Privacy Policy

Who is responsible

Influmatik (www.influmatik.com) is published by AWARENEXT LLC, a New Mexico (USA) limited liability company, registered with the New Mexico Secretary of State under no. 7414056, principal office: 2105 Vista Oeste, Suite E #3413, Albuquerque, NM 87120, USA, the data controller for the processing described here.

Privacy contact: contact@influmatik.com.

Creators' own pages (sites, funnels, newsletters, notices under /legal/…) have their own notices: for their audience's data, the creator is the controller and Influmatik acts on their behalf as a processor.

Your account and creator workspace

• Name, email address and password (stored hashed, never readable).
• Login sessions (IP address and browser, kept for security; a session lasts 30 days).
• Your workspace content: profile, niche, declared social accounts, ideas, scripts, calendar, brand kit, products, results you enter, invited members.
• Your credits and their history, and your referral code.

Legal basis: performance of the contract (Terms of Use). Kept while your account exists; deleted with all workspace content on request.

Free audit

You enter an Instagram or TikTok handle: we read its public data (profile, recent posts and their visible stats) through the Apify scraping service, and Claude (Anthropic) writes the analysis. No login to the audited account is requested.

• The report is stored with a share link; the profile picture and displayed thumbnails are copied to our storage (Vercel Blob), because platform links expire.
• To prevent abuse (3 audits per day per IP address), we keep a non-reversible hash of the IP address, never the address itself.
• Your email is optional and used to send the report. Follow-ups (day 1, 3 and 7; at most 3 emails over 10 days) are only sent if you tick the dedicated box, never pre-ticked.

Legal bases: legitimate interest (providing the requested audit, preventing abuse); consent for follow-ups, withdrawable from any email. Retention: email and consent proof 3 years after your last contact; report while its share link is in use, deleted on request.

Audited without asking for it? Email us and we delete the report.

Newsletter and waitlist

With your consent (dedicated, unticked box) we keep your email, the chosen newsletter, the social handles you give, and proof of consent (text shown and date). Emails are sent through Brevo. One-click unsubscribe in every email. Kept 3 years after your last contact; never sold or shared.

Smart inbox

If you connect an email address, we receive messages sent to it (sender, subject, text, attachment list). Claude sorts, summarises and drafts replies; you approve them, or Autopilot sends them under the rules you set.

• Mailbox access tokens (e.g. Hostinger) are encrypted at rest.
• Spam and blocked senders: deleted after 30 days.
• Email content (text, subject, summary, draft, reply): erased 12 months after the last exchange; only minimal statistics remain (sender domain, category, dates).

Telegram and WhatsApp notifications

If enabled, we send summaries of important emails to Telegram or WhatsApp (Meta), where you can approve a reply. We keep the chat identifier and notification links (deleted after 90 days). You can disconnect the channel at any time.

Instagram connection (Meta API)

If you connect your professional Instagram account (Instagram API with Instagram Login), with your permission we read once a day your profile (username, account type, followers, media count), your media (caption, type, permalink, timestamp, likes, comments) and insights (reach, views, interactions, followers gained) to power your Statistics tab.

• We never publish, comment or send messages on your behalf.
• The access token is encrypted at rest (AES-256-GCM) and refreshed automatically.
• Data is shown only to you and your workspace members, never sold or shared.
• Disconnecting from your profile, or removing Influmatik in Instagram (deauthorize callback), deletes the token immediately; statistics already collected stay in your workspace.
• A data deletion request from Instagram deletes the connection, statistics and imported media immediately and returns a status page with a confirmation code.

Legal basis: performance of the contract, at your request. Kept until disconnection, workspace deletion or a deletion request.

Trend monitoring and reports

To find what works in a niche we read public posts nightly (reference accounts chosen by creators, niche reports) through Apify: caption, visible stats, account name. Public reports only cite public content and link to its author. Legal basis: legitimate interest. Quoted and prefer not to be? Email contact@influmatik.com.

Artificial intelligence

Your inputs and the data needed for a generation are sent, at generation time, to:

• Anthropic (Claude): scripts, ideas, analyses, audits, reports, email sorting and replies;
• Kie.ai, ElevenLabs and Higgsfield: images, voice and video, from your prompts and any reference images you provide.

No decision with legal effects on you is fully automated: you review what is published or sent, unless you enable Autopilot yourself.

Shop and payments

When the shop is open, an order stores products, customisation, amount and shipping address. Payments are processed by Stripe; we never see or store card numbers. Accounting records are kept for the legal period (10 years).

Hosting and service providers

We sell no data. Only these providers have access, for their task:

• Vercel: hosting and functions (Frankfurt region), file storage (Vercel Blob);
• Neon: PostgreSQL database (Frankfurt, eu-central-1);
• Anthropic, Kie.ai, ElevenLabs, Higgsfield: AI generation;
• Apify: public Instagram and TikTok data;
• Brevo: email delivery;
• Meta (Instagram, WhatsApp), Telegram, Hostinger, ManyChat: only if you connect them;
• Stripe: shop payments, when enabled.

Transfers outside the EU

Data is hosted in the EU (Frankfurt). Some providers, notably US-based ones (Anthropic, Vercel, Neon and others), may access it from outside the EU. Such transfers rely on GDPR safeguards: a European Commission adequacy decision where applicable, otherwise standard contractual clauses.

Cookies

No advertising or analytics cookies. Only cookies needed for the service:

• better-auth.session_token: your login (30 days);
• influmatik_ref: referral link clicked (30 days);
• influmatik_audits: free audits you unlocked (1 year);
• influmatik_email: email left on an audit (30 days);
• ig_oauth_nonce: Instagram connection security (10 minutes);
• prompteur: teleprompter settings (1 year).

The browser also keeps a few display preferences (local storage).

Your rights

You can access, correct, delete or export your data, object to processing based on legitimate interest, restrict it, and withdraw consent at any time. Email contact@influmatik.com; we answer within one month. You may also lodge a complaint with the CNIL (www.cnil.fr) or your local data protection authority.

Security

Encrypted connections (HTTPS), hashed passwords and encrypted access tokens, data separated per creator workspace, access limited to those who need it.

Minimum age

Influmatik is for people aged 15 and over.

Changes

When this policy changes, its version date changes; for significant changes we notify you by email or in the app. The French version prevails.