Privacy Policy

This Privacy Policy explains how Hakan Kozaklı, operating influgen.ai ("influgen," "we," "our," or "us"), collects, uses, stores, discloses, and otherwise processes personal data when you visit https://influgen.ai, create an account, connect third-party services, purchase a plan, generate content, or otherwise use influgen.ai.

influgen.ai is an international software-as-a-service product based in Turkey. For purposes of applicable data protection law, including the GDPR and Turkey's Personal Data Protection Law No. 6698 (KVKK), influgen.ai is the controller (veri sorumlusu) of the personal data described in this Privacy Policy unless we expressly state that we process data on a customer's behalf.

This Privacy Policy applies to personal data we collect directly from you, automatically through your use of the service, from authentication providers, payment processors, analytics providers, social media platforms that you connect, and from other service providers that support the product.

It does not apply to third-party websites, applications, payment pages, or social networks that have their own privacy notices. When you leave influgen.ai or authorize a third party to access your data, that third party's terms and privacy practices apply.

We collect account information such as your email address, display name, password hash where applicable, account status, language and timezone preferences, referral or marketing attribution data, consent records, and customer support history.

If you sign in or register with Google or Sign in with Apple, we may receive profile and authentication details such as your provider user ID, email address, name, profile photo, and other information you authorize the provider to share. If you use email one-time passcodes, we collect the email address needed to send and verify those codes.

When you purchase a subscription or credit pack, payment processing is handled by Paddle.com, our merchant of record, which collects your payment and billing details as an independent controller under its own privacy policy (or by Apple for purchases in our iOS app). The billing details you save in influgen.ai (name, company, VAT ID and address) are stored at Paddle so they appear on your invoices. We do not store your full payment card number, but we may receive limited billing metadata such as customer IDs, subscription status, invoice records, card brand, last four digits, billing country, payment method identifiers, renewal dates, tax information, and transaction history.

We use this information to provision plans, prevent fraud, manage renewals and cancellations, send receipts, respond to billing questions, and comply with tax, accounting, and legal obligations.

We collect the prompts, uploads, reference media, character profiles, captions, generation settings, campaign instructions, generated images, generated videos, voice or likeness references you provide, and other content you create or store through influgen.ai.

We also collect workflow metadata related to your generations and publishing activity, such as model selection, quality settings, content status, moderation or review flags, asset URLs, publishing schedules, revision history, and export activity. Generated media may be stored in S3-compatible infrastructure, including MinIO-backed storage and related delivery systems.

Some features process biometric data. To keep an influencer's face consistent, our own face service, running on our servers in the European Union, computes a numerical face template from the character's reference images and compares generated images against it. If you train a face model, the character's reference photos are used to train a model for that character only. If you clone or design a voice, your voice samples are sent to ElevenLabs to create that voice.

We process this data only to provide these features to you, on the basis of your explicit consent, which you give when you upload reference media or turn on face-model training or voice cloning (GDPR Article 9(2)(a); KVKK Article 6). You may only upload faces and voices of yourself or of adults who have given you their documented consent, as the Terms of Service require.

We never use biometric data to identify people, never sell it, and never use it to train models for anyone else. Face templates, face models and voices are kept until you delete the character or your account; they are then deleted, and backup copies are overwritten within 30 days. You can withdraw consent at any time by deleting them.

If you connect Instagram, TikTok, YouTube, Pinterest, X, or another supported platform, we may collect and store access tokens, refresh tokens, page or channel IDs, usernames, profile images, permissions, posting history, and connection health data needed to publish content or maintain the integration.

Depending on the integration and the permissions you grant, we may also receive engagement and performance information such as post IDs, impressions, views, likes, shares, comments, saves, clickthrough data, and other analytics exposed by the platform. You can usually revoke our access at any time through your influgen.ai settings or directly through the connected platform.

When you connect a YouTube channel, influgen.ai uses YouTube API Services to read your channel details and upload the videos you approve. By connecting, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to the data Google handles. You can revoke our access at any time at https://myaccount.google.com/permissions.

influgen.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We use Google user data only to provide the features you see in influgen.ai, we do not sell it, we do not use it for advertising, and we do not use it to train generalized AI or machine learning models.

We automatically collect technical information about how you access and use the service, including IP address, browser type, device identifiers, operating system, approximate location derived from IP, error logs, request metadata, session events, feature usage, and performance diagnostics.

We also collect activity data such as page views, clicks, timestamps, referrers, generation history, scheduling actions, onboarding progress, and support interactions so that we can operate the service, troubleshoot issues, understand adoption, and improve reliability.

If you use our iOS app, we also process a push notification token and basic device information to send the notifications you choose, and, for purchases in the app, your influgen.ai account ID, which we share with RevenueCat to link your App Store purchases to your account, and the purchase records Apple shares through RevenueCat.

If you join the waitlist, we keep your email address, where you heard about us and any referral code, to tell you when your spot is ready. You can ask us to remove it at any time.

We use cookies, local storage, and similar technologies for session management, authentication, security, remembering preferences, abuse prevention, and measuring service performance. Some cookies are strictly necessary for login, account security, or payment flow continuity.

Where we use optional analytics or similar measurement tools, we will do so in accordance with applicable law and the controls made available through the product or your browser settings. Blocking some cookies may reduce or disable parts of the service.

We use personal data to create and manage accounts, authenticate users, deliver the service, generate images, videos, captions, and plans, store and serve assets, schedule and publish posts, calculate credit usage, provide analytics, process payments, and communicate with you about your account or transactions.

We also use personal data to provide customer support, investigate misuse, detect fraud and security incidents, enforce our Terms, comply with legal requests, improve the quality and safety of the product, develop new features, create aggregated reporting, and send product, service, or legal notices.

