Privacy Policy

Last updated 5 August 2026

This policy explains what personal data we collect, why we collect it, and what control you have over it. It applies to everyone who uses InfluDubai AI.

1. What we collect

Account data — name, email, password hash, role and account status.
Profile data — for creators: bio, location, languages, categories, rate card, linked social handles and publicly reported audience metrics. For brands: company name, industry, website and logo.
Campaign data — briefs, invitations, proposals, messages, deliverables and their revision history.
Financial data — payout amounts, platform fees and payment status. Card details are handled by our payment processor and never reach our servers.
Technical data — IP address and audit records of security-relevant actions such as sign-in and administrative changes.

2. Why we process it

To provide the service you signed up for (contract).
To detect fraudulent or inauthentic audiences and protect brands from wasted spend (legitimate interest).
To meet accounting, tax and anti-fraud obligations (legal obligation).
To send optional product updates, where you have consented — you can withdraw at any time.

3. AI processing

Profile analysis, campaign matching and fraud scoring may be processed by a third-party large language model provider. We send only the profile and campaign fields needed for the analysis, never your password, payment details or private messages. These features are optional at the platform level and fall back to rule-based logic when disabled.

4. Who we share with

We do not sell personal data. We share it only with processors that help us run the service — cloud hosting, database and file storage, payment processing, email delivery and AI analysis — each bound by a data processing agreement. Public creator profiles are, by design, visible to anyone.

5. International transfers

Our infrastructure is hosted in the EU and the data is processed there and in the UAE. Where data moves outside these regions, we rely on standard contractual clauses or an equivalent safeguard.

6. How long we keep it

Account and profile data: while your account is open.
Campaign, deliverable and payout records: seven years after completion, to meet financial record-keeping obligations.
Audit logs: two years.
After account deletion, remaining data is removed within 30 days except where retention is legally required.

7. Your rights

You can access, correct, export or delete your data. Export and deletion are available directly in your account settings — export returns everything we hold about you as JSON. You may also object to processing based on legitimate interest, or lodge a complaint with your local data protection authority.

8. Security

Passwords are hashed with bcrypt. Refresh tokens are stored hashed and rotate on use. API credentials configured by administrators are encrypted at rest with AES-256-GCM. Access to production data is restricted and audit-logged.

9. Cookies

We use strictly-necessary cookies for authentication, and optional analytics cookies only with your consent. See our cookie policy.

10. Contact

Privacy questions or requests: privacy@infludubai.com, or contact us.