Privacy Policy

Influ8 is operated by Sonisi AS, a company registered in Norway (the "Company", "we", "us", "our"). For any privacy-related question you can reach us at contact@influ8.com. Sonisi AS is the data controller of personal data processed through Influ8.

We process the following categories of personal data:

• Account data: name, email, password hash, profile picture, language and timezone.
• Content data: drafts, captions, hooks, scripts, video and audio files you upload, automatically generated transcripts, thumbnails and on-screen text extracted from your uploads.
• Connected-platform data: if you connect a TikTok, Instagram, YouTube, X / Twitter or LinkedIn account, we receive the public profile information, post metadata, captions, hashtags and aggregated performance metrics (views, likes, watch-time, follower count) that the platform makes available through its API for the scopes you authorise. We do not access private messages.
• Creator Memory: a derived profile of your writing style, tone, recurring topics, hooks and posting cadence, built from the content you submit and analyse. This is used only to personalise your own scores and rewrites.
• Gamification data: scores, streaks, levels, badges and progress earned within the Service.
• Usage data: pages viewed, features used, scores generated, device and browser metadata, IP address, approximate location (city level) derived from IP.
• Billing data: if you subscribe to a paid plan, payment data is handled by our payment processor; we never store full card numbers.
• Communications: emails and support messages you send us.

• Performance of contract (GDPR Art. 6(1)(b)): to deliver the service you signed up for, including scoring content, generating rewrites, syncing with connected platforms, and maintaining your Creator Memory.
• Legitimate interests (GDPR Art. 6(1)(f)): to secure the service, prevent abuse and fraud, debug issues, and improve product quality through aggregated, non-identifying analysis.
• Consent (GDPR Art. 6(1)(a)): for optional analytics, marketing emails, non-essential cookies and connecting third-party social accounts. You can withdraw consent at any time.
• Legal obligation (GDPR Art. 6(1)(c)): to comply with tax, accounting and law-enforcement requirements.

Content you submit is processed by third-party large language model providers to generate scores, predictions, hook rewrites and trend analyses. Scores and predictions are statistical estimates based on patterns in historical content. They are not guaranteed outcomes and are not a substitute for your own judgement.

We do not use your content or your Creator Memory to train public foundation models. Where providers offer a "no-training" or "zero data retention" data path, we use it by default.

Influ8 does not make decisions that produce legal or similarly significant effects on you solely by automated means within the meaning of GDPR Art. 22. You can always request human review of any output or decision by emailing contact@influ8.com.

When you connect TikTok, Instagram, YouTube, X / Twitter or LinkedIn, you authorise that platform to share specific data with us under their developer terms. We use this data only to power features you have activated (for example: pulling your last posts to train Creator Memory, or fetching performance metrics to benchmark new drafts). You can disconnect any platform at any time from your account settings, which revokes our access and triggers deletion of platform-sourced data within 30 days, subject to the retention rules below.

Sound Lab lets you score audio in two ways. When you upload your own track, the audio file is processed by our AI providers to generate scores, time-stamped fixes and clip suggestions. Audio files are stored only for as long as you keep them in your library and can be deleted at any time.

When you paste a third-party link (YouTube, SoundCloud, TikTok, Reels), we fetch only the public metadata that those platforms expose through their public oEmbed or Data API endpoints: title, author or channel name, thumbnail, duration, public view and engagement counts, and the public description. We do not download, store, re-host or redistribute the audio file itself, and we do not access any private, login-gated, or age-restricted data. We store the URL you submitted, the public metadata we retrieved, and the score result so you can see it again in your history.

We share personal data only with vetted sub-processors strictly necessary to run the service. All sub-processors are bound by Data Processing Agreements and process data on our documented instructions only. The current list:

We notify users by email or in-app notice at least 14 days before adding a new sub-processor that processes personal data. To object, email contact@influ8.com.

Your content and prompts are not used to train any third-party AI model. We have opted out of training where the provider offers that setting and contractually require it where they do not.

Where personal data is transferred outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures to ensure an equivalent level of protection.

We keep account data for as long as your account is active. Uploaded videos and audio files are kept for as long as you keep them in your library; you can delete them individually at any time. Your Creator Memory is kept while your account is active and can be wiped at any time from account settings. After account deletion, all personal data is removed within 30 days, except where we are legally required to retain it (e.g. accounting records, typically 5 years under Norwegian law). Encrypted backups are purged within 90 days.

You have the right to:

• access your personal data and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to processing;
• data portability (export your content and Creator Memory in a structured, machine-readable format);
• withdraw consent at any time;
• request human review of any AI-generated output;
• lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority.

To exercise any of these rights, email contact@influ8.com. We respond within 30 days.

We protect personal data with encryption in transit (TLS 1.2+), encryption at rest, role-based access control, audit logging and regular security reviews. Access to production systems is limited to authorised engineers under least-privilege principles. No system is perfectly secure; if a breach affects your rights, we will notify you and the supervisory authority within 72 hours as required by GDPR Art. 33–34.

We use strictly necessary cookies to keep you signed in, remember preferences and protect against fraud. Analytics, performance and marketing cookies are only set with your consent through our cookie banner. You can change your choices at any time by clearing site data in your browser or by emailing us.

Influ8 is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

Certain content must never be uploaded to or generated through Influ8, including graphic violence, sexual content involving minors, non-consensual intimate imagery, sexual harassment, bullying, threats, doxxing, hate speech, and non-consensual deepfakes of real people. The full list lives in our Terms of Service (section 7, Acceptable use).

To enforce these rules we may scan uploads and generated output using automated systems and, where necessary, human review. We may remove content, suspend accounts, and report illegal material (including CSAM and credible threats of violence) to law-enforcement and other competent authorities as required by law. Limited content metadata may be retained after removal for safety, audit and legal-compliance purposes.

We only send marketing emails to users who opt in or to existing customers receiving information about similar features (soft opt-in under EU ePrivacy rules). Every marketing email contains a one-click unsubscribe link.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect.

This Privacy Policy and any dispute arising from or related to it, or to the processing of your personal data by Sonisi AS, are governed by the laws of Norway, without regard to its conflict of laws rules. The courts of Oslo, Norway (Oslo tingrett) have exclusive jurisdiction, without prejudice to your statutory right as an EU/EEA data subject to lodge a complaint with the supervisory authority in your country of residence or to seek a judicial remedy in your local courts under GDPR Art. 77 and 79.

Sonisi AS
Oslo, Norway
contact@influ8.com

We have not appointed a Data Protection Officer as we are not required to under GDPR Art. 37. For privacy questions, please use the email above.