If permitted by law, we may also use contact information to send you marketing communications about influgen.ai. You can opt out of non-essential marketing emails at any time by using the unsubscribe link or contacting us.

To generate outputs and operate AI-assisted features, we send prompts, generation parameters, reference images, uploaded media, and related instructions to third-party model and infrastructure providers: fal.ai for image and video generation (running models from providers such as OpenAI, Kuaishou (Kling) and Black Forest Labs), OpenRouter and Anthropic for text, planning and captions (with models from providers such as Anthropic, Google and DeepSeek), and ElevenLabs for voices.

These providers process data only as needed to provide the requested functionality, to maintain their infrastructure, and as otherwise permitted by their agreements and applicable law. Where appropriate, we use contractual protections such as data processing terms and confidentiality obligations, and we may make additional subprocessors available on request for business customers.

We may also use generated content and associated metadata internally to monitor quality, detect misuse, debug failures, and improve product performance and safety. We do not use your content to train general AI models, and we do not sell your prompts, generated media, or connected account tokens. A face model you train is used only for your character.

We do not sell personal data. We disclose personal data only as reasonably necessary to operate the service, fulfill your instructions, protect rights and safety, or comply with law.

We share personal data with these service providers, each under appropriate contractual or legal obligations: Paddle (payments, merchant of record), Apple and RevenueCat (purchases in the iOS app), fal.ai, OpenRouter, Anthropic and ElevenLabs (AI generation), Hetzner (our servers and storage in Finland), Cloudflare (website delivery and security), Resend (email), Google and Apple (sign-in, if you use them), Expo (push notifications), and professional advisers such as lawyers, accountants and auditors.

We may also share data with connected social platforms when you instruct us to publish content, sync account information, or retrieve analytics; with law enforcement, regulators, courts, or other parties where required or permitted by law; and with a buyer, investor, or successor in connection with a merger, financing, restructuring, sale, or other corporate transaction.

Where the GDPR, UK GDPR, or similar laws apply, we typically process personal data on one or more of the following legal bases: performance of a contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent where consent is required.

Our legitimate interests include protecting the platform from abuse, measuring and improving product quality, supporting customers, maintaining reliable infrastructure, preventing fraud, enforcing our agreements, and developing the business in a responsible way. Where we rely on legitimate interests, we consider the impact on your rights and available safeguards.

We do not use solely automated decision-making that produces legal or similarly significant effects on you without appropriate safeguards and the right to request human review where required by law.

influgen.ai operates internationally and uses providers located in multiple countries, including Turkey, the European Union, the United Kingdom, the United States, and other jurisdictions where our vendors or subprocessors maintain infrastructure or support personnel. Our own servers and stored media are in the European Union (Finland). Data sent to AI, payment and email providers may be processed outside your home country, including in the United States.

Where required by applicable law, we implement appropriate safeguards for international transfers, such as standard contractual clauses, equivalent contractual protections, or reliance on another lawful transfer mechanism. You may request more information about these safeguards by contacting [email protected].

We retain personal data for as long as necessary to provide the service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud and abuse. Retention periods vary depending on the data category, your plan, the features you use, and applicable law.

If your account remains active, we typically retain your account information, generation history, connected account records, and stored media until you delete them or close the account. When you delete your account yourself (Account settings), it is deleted at once with its influencers, content, media and connected accounts, and backup copies are overwritten within 30 days. If we terminate an account, we generally keep its data for up to 30 days to allow export, after which we delete it unless longer retention is required for legal, tax, accounting, security, or dispute purposes.

Certain records, such as invoices, billing ledgers, fraud-prevention logs, legal correspondence, and audit trails, may be retained longer when required or permitted by law. Backup copies may remain in secure systems for a limited additional period before being overwritten.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include encryption in transit, encryption at rest where appropriate, access controls, credential management, network protections, logging, and role-based restrictions for internal access.

No internet service, cloud platform, or storage environment is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials, using secure devices and networks, and promptly notifying us if you suspect unauthorized access to your account or connected platforms.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port certain personal data, as well as the right to withdraw consent where processing is based on consent. You may also have the right to know the categories of data we collect and disclose, and to request that we not process data in certain ways under applicable U.S. state privacy laws, including the CCPA or CPRA.

If you are in Turkey, you have the rights listed in Article 11 of the KVKK, including to learn whether your data is processed, to request information and correction, to request deletion, to object to results of exclusively automated analysis, and to claim compensation for unlawful processing. You can also complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

You may exercise privacy rights by emailing [email protected]. We may need to verify your identity and authority before completing a request, and we may deny or limit a request where permitted by law, such as where honoring it would affect the rights of others or prevent us from complying with legal obligations.

You can also update basic account information through your settings, disconnect social accounts directly through the service, revoke third-party OAuth permissions at the provider level, opt out of non-essential marketing emails, and request an export of your content before account deletion.

influgen.ai is not intended for children and may not be used by anyone under 18 years old. We do not knowingly collect personal data from children under 18 or knowingly allow them to create accounts.

If you believe a child under 18 has provided personal data to us, please contact [email protected] so that we can investigate and, where appropriate, delete the information.

We may update this Privacy Policy from time to time to reflect changes to the product, our providers, data practices, or applicable law. When we do, we will post the updated version on this page and update the effective date shown above.

If a change is material, we may also provide notice by email, in-product notification, or another reasonable method before the change becomes effective. Your continued use of influgen.ai after the effective date means the updated Privacy Policy applies to your continued use.

For privacy questions, data subject requests, complaints, legal notices or product support, write to [email protected].

influgen.ai is operated by Hakan Kozaklı from Turkey. If you believe we have not addressed your privacy concern, you may also have the right to contact your local supervisory authority or regulator where applicable.