Privacy Policy

Influ8 is operated by Sonisi AS, a company registered in Norway (the "Company", "we", "us", "our"). For any privacy-related question you can reach us at contact@influ8.com. Sonisi AS is the data controller of personal data processed through Influ8.

We process the following categories of personal data:

• Account data: name, email, password hash, profile picture, language and timezone.
• Content data: drafts, captions, hooks, scripts, video and audio files you upload, automatically generated transcripts, thumbnails and on-screen text extracted from your uploads.
• Connected-platform data: if you connect a TikTok, Instagram, YouTube, X / Twitter or LinkedIn account, we receive the public profile information, post metadata, captions, hashtags and aggregated performance metrics (views, likes, watch-time, follower count) that the platform makes available through its API for the scopes you authorise. We do not access private messages.
• Creator Memory: a derived profile of your writing style, tone, recurring topics, hooks and posting cadence, built from the content you submit and analyse. This is used only to personalise your own scores and rewrites.
• Gamification data: scores, streaks, levels, badges and progress earned within the Service.
• Usage data: pages viewed, features used, scores generated, device and browser metadata, IP address, approximate location (city level) derived from IP.
• Billing data: if you subscribe to a paid plan, payment data is handled by our payment processor; we never store full card numbers.
• Communications: emails and support messages you send us.

• Performance of contract (GDPR Art. 6(1)(b)): to deliver the service you signed up for, including scoring content, generating rewrites, syncing with connected platforms, and maintaining your Creator Memory.
• Legitimate interests (GDPR Art. 6(1)(f)): to secure the service, prevent abuse and fraud, debug issues, and improve product quality through aggregated, non-identifying analysis.
• Consent (GDPR Art. 6(1)(a)): for optional analytics, marketing emails, non-essential cookies and connecting third-party social accounts. You can withdraw consent at any time.
• Legal obligation (GDPR Art. 6(1)(c)): to comply with tax, accounting and law-enforcement requirements.

Content you submit is processed by third-party large language model providers to generate scores, predictions, hook rewrites and trend analyses. Scores and predictions are statistical estimates based on patterns in historical content. They are not guaranteed outcomes and are not a substitute for your own judgement.

We do not use your content or your Creator Memory to train public foundation models. Where providers offer a "no-training" or "zero data retention" data path, we use it by default.

Influ8 does not make decisions that produce legal or similarly significant effects on you solely by automated means within the meaning of GDPR Art. 22. You can always request human review of any output or decision by emailing contact@influ8.com.

When you connect TikTok, Instagram, YouTube, X / Twitter or LinkedIn, you authorise that platform to share specific data with us under their developer terms. We use this data only to power features you have activated (for example: pulling your last posts to train Creator Memory, or fetching performance metrics to benchmark new drafts). You can disconnect any platform at any time from your account settings, which revokes our access and triggers deletion of platform-sourced data within 30 days, subject to the retention rules below.

We share personal data only with vetted sub-processors strictly necessary to run the service: cloud hosting and database infrastructure, authentication, payment processing, transactional email, analytics, error monitoring, and AI model providers. All sub-processors are bound by Data Processing Agreements and process data on our documented instructions only. A current list is available on request by emailing contact@influ8.com.

Where personal data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures to ensure an equivalent level of protection.

We keep account data for as long as your account is active. Uploaded videos and audio files are kept for as long as you keep them in your library; you can delete them individually at any time. Your Creator Memory is kept while your account is active and can be wiped at any time from account settings. After account deletion, all personal data is removed within 30 days, except where we are legally required to retain it (e.g. accounting records, typically 5 years under Norwegian law). Encrypted backups are purged within 90 days.

You have the right to:

• access your personal data and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to processing;
• data portability (export your content and Creator Memory in a structured, machine-readable format);
• withdraw consent at any time;
• request human review of any AI-generated output;
• lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

To exercise any of these rights, email contact@influ8.com. We respond within 30 days.

We protect personal data with encryption in transit (TLS 1.2+), encryption at rest, role-based access control, audit logging and regular security reviews. Access to production systems is limited to authorised engineers under least-privilege principles. No system is perfectly secure; if a breach affects your rights, we will notify you and the supervisory authority within 72 hours as required by GDPR Art. 33–34.

We use strictly necessary cookies to keep you signed in, remember preferences and protect against fraud. Analytics, performance and marketing cookies are only set with your consent through our cookie banner. You can change your choices at any time by clearing site data in your browser or by emailing us.

Influ8 is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We only send marketing emails to users who opt in or to existing customers receiving information about similar features (soft opt-in under EU ePrivacy rules). Every marketing email contains a one-click unsubscribe link.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect.

Sonisi AS
Oslo, Norway
contact@influ8.com

We have not appointed a Data Protection Officer as we are not required to under GDPR Art. 37. For privacy questions, please use the email above.