Privacy Policy

Effective Date: 25 May 2026 Version: 1.0.0 Operated by: [Influenca Digital Marketing LLC — CR# TBD]

Language note: The Arabic version of this Privacy Policy is the legally binding version. This English translation is provided for convenience only. In the event of any conflict between the two versions, the Arabic version prevails.

---

1. Introduction

This Policy explains how influenca collects, stores, uses, and shares personal data when you use our platform — whether through the website or the mobile app. We take your privacy seriously and are committed to the principles set out in applicable Jordanian data protection law.

Please read this Policy carefully. By creating an account or using the service, you agree to the practices described here.

2. Data We Collect

2.1 Account and Authentication Data

• Core registration data: Full name, username, email address, hashed password (we never store plaintext passwords), account type (brand, creator, agency), country.
• Third-party sign-in (Google): If you choose to sign in via Google, we receive your OAuth account ID, verified email address, display name, and profile photo.
• One-time password (OTP): A 10-minute temporary code sent to your email to verify identity at registration.

2.2 Creator Profile Data

• Display name, bio, niche, age (for legal age verification — never shown to brands), dialect, content languages, location (city and country).
• Linked social accounts: username on each platform (Instagram, TikTok, Snapchat, YouTube, Twitter/X) and declared follower count.
• Profile photos and portfolio media uploads.
• Mobile phone number (internal use only — never displayed to brands).
• Credit card accountability token (we store only a Stripe token; actual card numbers are never stored by influenca).

2.3 Transaction and Order Data

• Order details: amount, creation date, order status, campaign brief, submitted drafts, delivery deadlines.
• In-platform message history.
• Post URLs submitted for verification.
• Invoice details and payment receipts.

2.4 Payment Data

Payment details are processed directly by the payment gateway (HyperPay or Stripe). We do not store card numbers or CVV codes. We receive and store only: the payment processing token, the last four digits of the card, and the card network (Visa, Mastercard, etc.).

We store your transaction history with influenca: amounts, dates, and statuses.

2.5 Device and System Data

• Device tokens for push notifications via Expo Notifications (iOS via Apple APNs, Android via Google FCM).
• IP address and browser/device metadata at the time of legal acceptance events (Terms acceptance, re-acceptance).
• Activity logs (action type, timestamp) for security and fraud detection purposes.

2.6 User-Generated Content

• Content you create within the platform (text, images, video) — including drafts and portfolio items.
• Reviews and ratings you write.

3. How We Use Your Data

3.1 Operating the Service

• Creating and managing your account; verifying your identity.
• Enabling search and brand-to-creator matching.
• Processing orders, managing escrow, and settling payments.
• Sending operational notifications (order confirmations, action alerts, status updates).

3.2 Compliance and Fraud Prevention

• Verifying the minimum age requirement (18 years) and account eligibility.
• Detecting fraudulent behaviour and preventing platform abuse.
• Retaining transaction records for accounting, tax, and legal compliance under applicable Jordanian requirements.
• Handling disputes and responding to judicial and regulatory requests.

3.3 Platform Improvement

• Analysing usage patterns in aggregate, anonymised form to improve platform features.
• Operating the AI matching algorithm that suggests suitable creators to brands.

3.4 Communication

• Sending order-related notifications, policy-change alerts, and service announcements (via email and in-app notifications).
• Responding to support requests and queries.

4. Data Sharing with Third Parties

We share your data only in the following circumstances.

4.1 Infrastructure Service Providers

Party	Purpose	Geographic location
Neon (PostgreSQL on AWS)	Database hosting	AWS regions outside Jordan
Cloudflare R2	Media storage (images, video)	Cloudflare data centres
Expo Notifications	Push notification delivery	Expo servers (AWS)
Apple APNs	iOS push notifications	Apple servers
Google FCM	Android push notifications	Google servers
Resend	Transactional email delivery	Resend infrastructure (AWS)

4.2 Payment Processors

• HyperPay: Primary payment gateway for Jordan, Saudi Arabia, and UAE.
• Stripe: Secondary payment gateway.

Payment processors are subject to their own privacy terms and to PCI DSS requirements.

4.3 The Other Party to a Transaction

When an order is active, both parties (brand and creator) can see information necessary to fulfil the order — the creator's profile, campaign brief, and order status. Sensitive personal data such as age, phone number, and payment details are never shared between transaction parties.

4.4 Legal and Regulatory Authorities

We may disclose your data in response to a valid court order or regulatory request under applicable Jordanian law and regulations.

We do not sell your personal data to any third party.

5. International Data Transfers

Part of influenca's technical infrastructure is hosted outside Jordan (see the table in Section 4.1). By accepting this Policy, you consent to the transfer of your personal data to these locations for service operation purposes. We ensure that all external service providers maintain internationally recognised data security standards (ISO 27001, SOC 2, PCI DSS where applicable).

6. Data Retention

Data type	Retention period
Active account data	For the lifetime of the account
Transaction records and invoices	7 years (Jordanian accounting and tax requirements)
Legal acceptance records	7 years
In-platform message history	For the lifetime of the account; deletion available on account closure
Portfolio media and drafts	For the lifetime of the account; individual items can be deleted from profile settings
Security activity logs	1 year

After account deletion, we retain the minimum data necessary to satisfy the legal and accounting obligations listed above.

7. Your Rights

Under the general principles of data protection and applicable Jordanian regulations, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data (subject to the legal retention requirements listed above).
• Objection: Object to the use of your data for non-essential analytical purposes.
• Portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@influenca.com. We will respond within 30 working days.

8. Cookies

The influenca website uses cookies for session management, authentication, and language preference. For full details, please refer to our separate Cookie Policy. The mobile app does not use cookies; it uses locally stored session tokens and the device push-notification token, both of which are covered by this Policy.

9. Children

The platform is not directed at persons under 18 years of age and does not permit them to create accounts. If we become aware that a minor has submitted their data, we will delete the account and associated data immediately. If you believe a minor has registered on the platform, please contact us at privacy@influenca.com.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Password hashing using the bcrypt algorithm.
• Role-based access controls (RBAC) so platform users access only the data they need.
• Regular security reviews and log monitoring for suspicious activity.

Despite these measures, no digital system is entirely secure. In the event of a data breach, we will notify you within the legally required timeframe.

11. Changes to This Policy

We may update this Policy periodically. If material changes are made, we will notify you by email or via an in-app alert. Your continued use of the platform after the effective date constitutes acceptance of the updated Policy.

12. Privacy Contact

For any privacy-related query or request:

Email: privacy@influenca.com Address: [Influenca Digital Marketing LLC — CR# TBD] — Amman, Jordan

---

[Influenca Digital Marketing LLC — CR# TBD] — All rights reserved 2026