Privacy Policy
InfluenceGrid LLC ("InfluenceGrid," "we," "us," or "our") provides this Privacy Policy to explain how we collect, use, disclose, and protect personal information when you visit influencegridai.com or use the InfluenceGrid platform (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Scope of This Policy
This Privacy Policy applies to two categories of individuals:
- Subscribers: Individuals who create an account and subscribe to the Service. Subscribers are intended to be located in the United States.
- Data Subjects: Individuals whose publicly available social media data is processed through the Service in connection with handles submitted by Subscribers. Data Subjects may be located anywhere in the world, including in the European Economic Area ("EEA"), the United Kingdom, and other jurisdictions outside the United States.
Where a section applies only to one group, we say so. Sections 11 (California), 12 (other U.S. states), and 14 (EEA/UK/international) describe the specific rights available to each group of individuals.
2. Information We Collect from Subscribers
2.1 Account and Profile Information
When you create an account, we collect your name, email address, password (stored as a salted hash), and any optional profile information you provide.
2.2 Payment Information
We use Stripe, Inc. ("Stripe") to process payments. When you subscribe, you provide payment information directly to Stripe. We do not collect or store full payment card numbers. We receive limited information from Stripe such as the card brand, last four digits, expiration date, billing zip code, and transaction status. Stripe processes your payment information under its own privacy policy, available at stripe.com/privacy.
2.3 Social Media Handles You Submit
When you submit a social media handle through the Service, we collect that handle and pass it to Sociavault, our third-party data provider ("Sociavault" or the "Data Provider"). Sociavault obtains publicly available data associated with that handle from the corresponding Third-Party Platform and returns it to us for analysis. InfluenceGrid does not itself access, crawl, or scrape any Third-Party Platform. We may engage additional or replacement data providers from time to time; the current list is maintained on our sub-processor page at influencegridai.com.
2.4 Usage and Device Information
We automatically collect information about your interactions with the Service, including pages and features used, requests made, IP address, device type, browser type, operating system, language preferences, referring URLs, and timestamps. This information is collected through cookies, web beacons, and similar technologies.
2.5 Communications
If you contact us by email or through the Service, we collect the contents of your communications and any attachments.
3. Information We Process About Data Subjects
In connection with handles submitted by Subscribers, Sociavault (our Data Provider) obtains publicly available information from Third-Party Platforms and supplies that information to InfluenceGrid for analysis. We do not directly access, scrape, or crawl Third-Party Platforms. The information we receive from Sociavault may include:
- Username, display name, profile picture, biography, and account links;
- Posts, captions, hashtags, comments, and similar publicly available content;
- Aggregate metrics such as follower counts, engagement counts, and posting frequency;
- Other publicly displayed information made available by the Third-Party Platform.
Sociavault does not supply private messages, password-protected content, or content not made publicly available by the relevant Third-Party Platform. We do not use this data to identify offline contact information of Data Subjects, and we do not sell it.
Data Subject Rights. If you are a Data Subject, including a Data Subject located in the EEA or United Kingdom, you have rights regarding the personal data we process about you. These rights are described in Sections 12 (U.S. states) and 14 (EEA/UK and international). To exercise any of these rights, including a request to access, correct, restrict, object to, or delete data associated with your handle, contact us at support@influencegridai.com. We will respond to verified requests within the time required by applicable law (generally 30 days under GDPR/UK GDPR, with one possible extension of up to two additional months for complex requests).
Article 14 Notice (EEA/UK). Because we obtain Data Subject information indirectly through our Data Provider rather than directly from you, this Privacy Policy serves as our notice to Data Subjects under Articles 14 of the GDPR and UK GDPR. The categories of personal data, sources, purposes, recipients, retention periods, and rights are described throughout this Policy.
4. How We Use Information
We use the information described above to:
- Provide, operate, secure, maintain, and improve the Service;
- Authenticate accounts and process subscriptions, payments, and renewals;
- Generate analytics and content recommendations through our IQ Engine;
- Communicate with you about your account, transactions, and Service updates;
- Send marketing communications (subject to your right to opt out at any time);
- Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
- Comply with legal obligations and enforce our agreements;
- Develop new features and aggregate, anonymized analytics about Service performance.
We do not use personal information to train large language models or other AI systems for sale to third parties.
