Privacy

1 · Data controller

The controller responsible for processing your personal data is Pavel Gurov, trading as Gurov Digital, Rodenbergstraße 21, 10439 Berlin, Germany. You can reach us at support@getinfluencerly.com.

2 · Public Instagram data we read

The service works exclusively with publicly available Instagram data: the public profile you name (bio, post and follower counts, recent public posts and captions) and public information about accounts interacting with it (public follower and commenter profiles). We never log in to Instagram, never ask for an Instagram password, and never access private accounts or private data.

Legal basis: our legitimate interest and yours in producing the analytics you request (Art. 6 (1) (f) GDPR). We limit this processing to public data, cap the number of third-party profiles read per analysis (at most 50 followers and 50 commenters), and delete the results on the schedule in section 6.

3 · Third-party profiles (followers & commenters)

When we analyse an account, some of the public data belongs to third parties (followers and commenters) who did not contact us directly. We process only data they made public, for the sole purpose of the requested analysis, and we do not build lasting profiles of them or contact them. Because these people number in the many and we hold no means of reaching them, individually informing each one would involve disproportionate effort within the meaning of Art. 14 (5) (b) GDPR; this notice serves as the public information about that processing. Any such person may object to the processing of their data at support@getinfluencerly.com, and we will remove it.

4 · Account & billing data

To sign in you give us your email address; sign-in is passwordless via a link we email you. We store your email address, your plan and billing status, and the analyses you run — to provide the service and your account (Art. 6 (1) (b) GDPR). Payments are handled by Stripe; we keep the billing status and invoices Stripe returns, and retain invoice records for the statutory period (Art. 6 (1) (c) GDPR).

5 · Service providers (processors)

We use the following providers to run Influencerly:

• Render — application hosting (EU region, Frankfurt)
• Supabase — database and authentication (EU region, Frankfurt)
• Resend — transactional email delivery (sign-in links, receipts)
• Stripe — payment processing
• Apify — reading of the public Instagram data described above
• Anthropic — automated interpretation of that public data into your dashboard

Some providers (in particular Anthropic and Apify) may process data outside the EU/EEA. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision. This site also loads its display fonts from Google Fonts, which may receive your IP address for that purpose. We enter into a data-processing agreement with each provider that acts as our processor.

6 · How long we keep it

Analysis snapshots and the public data they are built from are kept for at most 30 days and then deleted or recomputed. Account data (email, plan status) is kept for as long as your account exists; when you delete your account it is removed, except records we must retain by law, such as invoices (kept for the statutory retention period).

7 · Automated processing

Your dashboard is produced by automated analysis of public data, but it does not make any decision that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR. The results are informational estimates.

8 · Cookies

We use only strictly necessary cookies — the ones that keep you signed in. We do not use advertising or third-party tracking cookies, so there is no consent banner to click through.

9 · Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection regarding your personal data, and the right to withdraw consent where processing is based on it. To exercise any of these, email support@getinfluencerly.com. You also have the right to lodge a complaint with a supervisory authority — for us that is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).