Privacy Policy

InfluBid (“we”, “us”) provides a platform for agencies, brands, and creators to manage campaigns, track ROI, and process payouts. This policy explains what data we collect, how it's used, who we share it with, and how it's protected across the Agency, Brand, and Creator portals.

Data we collect

Account details (name, email, phone), workspace and campaign data you create, social platform account connections used to verify and sync deliverables, and financial details required to process payouts — including PAN (for identity verification) and bank/UPI details for creators, handled for payment processing via Razorpay.

How we use it

To operate the campaign, ROI, and marketplace features you use; to compute the platform fee and process payouts correctly; to send transactional notifications (invites, approvals, payouts); and to maintain security and audit records.

Your Google/YouTube data

If you connect a YouTube channel as a creator, we request read-only access (youtube.readonly, yt-analytics.readonly) via Google OAuth to fetch your channel ID, title, thumbnail, and subscriber count. We use this solely to display verified channel stats on your profile and to agencies evaluating you for campaigns — we do not access, request, or store your videos' monetization, revenue, or ad-performance data.

InfluBid's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data is never sold, and is shared only as described in “Who we share data with” below. You can revoke InfluBid's access to your Google account at any time from myaccount.google.com/permissions.

Who we share data with

We do not sell your personal data. We share it only with:

• Razorpay / Razorpay X — our RBI-authorized payment partner, to process campaign payments and disburse creator payouts. Bank account and UPI details you provide are sent directly to Razorpay to create a payout destination; we retain only a masked reference (e.g. last 4 digits), not full account numbers.
• Resend and SMTP (email) and Twilio (SMS) — to deliver transactional notifications such as invites, approvals, and payout confirmations.
• Google/YouTube APIs — solely to fetch the channel data described above, and only for creators who explicitly connect their channel.
• Legal and compliance — tax authorities and regulators where required by law, court order, or to protect the rights and safety of InfluBid and its users.

We do not share your data with third parties for their own advertising or marketing purposes.

How we protect your data

• All data in transit is encrypted via HTTPS/TLS.
• OAuth tokens and third-party integration credentials (e.g. YouTube, Instagram) are encrypted at rest using AES-256-GCM before being stored.
• Bank account numbers are not stored in full on our servers — they are transmitted directly to Razorpay, a PCI-DSS compliant payment processor, and only a masked reference is retained by us.
• Access to financial records (PAN, payout, and banking data) is restricted to authorized personnel and systems required for payment processing and audit purposes, via role- and workspace-scoped access controls.

Data retention

Financial records related to payouts are retained for the period required under applicable Indian tax law (currently up to 7 years) even after an account is closed.

Contact

Questions about this policy, or requests to access, correct, or delete your data, can be sent to privacy@influbid.com.