Marketing Communications and Opt-Out. With your consent (where required by law), we may send you marketing emails about new features, promotions, content tips, or InfluenceGrid news. You can opt out at any time by (a) clicking the "unsubscribe" link in any marketing email, (b) adjusting your communication preferences in your account settings, or (c) emailing support@influencegridai.com. We will honor opt-out requests within ten (10) business days as required by the CAN-SPAM Act, and we may retain your email address on a suppression list to ensure we do not contact you again. Transactional emails (such as billing receipts, security notices, and important Service announcements) cannot be opted out of while you maintain an account, because they are necessary to operate the Service.
5. Automated Processing and the IQ Engine
InfluenceGrid uses proprietary algorithms, collectively referred to as the "IQ Engine," to analyze publicly available social media data and generate analytics, content recommendations, and growth suggestions for Subscribers.
5.1 What the IQ Engine Does
The IQ Engine processes data Sociavault retrieves on your behalf to identify trends in posting frequency, audience engagement, hashtag performance, content categories, and similar publicly observable signals. It then surfaces patterns and suggestions intended to help you grow your social media presence.
5.2 No Solely Automated Decisions with Legal or Significant Effects
Recommendations from the IQ Engine are advisory only. The IQ Engine does not make decisions about you that produce legal effects (such as denial of credit, employment, housing, or insurance) or similarly significant effects on you. You always retain the discretion to act on, modify, or ignore any recommendation. We do not use the Service to make solely automated decisions of the kind described in Article 22 of the GDPR or comparable provisions of state law.
5.3 Right to Human Review
If you believe that any output of the IQ Engine has had a significant impact on you and you wish to request human review, you may contact support@influencegridai.com. We will review the relevant output, explain the basis for it where reasonably possible, and correct any factual errors.
5.4 No Training of Third-Party AI Models
We do not sell or otherwise make available your personal information for the training of third-party large language models or other AI systems. We may use de-identified or aggregated data internally to evaluate and improve the IQ Engine, as described in Section 10.
5.5 Profiling
The IQ Engine may engage in "profiling" as that term is defined under the GDPR, UK GDPR, and certain U.S. state privacy laws (for example, identifying which content categories perform best for a given handle). You have the right to opt out of profiling that produces legal or similarly significant effects, as described in Sections 12 and 14. Because the IQ Engine does not make such decisions, this opt-out is offered as a courtesy.
6. Categories of Personal Information (CCPA / CPRA Disclosures)
In the twelve (12) months preceding the date of this Privacy Policy, we have collected, used, and disclosed the following categories of personal information about Subscribers, as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"):
| Category | Examples | Purposes / Recipients |
|---|---|---|
| Identifiers | Name, email, IP address, account ID | Service operation, communications, security; shared with hosting and email vendors |
| Customer records | Billing details, payment metadata | Subscription billing; shared with Stripe |
| Commercial information | Subscription plan, transaction history | Service operation; shared with payment and analytics vendors |
| Internet/network activity | Usage logs, device data, cookies | Security, analytics, product improvement; shared with analytics vendors |
| Geolocation (approximate) | IP-based region | Security, fraud prevention, regional configuration |
| Inferences | Usage patterns and preferences | Product personalization and improvement |
We do not sell personal information for monetary consideration. We may "share" personal information with advertising vendors for cross-context behavioral advertising as defined under the CCPA when a Subscriber opts in or has not exercised their opt-out right. California residents can exercise the right to opt out of sharing as described in Section 11.
Sensitive Personal Information. We do not collect, use, or disclose "sensitive personal information" as defined under the CCPA, which includes precise geolocation; racial or ethnic origin; religious or philosophical beliefs; the contents of mail, email, or text messages not directed to InfluenceGrid; genetic data; biometric information used for unique identification; personal information concerning health, sex life, or sexual orientation; and government-issued identification numbers (such as Social Security, driver's license, state identification, or passport numbers). Accordingly, the right to limit the use of sensitive personal information under the CCPA does not apply to our processing. If our practices change, we will update this Policy and provide the right to limit at that time.
7. How We Share Information
We share personal information with:
- Service providers and sub-processors that operate the Service on our behalf, including hosting, payment processing (Stripe), Sociavault (our Data Provider for retrieving publicly available social media data), email delivery, analytics, customer support, and security. These providers are bound by contractual obligations to use information only as needed to perform services for us.
- Professional advisors such as lawyers, accountants, and auditors, where appropriate.
- Authorities and others when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of InfluenceGrid, our users, or others, or to enforce our Terms.
- Successors in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality protections.
A current list of sub-processors, including Sociavault, Stripe, and our hosting and analytics vendors, is maintained at influencegridai.com and updated periodically.
