Privacy notice

Influoza is operated by Conjora Limited, registered in Ireland. For anything in this notice, including any request below, contact hello@influoza.com. You also have the right to complain to the Data Protection Commission at dataprotection.ie.

This is the part that matters most, so it comes first.

Most profiles on Influoza are created by the creator. Some are created by us from information the person has published themselves — a public social account, a public rate card, a public location. Where we do that, the profile is clearly marked as unclaimed, every figure on it is labelled as collected or estimated rather than confirmed, and the page is kept out of search-engine indexes until the creator claims or verifies it.

Our lawful basis for those profiles is legitimate interest: operating a discovery service that businesses can use to find creators, using information those creators have already made public in a professional capacity. We have weighed that against the interests of the people listed, which is why the safeguards above exist.

You can object, and you do not have to give a reason. Use the “Claim this profile” link on any profile, or email us. If you ask us to remove a profile we remove it — we do not require you to create an account first, and we do not ask you to justify it.

If you have an account: your email address, the name you give us, and a password we never see in readable form (authentication is handled by Supabase).

If you have a creator profile: what you put on it — location, niches, social handles, audience figures, audience demographics if you supply them, rates, portfolio, availability — plus a separate contact address for enquiries if you set one. That contact address is never shown publicly.

If you have a business account: your company name and any website, industry and description you add, along with the creators you save, the shortlists you build and the enquiries you send.

Product analytics: we record that a search happened and which filters were used, that a profile was viewed, and that a creator was saved or contacted. We do not record the text you type into the search box, we do not store IP addresses against these events, and there is no advertising tracker on this site.

• To run your account and show you your own data — necessary for our contract with you.
• To publish creator profiles and make them searchable — contract for claimed profiles, legitimate interest for unclaimed ones, as described above.
• To pass enquiries between businesses and creators — necessary for the service you asked for.
• To improve the product using aggregate analytics — legitimate interest, with the limits described above.
• To keep records of moderation decisions — legitimate interest in accountability.

A published creator profile is public. That is the point of it, and it is stated before you publish.

When you send an enquiry, the creator receives your name, your email address and your company name so they can reply. Nothing else about your account is shared.

Our processors are Supabase (database, authentication and file storage, hosted in the EU), Vercel (hosting) and Google Workspace (email delivery). We do not sell data to anyone, and we do not share it with advertisers.

Account and profile data: until you delete your account, which you can do yourself at any time from settings. Deletion is immediate and there is no retention period during which we quietly keep it.

Two things survive deletion, and we would rather say so here than surprise you: an enquiry you sent stays in the receiving creator's inbox with your identifying details removed, because their record of being contacted is their data too; and records of moderation decisions stay in our internal audit log with identifiers that no longer resolve to a person.

Analytics events are aggregate and are kept for up to 24 months.

Under the GDPR you can ask us for any of the following, free of charge:

• A copy of your data. Do it yourself, instantly, from settings — it downloads as a structured JSON file, which also covers your right to portability.
• Correction of anything inaccurate. Claimed profiles are editable directly; for anything else, email us.
• Deletion. Self-service in settings, or by email for a profile you have not claimed.
• Objection to processing based on legitimate interest, including the publication of an unclaimed profile.
• Restriction of processing while a dispute is resolved.

We respond within one month, usually far sooner, and we will not ask you to justify a deletion or objection request.

Influoza sets one cookie: inf-auth, which keeps you signed in. It is strictly necessary for the site to work when you have an account, and it is not used for tracking or advertising. There are no third-party advertising or analytics cookies, which is why you are not being asked to click through a consent banner. More detail.

Access to data is enforced in the database itself with row-level security, not only in application code, so a bug in a page cannot expose another account's rows. Verification documents are held in private storage that the public keys cannot read at all. Administrative actions are logged with the account that took them.

If we change how we use personal data in a way that affects you, we will update this page and change the date at the top. Material changes affecting creators will also be emailed.