Privacy policy

This privacy policy explains how personal data is collected and used on the microinfluencer.co service (MicroInfluencer), a platform where brands and agencies find, contact, hire, track and pay micro creators, and where creators receive campaign invites, sign agreements and get paid. It covers visitors, brand users, creators who join, and creators whose public statistics appear on the platform without an account.

Who is responsible for your data

The controller of personal data processed through the service is the administrator of the microinfluencer.co service. You can reach the administrator about any privacy matter at [email protected]. When a brand uses the platform to run its own campaigns, that brand is also responsible for how it uses creator data inside its workspace.

What data we collect

Visitors

When you browse the site we process technical data needed to deliver pages securely, such as IP address, browser type and request time, in server logs. If you run the demo search on the home page, we store what you typed (product, country, niche, platform) together with a technical visitor identifier for 7 days, to show the result page and to limit the demo to one search per day.

Brand and agency users

• Account data: name, email address, password stored as a salted hash, workspace name and team members.
• Billing data: plan, billing period, invoices and a reference to the customer at the payment processor. Card numbers are entered at the payment processor and never reach us.
• Campaign data: briefs, budgets, shortlists, messages, agreements, shipping records, posts, attributed orders and payouts.
• Store data, when you connect a Shopify or WooCommerce store: orders that use creator codes or links, with order number, date, amount and code. We do not need and do not store your customers' names or addresses for attribution.

Creators who join

• Account data: name, email address, password hash, niche, city, rate card and media kit content you add.
• Connected account data, when you connect Instagram, TikTok or YouTube through the official login: handle, follower count, engagement, post and video statistics, and aggregated audience data such as the share of followers by country, age band and gender.
• Deal data: applications, offers, agreements, shipping address for product you agree to receive, delivered content links and files, attributed sales and payouts.
• Payout data: payout account status at the payment processor. Bank details are entered at the payment processor.

Creators with a public profile and no account

The creator index also contains public statistics about creators with 1k to 100k followers, available through official platform APIs: handle, profile name, public bio, follower count, engagement and public post statistics, and, where the API provides it, aggregated audience data. We do not scrape websites or social networks, we do not buy contact lists and we never store data about individual followers. A business contact email is stored only where the creator publishes it for business enquiries.

Why we use your data and on what legal basis

• To provide the service you signed up for, including campaigns, deals, payouts and support: performance of a contract.
• To show verified statistics of creators who connect their accounts: consent, which you can withdraw by disconnecting the account.
• To list public creator statistics and allow brands to send business proposals: legitimate interest of brands and creators in paid collaborations. Every creator can object at any time, see the section on opting out.
• To bill subscriptions, issue invoices and keep accounting records: legal obligation.
• To keep the service secure, prevent abuse and enforce limits: legitimate interest.
• To send service emails such as sign up codes, receipts and deal notifications: performance of a contract. We do not send marketing newsletters without consent.

AI features

Paying workspaces can use AI features such as Campaign Autopilot, creator scoring and message drafts. For these features, the brief and the relevant creator statistics are sent to an AI model provider under a data processing agreement that does not allow the provider to use the data to train its models. The demo search for visitors without an account is rule based and uses no AI. Decisions with legal or similar effect are never made by AI alone: a person in the workspace approves shortlists, agreements and payouts.

Outreach to creators

Brands contact creators through the platform. Every outreach email contains a one-click unsubscribe link. When a creator unsubscribes or opts out, the address is placed on a suppression list that applies to every workspace on the platform, so no brand can contact that creator again through MicroInfluencer.

Opting out, correcting or removing creator data

Any creator can correct or remove their data at microinfluencer.co/creator-data without an account, after confirming an email address or the connected profile. Removal takes the profile out of search on all workspaces and adds the creator to the suppression list. Records of deals already concluded are kept as long as described in the retention section.

Who receives your data

We share personal data only with the following categories of recipients, each bound by a data processing agreement or acting as an independent controller where the law requires:

• a hosting provider that runs our servers and databases,
• a payment processor that handles subscriptions, card payments with 3D Secure, creator payout accounts and payouts,
• an email delivery provider that sends service and outreach emails,
• an AI model provider, for AI features of paying workspaces only,
• brands and agencies in whose workspace a creator applies, is contacted or works on a deal, which see the data needed for that deal,
• public authorities, when the law requires it.

We do not use analytics or advertising services that set cookies, and we do not sell personal data.

International transfers

Some recipients may process data outside the European Economic Area. In that case we rely on an adequacy decision or on standard contractual clauses approved by the European Commission, together with additional safeguards where needed.

How long we keep data

• Demo searches without an account: 7 days.
• Account and campaign data: as long as the account exists, then deleted or anonymised within 30 days of account deletion.
• Invoices and payout records: as long as tax and accounting law requires.
• Public creator statistics: refreshed regularly and deleted when the creator opts out or the data is no longer available through official APIs.
• Suppression list entries: kept for as long as needed to honour the opt-out.
• Server logs: up to 30 days.

Cookies

The site uses only essential cookies: a session cookie that keeps you signed in, a security token that protects forms, and preferences such as the billing period you selected. These cookies are needed for the service to work, so we do not ask for consent and show no cookie banner. We do not use advertising or tracking cookies.

Security

Connections use HTTPS. Passwords are stored as salted hashes. Platform tokens, store credentials and shipping addresses are encrypted in the database. Access inside a workspace is limited by roles, and on the Agency plan sensitive actions are recorded in an audit log. More details are on the security page.

Your rights

Under the GDPR and similar laws you have the right to access your data, correct it, delete it, restrict its processing, receive it in a portable format, object to processing based on legitimate interest, and withdraw consent at any time without affecting earlier processing. Write to [email protected] or use the creator data page. We reply within one month. You also have the right to lodge a complaint with a data protection supervisory authority in the country where you live or work.

Children

The service is for adults. You must be at least 18 years old to create a brand or creator account. We do not knowingly list or contact creators under 18, and we remove such profiles when we learn about them.

Changes to this policy

We update this policy when the service or the law changes. The date at the top shows the latest version. Material changes are announced to account holders by email before they take effect.

Related documents: terms of service, security.