7.1 Government and Law Enforcement Requests
We may disclose personal information in response to a valid subpoena, court order, search warrant, civil investigative demand, or other legally binding request from a government, regulatory, or law enforcement authority. We evaluate each request to confirm it is legally valid, properly issued, and reasonably narrow in scope, and we will challenge requests that we believe are overbroad, unlawful, or improper to the extent we are legally permitted to do so.
Where legally permitted, we will provide reasonable advance notice to the affected Subscriber before producing the requested information so that the Subscriber may seek a protective order, motion to quash, or other appropriate relief. We may decline to provide notice where doing so is prohibited by law or court order, or where we believe in good faith that notice would create a risk of injury, harm to the integrity of an investigation, or destruction or tampering with evidence. We do not currently publish a transparency report; we may begin doing so in the future.
8. Cookies, Tracking Technologies, and Opt-Out Signals
We use cookies and similar technologies to operate the Service, remember your preferences, analyze usage, and (where applicable) personalize advertising. The categories include:
- Strictly necessary: required to operate core features such as authentication and security.
- Functional: remember your settings and preferences.
- Analytics: help us understand usage and improve the Service (e.g., through tools such as Google Analytics).
- Advertising: used by certain advertising vendors to measure and personalize ads (where enabled).
You can manage cookies through your browser settings or, where available, our cookie preference center on the Service. Disabling some cookies may affect Service functionality.
8.1 Global Privacy Control (GPC)
We honor the Global Privacy Control browser signal as a valid opt-out of the "sale" and "sharing" of personal information under the CCPA and analogous state privacy laws where required. When the Service detects a GPC signal from your browser, we will treat it as an opt-out request without requiring you to take further action. If you are logged in when the signal is received, the opt-out will also be applied to your account-level preferences. You can learn more about GPC at globalprivacycontrol.org.
8.2 Do Not Track (DNT)
Because there is currently no industry consensus on how to interpret "Do Not Track" browser signals, we do not respond to DNT signals at this time. We will update this Policy if our practices change.
9. Data Retention
We retain personal information only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. The following table sets out the standard retention periods we apply to each category of information. Specific periods may be longer where required by law (for example, to comply with tax, accounting, or litigation hold obligations) or where necessary to defend against legal claims.
| Category of Information | Standard Retention Period |
|---|---|
| Subscriber account data (profile, settings, submitted handles) | Life of the account, plus ninety (90) days after termination to allow for export and dispute resolution |
| Payment metadata (card brand, last four digits, transaction history) | Seven (7) years from the transaction date (tax and accounting compliance) |
| Usage logs, security logs, audit trails | Twenty-four (24) months from collection |
| Data Subject information processed via Sociavault | While the associated handle is being analyzed by an active Subscriber, plus ninety (90) days after the Subscriber discontinues analysis or removal is requested under Section 15.3 |
| Subscriber communications (support tickets, email correspondence) | Three (3) years from last contact |
| Marketing engagement data (open/click data, preferences) | Until you opt out, plus thirty (30) days for suppression-list maintenance under the CAN-SPAM Act |
| Backups and archives | Ninety (90) days from creation, after which they are overwritten in the ordinary course of operations |
| Aggregated or de-identified data | Indefinitely, as described in Section 10 |
If you cancel your account or request deletion of your personal information, we will delete or anonymize your information in accordance with the schedule above and Section 21 of our Terms of Service. Information may persist for a limited additional time in encrypted backups until those backups are overwritten in the ordinary course.
10. Aggregated and De-identified Data
We may aggregate, anonymize, or de-identify personal information so that it can no longer reasonably be linked to you or any identifiable individual. Aggregated and de-identified data is not "personal information" or "personal data" under applicable privacy laws (including the CCPA, GDPR, and UK GDPR), and we may use, retain, share, or commercialize it for any lawful purpose, including:
- Improving the Service and the IQ Engine;
- Generating product analytics and benchmarks (for example, average engagement rates by content category or platform);
- Publishing industry reports, blog content, white papers, or marketing materials; and
- Conducting research and developing new features.
Consistent with Cal. Civ. Code § 1798.140(m), where we de-identify personal information we will (a) take reasonable measures to ensure the information cannot be associated with a particular individual; (b) publicly commit to maintaining and using the information in de-identified form only and to not attempting to re-identify it; and (c) contractually obligate any recipient of the information to comply with these conditions.
