Privacy Policy

1. Data controller

The data controller is Edin Kahvedžić, Visoko, Bosnia and Herzegovina. Contact: info@influencestats.io.

2. What data we collect

Account data

When you register, we collect your email address and (optionally) your name. If you sign in with Google, we receive your name and email from Google.

Usage data

We collect log data including IP address, browser type, pages visited, and timestamps. This data is used to maintain security and improve the Service.

Payment data

Payment processing is handled entirely by Paddle. We receive a customer ID and subscription status from Paddle but never see or store your full card details.

Cookies

We use cookies to maintain your session and remember your cookie consent preference. See our Cookie Policy for details.

3. How we use your data

• To provide and improve the Service
• To authenticate your session and keep your account secure
• To send transactional emails (email confirmation, alert notifications, weekly digest)
• To process and manage your subscription via Paddle
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal basis for processing

• Contract — processing necessary to provide the Service you signed up for (Art. 6(1)(b) GDPR)
• Legitimate interests — security logging, fraud prevention, and service improvement (Art. 6(1)(f) GDPR)
• Consent — optional cookies and marketing communications (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
• Legal obligation — retention of billing records (Art. 6(1)(c) GDPR)

5. Third-party services

• Supabase — database and authentication hosting (EU region where available). Data processing agreement in place.
• Resend — transactional email delivery. Processes your email address to deliver emails you request.
• Paddle — payment processing and subscription management. Paddle acts as the Merchant of Record and processes payment data independently.
• Cloudflare Turnstile — CAPTCHA-style bot protection on sign-up and login forms.

6. Data retention

We retain your account data for as long as your account is active. If you close your account we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance (typically up to 7 years for billing records).

7. Your rights

Under the GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time where processing is based on consent

To exercise any of these rights, contact us at info@influencestats.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice on the Service. Continued use after the effective date constitutes acceptance.

10. Contact

Privacy questions or requests: info@influencestats.io