How we handle personal data.

1. Who this notice covers

This notice explains how influensar.io handles personal data when you visit our website, join the waitlist, use the invited-user CRM, use the AI Assistant or browser extension beta, or contact support.

The service is operated by Egor Monakhov in Mexico City, Mexico. For privacy questions or requests, contact privacy@influensar.io.

2. Data we handle

Depending on how you use the service, we may handle:

• work email, name, organization, role, and invitation details;
• waitlist preferences and team size;
• creator and campaign information that a customer adds to its private workspace;
• files, notes, prompts, screenshots, and reviewed CRM changes;
• public profile details and public performance metrics selected by a user through the browser extension beta;
• technical records such as IP address, browser information, request identifiers, errors, and security events.

3. Why we use it

We use data to provide and secure the service, authenticate users, operate customer workspaces, process requested AI assistance, respond to support and privacy requests, maintain backups, prevent abuse, and comply with legal obligations. We do not sell personal data or use it for cross-site behavioural advertising.

4. Customer CRM data

Each customer decides what creator, campaign, and business-contact data it places in its workspace and why. The customer is responsible for having an appropriate reason to collect that information and for giving any notice required by law. influensar.io processes that workspace data to provide the service and follow the customer's instructions.

5. AI Assistant

The AI Assistant may send a prompt, limited conversation history, selected workspace context, or an uploaded screenshot to configured AI providers, including Anthropic and Z.ai/GLM. Processing may occur outside Mexico and is subject to each provider's commercial terms.

Users should not place bank details, identity documents, or complete signed agreements in AI prompts. Important CRM changes require human review before they are applied. AI output can be inaccurate and should be checked before use.

6. Service providers and international processing

We use service providers for infrastructure, storage, transactional email, AI processing, and operational support. This currently includes AWS, self-hosted Supabase services, NocoDB, Anthropic, and Z.ai/GLM. These providers may process limited data in countries other than the user's own when needed to provide their services.

7. Cookies and local storage

We use essential browser technologies for authentication, security, preferences, and reliable operation. The public website currently does not use advertising cookies or cross-site tracking. Your cookie-choice setting is stored locally in your browser.

8. Retention and deletion

We keep data only while it is needed for the service, security, customer instructions, dispute handling, or legal obligations. A deletion request may not remove information immediately from encrypted backups; backup copies expire through their normal protected rotation. We may retain limited records where the law requires it or where they are needed to establish or defend legal claims.

9. Security

We use access controls, encrypted connections, protected production secrets, audit records, backups, and restricted infrastructure access. No service can guarantee absolute security. Please report suspected unauthorized access to privacy@influensar.io.

10. Your privacy rights

You may ask to access, correct, cancel, or object to the use of personal data for which influensar.io is responsible, and you may ask us to limit its use or withdraw consent where applicable. In Mexico, these are commonly called ARCO rights.

Email your request to privacy@influensar.io and describe the data, the request, and a safe way to reply. We may ask for reasonable proof of identity. If the request concerns data controlled by one of our customers, we will direct it to that customer or help the customer respond.

11. Children

influensar.io accounts are intended for people aged 18 or older. Please contact us if you believe a minor created an account or personal data about a child was added without an appropriate legal basis.

12. Changes to this notice

We may update this notice as the product, providers, or legal requirements change. We will update the date below and provide additional notice when a material change requires it.