11. Your California Privacy Rights
If you are a California resident, the CCPA gives you the following rights regarding your personal information:
- Right to know what personal information we have collected, used, disclosed, or shared;
- Right to access and obtain a copy of your personal information;
- Right to delete personal information, subject to certain exceptions;
- Right to correct inaccurate personal information;
- Right to opt out of the sale or sharing of personal information for cross-context behavioral advertising;
- Right to limit the use of sensitive personal information (we do not collect sensitive personal information beyond what is required to provide the Service, as described in Section 6);
- Right to opt out of automated decision-making and profiling that produces legal or similarly significant effects (as described in Section 5);
- Right to non-discrimination for exercising your rights.
You may submit requests by emailing support@influencegridai.com or by using the privacy controls within the Service. We will respond within the time periods required by law (generally 45 days, with one possible 45-day extension for complex requests).
11.1 Identity Verification
To protect your information, we will verify your identity before responding to a request. For Subscribers, we typically verify by confirming control of the email address on file plus one additional account-related data point. For Data Subjects identified only by social media handle, verification may include confirmation of control over the relevant handle (for example, by posting a unique verification token to the account or sending a direct message from the verified handle). We will not disclose personal information unless we are reasonably certain of your identity.
11.2 Authorized Agents
You may designate an authorized agent to submit privacy requests on your behalf. To act on your behalf, the agent must provide (a) a written authorization signed by you, or (b) a valid power of attorney executed under California Probate Code §§ 4000–4465. We may also require you to verify your identity directly with us and to confirm in writing that you provided the agent with permission to submit the request. We may deny requests from agents who do not provide adequate proof of authorization.
11.3 Right to Appeal
If we deny your request in whole or in part, you may appeal our decision by replying to our response email with the subject line "Privacy Request Appeal," explaining why you believe the denial was incorrect. We will respond within the time required by applicable law and provide information about additional remedies, including how to contact the California Privacy Protection Agency or the California Attorney General.
11.4 Notice of Financial Incentive
From time to time we may offer promotional codes, referral credits, or affiliate program benefits as described in our Terms of Service. To the extent any such program qualifies as a "financial incentive" under the CCPA (Cal. Civ. Code § 1798.125(b)):
- Participation is entirely voluntary and you may withdraw at any time by emailing support@influencegridai.com or, where applicable, by canceling your participation in your account settings;
- We have a good-faith belief that the value of any personal information involved in the incentive is reasonably related to the value the incentive provides, based on the marginal cost of administering the incentive and the marginal increase in subscription revenue we expect to receive from participating Subscribers;
- Withdrawing from a financial incentive program will not affect your access to the standard Service, but you will no longer be eligible for the related discount or credit going forward.
12. Privacy Rights in Other U.S. States
Residents of states with applicable privacy laws, including, as of the effective date of this Policy, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Tennessee, Utah, Florida, Minnesota, Maryland, and New Jersey, have rights similar to those described in Section 11, including the right to access, correct, delete, and obtain a portable copy of personal information, and the right to opt out of targeted advertising, sale of personal information, and certain profiling.
New Jersey Residents. The New Jersey Data Privacy Act (effective January 15, 2025) provides New Jersey residents the rights described above. Verified requests may be submitted to support@influencegridai.com.
Right to Opt Out of Profiling for Significant Decisions. Several states (including Colorado, Connecticut, Virginia, Texas, Oregon, Montana, Minnesota, Maryland, and Delaware) give residents the right to opt out of "profiling in furtherance of solely automated decisions that produce legal or similarly significant effects" concerning the consumer. As described in Section 5, our IQ Engine does not make such decisions; recommendations are advisory only and you retain discretion to act on them. To the extent any state law nonetheless requires that we honor such an opt-out request, you may submit one by emailing support@influencegridai.com with the subject line "Profiling Opt-Out Request."
Some states allow you to appeal a denial of a privacy request. To appeal, reply to our response email with the subject line "Privacy Request Appeal." We will respond within the time required by applicable law.
13. Consumer Health Data Laws
Several U.S. states have enacted laws specifically protecting "consumer health data," including the Washington My Health My Data Act, the Nevada Consumer Health Data Privacy Act (Senate Bill 370), and the consumer health data provisions of the Connecticut Data Privacy Act. These laws create heightened consent and protection requirements for information that identifies a consumer's past, present, or future physical or mental health status.
InfluenceGrid does not knowingly collect or process "consumer health data" as defined under those laws. Our Service analyzes only publicly available social media metrics (such as posts, captions, hashtags, and engagement counts), not personal health, medical, biometric, reproductive, or mental health data.
