Privacy policy

This policy is issued by InfluenceStats (“we”, “us”). We are the controller of the personal data described here, except where we process data in a customer’s workspace on their behalf (see “Customer workspaces” below).

Contact for anything privacy-related: info@influencestats.io.

This policy covers two groups of people:

• Customers: people who visit our website or use the app.
• Creators and commenters: people whose public Instagram profiles, posts or comments are analysed in the service. If that’s you, jump to Instagram creators and commenters.

If you have a public Instagram account, a customer may analyse your profile or posts in InfluenceStats. We want to be clear about what that involves.

• What we collect: public profile information (username, display name, bio, profile picture, category, website link, verification and business status), follower, following and post counts, and public posts with their captions, likes, comments and views. For full analyses we also look at a sample of public comments on recent posts, including the commenter’s username, whether they have a profile picture and the comment text.
• Where it comes from: only information that’s publicly visible on Instagram, collected through our data provider, Scrape Creators. We don’t access private accounts’ posts, direct messages or anything behind a login.
• Why: to help brands and agencies find and evaluate creators for marketing partnerships, measure engagement, spot fake engagement and report on campaigns.
• Legal basis: legitimate interests, ours and our customers’, in business research on public professional profiles. We only use data a creator has chosen to make public, focus on professional metrics, and don’t try to infer sensitive information.
• What it produces: metrics such as engagement rate, an audience quality score (a heuristic based on the commenter sample), and optionally an AI-written assessment. These are signals, not judgements about you as a person.
• Who sees it: the workspace that ran the analysis, and anyone they share a report or link with.
• Your right to object: email info@influencestats.io with your Instagram username. We’ll delete the data we hold about you, stop tracking your account and keep a minimal record of your username so it isn’t collected again. You also have all the rights listed under Your rights.

Our customers decide which creators to analyse and what to do with the results. For the notes, lists, campaigns and reports they keep in their workspace, the customer is responsible for their own use of the data, and we process it on their behalf. Customers must use it lawfully (see our acceptable use rules). We can provide a data processing agreement on request.

We don’t sell personal data. We share it only with:

• Service providers who host the website and app, store data, process payments, measure usage (with your consent), send emails, protect against bots, fetch public Instagram data and generate AI insights for us, under contracts that limit how they can use it. The full list is on our subprocessors page.
• Your workspace. Members of a workspace can see its data and each other’s names and email addresses.
• People you share with, through share links and exported reports.
• Authorities or advisers, when the law requires it or to protect our rights, customers or the public.
• A successor, if the service is sold or transferred. We’d tell you first.

When you ask for an AI insight, we send a trimmed copy of the analysis (profile details, metrics, the audience signal and up to 12 post captions, without pictures) and your brief to OpenAI. Under OpenAI’s API terms, this data isn’t used to train their models. We don’t make decisions about anyone automatically: insights are suggestions for people to review.

If you allow analytics cookies, the website and app load Google Analytics, provided by Google Ireland Limited and Google LLC. It tells us how many people visit, which pages they use and where they get stuck. We send page addresses without query strings, replace ids in app addresses, never send page titles from inside the app, and don’t use it on share links, invites or sign-in links. Google signals and ad personalisation are off. Nothing loads until you agree, and withdrawing consent stops collection and deletes the cookies.

Our database is hosted in the EU (Ireland, eu-west-1). Some providers, such as Vercel, OpenAI, Resend, Cloudflare, Scrape Creators and Google, process data in the United States and elsewhere. Where data leaves the EEA, the UK or Switzerland, we rely on adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified) or the European Commission’s standard contractual clauses.

• Account and workspace data: while your account is open. Deleting your account deletes your profile and any workspaces you own alone, with their analyses, reports and credits.
• Reports and analyses: until the workspace deletes them or the workspace is deleted.
• Public Instagram data: kept while it’s used for analyses, reports or tracking, and for up to 12 months after it was last used, or deleted sooner on request.
• Billing records: as long as tax and accounting law requires, usually up to 10 years.
• Security and technical logs: only as long as our hosting providers keep them, usually no more than 90 days.
• Backups: deleted data can remain in encrypted backups for a short period until they’re overwritten.

Depending on where you live, you can:

• get a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• object to processing based on legitimate interests, including the creator analysis described above;
• restrict how we use your data while a concern is looked into;
• receive data you gave us in a portable format;
• withdraw consent, for example to marketing emails, at any time.

Most account data can be changed or deleted directly in the app’s settings. For anything else, email info@influencestats.io. We’ll reply within one month, and may need to confirm who you are first.

You can also complain to your local data protection authority. In the EU, you’ll find yours on the European Data Protection Board’s website; in the UK it’s the ICO.

Data is encrypted in transit and at rest. Access to workspace data is enforced in the database itself, so members only see their own workspaces. Passwords are hashed, sign-in forms are protected from bots, share links are stored only as secure hashes, and payment details are handled by Dodo Payments, not us. No system is perfectly secure, but if a breach puts your rights at risk, we’ll tell you and the authorities as the law requires.

We use cookies that are needed to run the service and, only if you allow them, Google Analytics cookies. You can change your choice at any time with “Cookie settings”. Details are in our cookie policy.

InfluenceStats isn’t meant for anyone under 18, and we don’t knowingly collect data from children as customers. If you think a child has signed up, email us and we’ll delete the account.

We’ll update this page when our practices change and change the date at the top. If the changes are significant, we’ll email account owners or show a notice in the app before they take effect.