Security
Security and data protection
MicroInfluencer protects brand and creator data with encrypted connections and encrypted sensitive fields, roles and seats per workspace, single sign-on and an audit log on Agency, creator data from official platform APIs only, and opt-outs that apply across every workspace. Payments run on a certified payment processor with 3D Secure.
At a glance
How we protect your workspace
Encryption
All traffic uses HTTPS with modern TLS. Sensitive fields, such as creator shipping addresses, connected platform tokens and store credentials, are encrypted in the database at the application level.
Accounts and sign in
Passwords are stored as salted hashes, never in readable form. Sign up is confirmed with a code sent by email, and repeated failed logins are rate limited.
Roles and seats
Each workspace has a fixed number of seats by plan. Owners and admins manage billing, invitations and payout approval. Members work on campaigns without access to billing.
Single sign-on
The Agency plan adds sign in with Google and Microsoft work accounts, so access follows your company directory and ends when someone leaves.
Audit log
On Agency, sensitive actions such as payout approvals, role changes, exports and integration changes are recorded with the person, the time and the workspace.
Workspace separation
Every brand workspace is isolated. Agencies running several client brands see each brand in its own workspace with its own members, data and reports.
Creator data
Official platform data only, never scraping
Brands rely on creator statistics to spend money, so the source matters. MicroInfluencer uses two sources. Creators who join with a Creator plan connect their Instagram, TikTok or YouTube accounts through the official login, which shares their follower count, engagement and audience breakdown with their consent. For other creators we use public statistics available through official platform APIs.
We do not scrape websites or social networks, we do not buy contact lists, and audience data is kept as aggregates, such as the share of followers by country, age band and gender. We never store data about individual followers.
Any creator can correct or remove their data on the creator data page, without an account, after confirming their email address. Removal takes effect across the whole platform.
Every outreach email sent through MicroInfluencer contains a one-click unsubscribe link. Unsubscribes and opt-outs go onto a suppression list that applies to every workspace, so one brand cannot reach a creator who has asked another brand to stop.
Demo searches made on the home page without an account are kept for 7 days and then deleted.
Payments
Card data never touches our servers
Subscriptions and creator payouts are handled by a payment processor that is certified to the highest level of the card industry security standard. You enter card details on its secure checkout page. We receive only a reference to the customer and the subscription, never the card number.
- Every checkout requests 3D Secure authentication from the card issuer.
- Creator payouts go to payout accounts verified by the payment processor.
- Payouts need an approval by a workspace owner or admin before they are sent.
- Plan changes charge the price difference immediately, so access always matches what was paid.
Privacy
GDPR and how we handle personal data
| Topic | How it works |
|---|---|
| Lawful basis | Contract for brand and creator accounts, consent for connected creator accounts, legitimate interest for public creator statistics and business outreach, with a right to object. |
| Data minimisation | Audience data as aggregates only. No individual follower data. Only the fields a campaign needs. |
| Your rights | Access, correction, deletion, restriction, portability and objection, by email to [email protected] or on the creator data page. |
| Recipients | A hosting provider, a payment processor, an email delivery provider and an AI model provider for paying workspaces, each bound by a data processing agreement. |
| AI features | Used only for paying workspaces, inside plan limits. Demo searches without an account are rule based and use no AI. |
| Cookies | Essential cookies only, for sign in, security and preferences. No advertising or tracking cookies, so there is no cookie banner. |
| Retention | Account data while the account exists, invoices as long as tax law requires, demo searches for 7 days. |
The full details are in our privacy policy and terms of service. Roles, SSO and the audit log are part of the Agency plan, listed on the pricing page.
FAQ
Security questions from decision makers
See which micro creators fit your product
Run a search on the home page before you create an account.
Describe your product and see matching micro creators in seconds.
Find My Creators