 24 months for product analytics purposes, after which it is aggregated and anonymised.

To request deletion of your data, contact us at privacy@influcraft.com.

07

Security

We take the security of your data seriously. Our measures include:

Encryption of data in transit (TLS 1.2+) and at rest.
Passwords are stored using bcrypt hashing and are never stored in plain text.
Access to production systems is limited to authorised personnel on a least-privilege basis.
Regular security reviews and vulnerability assessments of our infrastructure.
Payment data is handled by PCI-DSS compliant payment providers — we do not store card data on our servers.

No system is completely secure. If you believe your account has been compromised or you discover a security vulnerability, please contact us immediately at security@influcraft.com.

08

Your Rights

Depending on your location, you may have the following rights over your personal data. We honour these rights regardless of jurisdiction.

Right to access
Request a copy of the personal data we hold about you, and information about how we use it.
Right to rectification
Request correction of inaccurate or incomplete personal data we hold about you.
Right to erasure
Request deletion of your personal data, subject to our legal and contractual retention obligations.
Right to restrict
Request that we restrict processing of your data in certain circumstances — for example, while a dispute is resolved.
Right to portability
Request a copy of your data in a structured, machine-readable format to transfer to another service.
Right to object
Object to processing based on legitimate interests, or to direct marketing at any time.

To exercise any of these rights, email us at privacy@influcraft.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with your relevant data protection authority.

09

Cookies & Tracking

We use cookies and similar technologies to operate and improve the platform. Cookies are small text files stored on your device.

Essential cookies

Required for the platform to function — for example, maintaining your login session, storing your preferences, and enabling secure access. You cannot opt out of these without disabling functionality.

Analytics cookies

We use analytics tools to understand how people use the platform — which features are used, where users encounter issues, and how workflows are navigated. These help us improve the product. You can opt out of analytics tracking in your account settings.

No advertising cookies

We do not use advertising cookies or trackers. We do not share data with ad networks or retargeting platforms.

You can manage or delete cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

10

Children's Privacy

The Influcraft platform is intended for business use by adults. Our Services are not directed at or designed for individuals under the age of 18.

We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us immediately at privacy@influcraft.com and we will take steps to delete it promptly.

11

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services we offer, or applicable legal requirements.

When we make material changes, we will notify you by:

Sending an email to the address associated with your account, and / or
Displaying a notice within the platform before the changes take effect.

The "Last updated" date at the top of this page will always reflect when the policy was most recently revised. We encourage you to review this page periodically. Your continued use of the Services after a policy update constitutes acceptance of the revised terms.

12

Contact Us

For any questions, requests, or concerns about this Privacy Policy or the way we handle your data, contact us through any of the channels below. We aim to respond to all privacy-related enquiries within 30 days.

Privacy & Data Contact
Privacy enquiries
privacy@influcraft.com
↗
Security concerns
security@influcraft.com
↗
Registered address
Influcraft Private Limited, Bhubaneswar, Odisha, India