Influbriz

Privacy Policy

Last updated: 2 November 2026

[Your Company Name] (“we”) operates Influbriz. This policy explains what we collect, why, and the choices you have. We self-host all data on our own servers; no third-party backend-as-a-service providers hold your data.

What we collect

  • Account data: email, password hash (bcrypt), username, display name, bio, avatar.
  • Page content: the blocks you create, including links, text, uploaded images and embeds.
  • Social connections: OAuth access/refresh tokens (AES-256-GCM encrypted at rest), platform user id and username, and cached public metrics such as follower counts and your latest post preview.
  • Analytics: page views and block clicks with timestamp, referrer domain and country. No cookies are set on public pages and IP addresses are not stored; they are used transiently for rate limiting only.
  • Subscribers: emails visitors submit to your newsletter block, visible only to you.
  • Billing: Razorpay subscription and customer identifiers. Card details never touch our servers.

How we use it

To run your page, show live stats, send transactional emails (verification, password reset, reconnect notices) via Resend, process payments, prevent abuse and improve the Service. We do not sell personal data or use it for advertising.

Third parties

Razorpay (payments), Resend (email), Let’s Encrypt (certificates), and the social platforms you choose to connect. Embedded blocks (YouTube, Spotify, OpenStreetMap, etc.) load content from those providers, who may set their own cookies on public pages.

Retention

Raw analytics events are deleted after 180 days. Social tokens are deleted the moment you disconnect. Backups rotate every 7 days (30 days offsite).

Your rights and deletion

You can export subscribers, change or delete content, and delete your account from Settings. Account deletion cascades to every row and uploaded file we hold about you. For access or correction requests, or to withdraw consent for a connected platform, contact [privacy@yourdomain.com]. Residents of the EU/UK and India have additional statutory rights which we honour.

Security

TLS everywhere, encrypted tokens, hashed passwords, rate limiting, isolated per-project databases and least-privilege containers. No system is perfectly secure; report issues to [privacy@yourdomain.com].

Changes

We will notify you of material changes by email or in the dashboard.