Platform Privacy Policy
Last updated: July 8, 2026.
1. Who we are
The data controller is INFLUENCER CAMP S.R.L. ("Influencer Camp", "we", "us", or "our"), with registered office at Via Giovanni Pascoli 10, Dello (BS), Italy, VAT number 04580410985. You can reach us at privacy@influencer.camp.
2. What this Policy covers
This Privacy Policy describes how we collect and process personal data when you visit our websites, create an account, or use the Service. It also describes the rights you have under applicable data protection law.
3. Personal data we collect
We collect personal data in the following categories:
- Account data: email address, display name, password hash (when you register with a password), and the identifier returned by the third-party sign-in provider you use (Google, Microsoft, Apple, or Discord).
- Profile data: name, avatar, language preference, team membership, and any additional information you provide in your settings.
- Connected platform data: data we retrieve on your behalf from the Third-Party Platforms you connect (for example Twitch channel metrics, YouTube channel statistics, Instagram or TikTok account statistics). The exact scopes are shown at the time you grant access and can be revoked at any time.
- Usage and device data: pages visited, actions taken in the Service, timestamps, IP address, browser and operating system, and similar diagnostic information.
- Communications: messages you send to us, support requests, and our responses.
- Data of monitored, non-connected profiles: publicly accessible profile and statistical information (for example username or handle, profile picture, follower and content counts, engagement metrics) relating to creators who have not connected their account. This data is obtained from a source other than the data subject; see Section 5 and the notice under Art. 14 GDPR.
We do not knowingly collect special-category data (Art. 9 GDPR).
4. Purposes and legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and operating your account, providing the Service | Performance of a contract (Art. 6(1)(b)) |
| Authenticating you and keeping your account secure | Performance of a contract (Art. 6(1)(b)) and our legitimate interest in protecting the Service (Art. 6(1)(f)) |
| Retrieving and processing data from connected Third-Party Platforms | Performance of a contract (Art. 6(1)(b)) following your explicit authorisation of the relevant scopes |
| Collecting and processing statistical data from monitored, non-connected profiles, gathered from publicly accessible sources | Our legitimate interest in providing analytics and benchmarking tools to creators, media agencies, and brands (Art. 6(1)(f)), subject to the right to object under Art. 21 |
| Sending service-related notifications | Performance of a contract (Art. 6(1)(b)) |
| Sending marketing communications | Consent (Art. 6(1)(a)), which you can withdraw at any time |
| Analytics and product improvement | Consent for non-essential cookies and tracking; our legitimate interest in improving the Service for measurements that do not rely on cookies |
| Complying with legal obligations (accounting, tax, responses to authorities) | Legal obligation (Art. 6(1)(c)) |
| Defending or pursuing legal claims | Legitimate interest (Art. 6(1)(f)) |
5. How we obtain personal data
We obtain personal data directly from you (when you register, configure the Service, or contact us) and from the Third-Party Platforms you authorise. Some technical data is collected automatically when you use the Service (for example via server logs and strictly necessary cookies).
For monitored profiles that have not connected their account, the related data is not obtained from the data subject but collected from publicly accessible profile pages through specialised third-party providers. Under Art. 14 GDPR: the source is the public pages of the originating social platforms; the legal basis is the legitimate interest set out in Section 4; the retention periods are stated in Section 8; and the data subject may at any time object to this processing under Art. 21 GDPR and exercise the other rights described in Section 9 by writing to privacy@influencer.camp. We have carried out a legitimate-interests assessment (balancing our interest against data subjects' rights), available on request. Where individual notice is impossible or would involve a disproportionate effort, this public notice is the appropriate measure under Art. 14(5)(b) GDPR.
6. Recipients and processors
We share personal data only with the categories of recipients below:
- Cloud and infrastructure providers that host the Service, including Cloudflare (CDN, edge runtime) and our hosting providers.
- Authentication providers you choose to sign in with (Google, Microsoft, Apple, Discord).
- Third-Party Platforms you connect (for example Twitch, YouTube, Instagram, TikTok), to the extent necessary to retrieve data on your behalf.
- Third-party data collection and aggregation services, used to schedule and run the data collection jobs you request.
- Operational providers for email delivery, error monitoring, and customer support.
- Professional advisers (lawyers, accountants, auditors) bound by confidentiality.
- Public authorities when required by law or to defend legal rights.
Where these providers act as processors, they are bound by a data processing agreement that meets the requirements of Art. 28 GDPR.
7. International transfers
Some of our providers are based outside the European Economic Area, in particular in the United States. When personal data is transferred outside the EEA we rely on a valid transfer mechanism under Chapter V GDPR, such as the EU-US Data Privacy Framework (for certified recipients) or the European Commission's Standard Contractual Clauses, supplemented where needed by additional technical or organisational measures. You can request a copy of the applicable safeguards by contacting us at privacy@influencer.camp.
8. Retention
We keep personal data only for as long as necessary for the purposes for which it was collected and for any related legal obligations. Indicative retention periods:
- Account data: for the duration of your account, plus up to 12 months after closure.
- Connected platform data: while your connection is active and for up to 12 months after you disconnect, unless you request earlier deletion.
- Data of monitored, non-connected profiles: for as long as needed to provide the analytics and benchmarking features, and in any case deleted or anonymised once the profile is no longer monitored or upon the data subject's objection.
- Server logs: typically 30 to 90 days.
- Billing and tax records: 10 years, as required by Italian law.
- Records of consent (for cookies and marketing): up to 2 years from the date the consent was given or last refreshed.
9. Your rights
Subject to the conditions set out in the GDPR, you have the right to:
- access the personal data we hold about you (Art. 15);
- request correction of inaccurate or incomplete data (Art. 16);
- request deletion of your data (Art. 17);
- request restriction of processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on our legitimate interests, including profiling (Art. 21);
- withdraw consent at any time, without affecting the lawfulness of past processing.
You can exercise these rights by writing to privacy@influencer.camp. We will respond within one month and may extend that period by two further months for complex requests, as permitted by Art. 12(3) GDPR. You can also lodge a complaint with the Italian Garante per la protezione dei dati personali (garanteprivacy.it) or your local supervisory authority.
10. Automated decision-making
We carry out analytical profiling, for example computing aggregate metrics, growth rates, and benchmarks. However, we do not make decisions about you that produce legal or similarly significant effects based solely on automated processing, within the meaning of Art. 22 GDPR.
11. Security
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. These measures include encryption in transit, hardened authentication, access controls, and regular review of our security practices. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.
12. Children
The Service is not directed at children below the age of digital consent applicable to them (14 in Italy). We do not knowingly collect personal data from such children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
13. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can change your preferences at any time through the cookie banner.
14. Changes to this Policy
We may update this Policy from time to time. The most recent version is always available at this URL, with the "Last updated" date shown at the top. Where changes are material we will notify you in advance through the Service or by email.
15. Contact
Privacy questions and requests can be sent to privacy@influencer.camp.