Privacy Policy
Version 2.0 · Last updated: 5 August 2026
Linkfluencer, a French société par actions simplifiée with variable capital, RCS Créteil 929 237 451, registered office at 21 Rue du 18 Juin 1940, 94700 Maisons-Alfort, France, is the data controller for the processing described in this policy. Privacy contact: team@linkfluencer.io. We have not appointed a Data Protection Officer; this mailbox is our dedicated privacy contact point. For users in the United Kingdom, LINKFLUENCER UK LTD will act as our UK contact point once operational; until then, UK users can use the same mailbox.
This policy applies to: visitors of linkfluencer.io; creators and shoppers using the Linkfluencer app (Shop, Post & Earn); brand users of our dashboard; business contacts and prospects; and anyone who contacts us. It is written to comply with the GDPR (EU) 2016/679, the French Loi Informatique et Libertés and the UK GDPR. Cookies are covered separately in our Cookie Policy.
Account and application data: name, email address, date of birth, country of residence, social media handles, and the information you provide when applying (creators must have 1,000+ followers).
Connected account data: when you connect your Instagram or TikTok account through the official platform interfaces, we retrieve data about the account and its performance: follower counts, engagement, like-to-view and comment-to-like ratios, virality indicators, posting activity and aggregated audience characteristics. We do not collect your social media passwords.
Social Score data: the score we derive from the above, its history and tier.
Campaign and claim data: the campaigns you join, the content you post for them and its performance, and the proof of purchase you upload. The app instructs you to photograph only the relevant part of a receipt; whatever you upload is processed for verification and fraud control.
Payout data: your payment account is provided by ConnectPay UAB, which collects and processes your identity verification (KYC) data as an independent controller under its own privacy policy. Linkfluencer receives account references and payout status, not your full KYC file.
Technical data: log data, device type, app version and diagnostics needed to run and secure the Services. The app requests camera or photo access solely for receipt upload. We do not collect location data.
Website forms: the information brands submit when booking a demo or contacting us.
Business contacts and prospects: professional contact details of people at brands we work with or approach (name, role, business email), sourced from our interactions, LinkedIn and public web sources, professional prospecting databases and tools (such as Apollo, ZoomInfo or lemlist), events, and occasionally licensed contact lists. When we first contact a prospect, we tell them where their data came from.
Support communications: messages you exchange with us.
| Purpose | What it involves | Legal basis |
|---|---|---|
| Operating your account and the platform | Application review, account management, connected accounts, campaigns, in-app feed | Performance of a contract (Art. 6(1)(b) GDPR) |
| Calculating the Social Score and Rewards | Deriving your score from connected account data; determining your cashback tier | Performance of a contract |
| Verifying claims and preventing fraud | Receipt analysis, post verification, detection of fake engagement and duplicate claims | Performance of a contract; legitimate interest (platform integrity) |
| Paying you | Crediting confirmed Rewards via ConnectPay | Performance of a contract; legal obligations (AML rules applied by ConnectPay) |
| Communicating with you | Service messages about claims, payouts and your account | Performance of a contract |
| Marketing to users | Emails and push notifications about campaigns and features, with opt-out in every message and in settings | Legitimate interest for similar services; consent where required |
| B2B prospecting | Contacting people at brands that may benefit from Linkfluencer | Legitimate interest (developing our business), with a right to object at any time |
| Complying with the law | Accounting records, tax reporting including DAC7, responses to lawful requests from authorities | Legal obligation (Art. 6(1)(c) GDPR) |
| Improving and securing the Services | Diagnostics, logs, abuse prevention, aggregated statistics | Legitimate interest |
The Social Score is calculated automatically and determines the cashback tier that applies to you, which is a significant effect on your Rewards. The safeguards required by Article 22 GDPR apply: you may at any time request an explanation of your score, contest it, and obtain a human review by writing to team@linkfluencer.io. Receipt verification combines automated reading (OCR) with human review: flagged or borderline claims are checked by a person, and any final rejection can be contested with a human re-examination and, where the issue can be fixed, a resubmission right as described in the Creator Terms.
Brands: when you join a campaign, the brand sees your public handle, your campaign content and aggregated performance statistics. Brands do not receive your email address, your Social Score breakdown or your identity documents, and may not use your data outside the platform.
ConnectPay UAB: for opening your payment account, KYC and payouts, as an independent controller.
Service providers (processors): by category: cloud hosting in an EU region of a major provider; email delivery; push notification infrastructure; receipt-analysis (OCR) software; support tooling. Each is bound by a data processing agreement under Article 28 GDPR. The current vendor list is available on request at team@linkfluencer.io.
Professional advisers and authorities: lawyers, accountants and auditors under confidentiality; tax authorities (including DAC7 reporting of creator earnings); courts and regulators where the law requires.
Corporate events: in case of a merger, acquisition or restructuring (including within the Linkfluencer group), data may be transferred to the successor entity under equivalent protections.
We do not sell personal data.
Your data is hosted in the European Union. Some providers (for example sign-in with Google, or push notification infrastructure) may process limited data in the United States or other third countries; such transfers rely on the EU-US Data Privacy Framework and its UK Extension where the provider is certified, or on the European Commission's Standard Contractual Clauses and the UK Addendum, with supplementary measures where needed. Details are available on request.
You have the right to access your data, obtain a copy, rectify it, have it erased, restrict its processing, receive it in a portable format, object to processing based on legitimate interest, and withdraw any consent at any time without affecting prior processing. Objection to direct marketing is absolute: we stop immediately. You may also give instructions on the fate of your data after your death (French law). To exercise your rights, or to delete your account, write to team@linkfluencer.io (deletion will also be available in the App as it develops). We may ask you to confirm your identity, and we respond within one month, extendable by two months for complex requests. After account deletion, we keep only what the law requires (see section 8) and erase the rest. You can complain to a supervisory authority at any time: the CNIL (cnil.fr) in France, the ICO (ico.org.uk) in the UK, or the authority of your country of residence.
We apply appropriate technical and organisational measures: encryption in transit, encrypted storage, EU hosting, access controls and logging, least-privilege access for our team, and contractual security obligations on our processors. No system is perfectly secure; if a breach likely to result in a high risk to you occurs, we will notify you and the competent authority as the GDPR requires.
The Services are reserved for adults (18+). We do not knowingly process children's data; if you believe a minor has created an account, contact us and we will delete it.
We review this policy at least annually and whenever our processing changes. The version and date above identify the current text; material changes are notified in the App or by email.
Linkfluencer, 21 Rue du 18 Juin 1940, 94700 Maisons-Alfort, France · RCS Créteil 929 237 451 · team@linkfluencer.io.
