Privacy

Who is responsible

Autonomous BV, Waversesteenweg 136, 2500 Lier, Belgium, VAT BE1010.281.922, runs InfluencerX and decides what happens with the personal data on influencerx.eu and app.influencerx.eu. For anything about your data, use our contact form.

What we keep

• Your account: your first and last name, email address, whether you're a brand or an influencer, your language and when you logged in. There are no passwords: you log in with a link or code we email you.
• Brands: your company name, website, description, Instagram account and VAT number, the contact person, your collabs (brief, rates, budget, dates, audience and rules), which influencers you accepted, your answers to drafts, and what you paid and got refunded.
• Influencers: your profile (name, bio, country, language, topics), your Instagram username, follower count and your last 3 posts with their likes and comments (from which we work out your reach and influence score), your applications, drafts and post links, your earnings, and the account holder, IBAN and (if you have one) VAT number we pay you on.
• Checks against fake followers: the signals we use to spot fake followers, bought likes and fake clicks or conversions, and the result of those checks.
• Links and clicks: for every click on an influencer's link we keep the time, the country, the website the click came from (only its name, for example instagram.com) and whether it looks like a bot. We don't keep the visitor's IP address: only a scrambled code made from it, the browser and the day, to count unique visitors. That code changes every day and can't be traced back to a person.
• Conversions: what a brand reports to us about a sale, signup or lead: an order number, the type, the value and currency, the time, and the reference from the link or the influencer's code. We ask brands not to send us personal data of their customers (no names, emails or addresses), and we don't need it.
• Payments: amounts, dates, receipts, credit notes and payout statements. Card details are handled by Stripe: we never see or store your card number.
• Messages you send through the contact form: your name, email address and message, and a check that you're not a bot.
• How you use InfluencerX: the pages you visit and the actions you take (for example creating a collab or applying), your browser, device type and approximate location (country and city, from your IP address). See "Analytics and cookies" below.

Why we use it

• To run the marketplace (our agreement with you): reviewing brands, influencers and collabs, showing collabs and profiles, counting clicks and conversions, holding the budget, paying influencers and refunding brands, and emailing you about your collabs, receipts and payouts.
• Because the law asks us to: keeping receipts, credit notes, payout statements and payment records for 7 years.
• Our legitimate interest: preventing fraud such as fake followers, fake clicks or fake conversions, keeping the platform safe, and seeing which pages and steps work and where people get stuck.
• Your consent: the statistics cookies and, if we ever use them, marketing cookies (see below).

We don't sell your data and we don't use it to profile you for anyone else.

Who else sees it

• Brands see the profile, Instagram numbers, reach, influence score and drafts of influencers who apply to their collabs, and the clicks, conversions and costs per influencer. They never see an influencer's email address or bank details.
• Influencers see a brand's company name, website, description and collabs, and their own clicks, conversions and earnings.
• Our service providers, who only process data for us: Amazon Web Services (hosting and files, in Paris), Stripe (card payments, refunds), SendGrid (emails), Cloudflare (security, speed and the spam check on our forms), Google Cloud (the AI that reads a brand's website, in the EU) and EventsLake (our analytics).
• Authorities, only when the law obliges us.

Your data is stored in the European Union. When a provider processes data outside the EU, it does so under the EU's standard contractual clauses.

What brands must do

Brands that send conversions decide which data they send and are responsible for being allowed to share it. For conversions we act as the brand's processor: we only use them to count conversions, pay influencers and show the brand its results.

Analytics and cookies

When you first visit, we ask which cookies you accept. You can change your choice at any time through "Cookie settings" at the bottom of every page.

• Necessary (always on): your login in the dashboard, and _el_consent, which remembers your cookie choice for 12 months.
• Statistics: _el_id, a random visitor id kept for up to 400 days, and _el_s, which ends 30 minutes after your last click and groups the pages of one visit. With them we see which pages are visited, where visitors come from (for example a campaign link) and which steps people complete. When you're logged in, we link this to your account.
• Marketing: cookies of advertising platforms such as Google or Meta, to measure our own ads. We only load them after you said yes.

Without your yes we still count page views, clicks and errors, without cookies and without recognising you: we use a code that changes every day and is never linked to a person.

How long we keep it

• Your account and profile: until you ask us to delete your account.
• Collabs, applications, drafts, post links, clicks and conversions: as long as your account exists, then up to 12 months for disputes.
• The results of checks against fake followers and abuse: up to 3 years after a ban, so a banned account can't simply come back.
• Receipts, credit notes, payout statements and payment records: 7 years, as the law requires.
• Contact form messages: 2 years.
• Analytics data: up to 26 months.

Your rights

You can ask to see the data we have about you, to correct it, to delete it, to get a copy to take elsewhere, or to stop or limit how we use it. You can object to our analytics and withdraw your consent at any time. Contact us and we answer within 30 days. You can change most of your profile yourself in your dashboard.

Not happy with how we handle your data? You can complain to your data protection authority. In Belgium that is the Gegevensbeschermingsautoriteit / Autorité de protection des données (dataprotectionauthority.be).

Security

Every connection is encrypted (HTTPS). Login links and codes work once, for 15 minutes, and we only keep a scrambled version of them. Personal keys are shown once and stored scrambled. Drafts and bank details can only be opened by the people who need them: only the InfluencerX team sees bank details, to pay you.

Changes

When we change this page, we update the date at the top. For important changes, we tell you by email or in your dashboard first. If this page exists in several languages and they differ, the English version applies.