To the extent the publicly available content of any handle submitted by a Subscriber discusses health, fitness, mental health, reproductive health, or other wellness topics, InfluenceGrid does not extract, infer, classify, or otherwise process that content as health data, and the IQ Engine does not generate health-related inferences or recommendations. We do not sell information that could constitute consumer health data, and we do not use such information to target advertising to or about any individual.
If you believe we are processing data that you consider to be your consumer health data, please contact us at support@influencegridai.com so we can investigate and, where appropriate, restrict or delete the data. Residents of states with consumer health data laws have the right to confirm whether we process their consumer health data, to withdraw consent, and to request deletion.
14. EEA/UK Residents and International Users (GDPR / UK GDPR)
InfluenceGrid is operated from the United States. The Service is intended for U.S. Subscribers. However, because the Service processes publicly available social media data associated with handles submitted by Subscribers, we may process personal data of Data Subjects located in the European Economic Area, the United Kingdom, and other non-U.S. jurisdictions. This Section 14 describes how we comply with the EU General Data Protection Regulation ("GDPR") and the UK General Data Protection Regulation ("UK GDPR") when those laws apply.
14.1 Controller and Contact
For purposes of GDPR and UK GDPR, InfluenceGrid LLC is the controller of personal data processed through the Service. Contact: support@influencegridai.com.
14.2 Categories of Personal Data and Sources
For Subscribers: account, payment, usage, device, and communications data, collected directly from you (see Section 2). For Data Subjects: publicly available profile and content information from Third-Party Platforms, obtained indirectly through Sociavault, our Data Provider (see Section 3).
14.3 Purposes and Legal Bases
We rely on the following legal bases under Article 6 GDPR and UK GDPR:
- Performance of a contract (Art. 6(1)(b)): operating your subscription, providing analytics and recommendations, processing payments, and providing customer support to Subscribers.
- Legitimate interests (Art. 6(1)(f)): for Data Subjects, processing publicly available social media information to provide analytics and recommendations to Subscribers, secure the Service, prevent fraud, and improve the Service. We have conducted a balancing test and concluded that these interests are not overridden by the rights and freedoms of Data Subjects, given that we process only publicly available information, do not engage in automated decision-making with legal or similarly significant effects, do not process special categories of data intentionally, do not enrich the data with offline identifiers, and offer Data Subjects the right to object and request erasure.
- Consent (Art. 6(1)(a)): where required (for example, certain cookies and marketing communications). You may withdraw consent at any time without affecting prior lawful processing.
- Legal obligation (Art. 6(1)(c)): compliance with tax, accounting, and other legal requirements.
We do not intentionally process special categories of personal data (Article 9). We do not use the Service for solely automated decision-making that produces legal or similarly significant effects on individuals (Article 22).
14.4 Your Rights Under GDPR and UK GDPR
If GDPR or UK GDPR applies to processing of your personal data, you have the following rights, subject to applicable conditions and exemptions:
- Right of access (Art. 15): to know what personal data we hold about you and obtain a copy.
- Right to rectification (Art. 16): to correct inaccurate or incomplete data.
- Right to erasure (Art. 17): also known as the "right to be forgotten," to have your data deleted in certain circumstances.
- Right to restriction of processing (Art. 18): to limit how we process your data in certain circumstances.
- Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.
- Right to object (Art. 21): including the absolute right to object at any time to processing for direct marketing, and the right to object on grounds relating to your particular situation to processing based on legitimate interests (such as our analysis of publicly available social media data).
- Right to withdraw consent (Art. 7(3)) where processing is based on consent.
- Right to lodge a complaint with the data protection authority in the EU member state where you live or work, or in the UK with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, contact us at support@influencegridai.com. We will respond within one month, with a possible extension of up to two additional months for complex or numerous requests. We will verify your identity before disclosing personal data; for Data Subjects identified by social media handle, verification may include confirmation of control over the relevant handle.
14.5 International Data Transfers
Personal data we process is transferred to and stored in the United States and may be processed by sub-processors in other jurisdictions. The United States has not been deemed by the European Commission or UK Government to provide an "adequate" level of data protection generally. Where we transfer personal data of EEA, UK, or Swiss residents to the United States or another non-adequate jurisdiction, we rely on appropriate safeguards, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission, including the UK International Data Transfer Addendum where required;
- Where applicable, the EU-U.S. Data Privacy Framework, the UK Extension to the Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, when InfluenceGrid or a sub-processor is certified;
- Supplementary technical and organizational measures such as encryption in transit, access controls, and contractual restrictions on government access requests.
You may obtain a copy of the relevant transfer mechanism by contacting support@influencegridai.com.
14.6 EU and UK Representative
If we are required to designate a representative in the EU under Article 27 GDPR or in the UK under Article 27 UK GDPR, contact information for our representative will be published at influencegridai.com. Until designated, EEA and UK Data Subjects may direct inquiries to support@influencegridai.com.
14.7 Retention for Non-U.S. Data Subjects
We retain personal data of EEA/UK Data Subjects only for as long as necessary for the purposes described in Section 4, in accordance with the retention schedule in Section 9, after which we delete or anonymize the data. Data Subjects may request earlier deletion under Section 14.4.
14.8 Cross-Border Recipients
Recipients of personal data outside the EEA or UK include the sub-processors listed at influencegridai.com. Each is engaged under a written agreement that includes appropriate data protection terms.
14.9 Data Protection Officer
InfluenceGrid is not required to designate a Data Protection Officer ("DPO") under Article 37 of the GDPR or UK GDPR, because (a) we are not a public authority or body; (b) our core activities do not consist of processing operations that, by virtue of their nature, scope, or purposes, require regular and systematic monitoring of data subjects on a large scale; and (c) our core activities do not consist of large-scale processing of special categories of data (Article 9) or of personal data relating to criminal convictions and offenses (Article 10). Privacy inquiries from EEA/UK Data Subjects may be directed to support@influencegridai.com. We will reassess the need for a DPO if our processing activities materially change.
15. Children's Privacy
15.1 Subscribers
The Service is not directed to individuals under the age of 18, and we do not knowingly permit individuals under 18 to register as Subscribers or knowingly collect personal information from them. If we learn that a Subscriber account has been created by a person under 18, we will terminate the account and delete the associated personal information. Parents or guardians who believe a child has registered for or provided personal information through the Service should contact us at support@influencegridai.com.
15.2 Data Subjects Who May Be Minors
Our Service analyzes publicly available social media data associated with handles submitted by Subscribers. We recognize that some social media users, and therefore some Data Subjects whose publicly available data is processed through the Service, may be under the age of 18, and in some cases under 13. Subscribers represent and warrant that they will not knowingly submit any handle that they know or have reason to believe belongs to a child under the age of 13 (or under the age of 16 for handles associated with users in the European Economic Area or United Kingdom).
InfluenceGrid does not knowingly collect or process personal information of children under 13 in violation of the Children's Online Privacy Protection Act (15 U.S.C. §§ 6501–6506) ("COPPA"), and does not knowingly process personal data of children under 16 in the EEA or UK without an appropriate legal basis under Article 8 of the GDPR or UK GDPR. We do not target the Service to minors, do not market to minors, and do not knowingly use data we receive about minor Data Subjects to direct advertising to those minors.
15.3 Removal Requests
A parent, legal guardian, or the minor themselves may request removal of any handle and associated data we have processed by emailing support@influencegridai.com with the subject line "Minor Removal Request" and providing: (a) the social media handle and platform; (b) a statement under penalty of perjury that the handle belongs to a minor; and (c) information sufficient for us to verify the request. Upon verification, we will (i) cease processing data associated with the handle; (ii) delete data we hold about that handle, except as required by law to retain; and (iii) instruct our Data Provider to discontinue further retrieval of data for that handle to the extent technically feasible.
If we learn that we are processing data associated with a child under 13 without an appropriate legal basis, we will promptly delete that data and take reasonable steps to prevent re-collection. We may suspend or terminate Subscriber accounts found to be repeatedly submitting handles of minors in violation of our Terms of Service.
16. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
If we learn of a security breach affecting your personal information, we will notify you and applicable regulators as required by law. Where GDPR or UK GDPR applies, we will notify the relevant supervisory authority within 72 hours of becoming aware of a notifiable breach where feasible, and notify affected Data Subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
17. Third-Party Sites and Platforms
The Service may contain links to or interact with third-party platforms, including social media networks. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing them with personal information.
18. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by email or by posting a notice in the Service before the changes take effect. The "Last Updated" date above reflects the most recent revision.
19. Contact Us
If you have questions or requests regarding this Privacy Policy, please contact us at:
InfluenceGrid LLC
Email: support@influencegridai.com
State of Registration: New Jersey, United States