Privacy Policy

Privacy Policy

Privacy terms describing what influgen.ai collects, how it is used for AI generation and social publishing, and the rights available to users under applicable privacy laws.

Effective date: March 17, 2026

1. Introduction

This Privacy Policy explains how Hakan Kozakli, operating influgen.ai ("influgen," "we," "our," or "us"), collects, uses, stores, discloses, and otherwise processes personal data when you visit https://influgen.ai, create an account, connect third-party services, purchase a plan, generate content, or otherwise use influgen.ai.

influgen.ai is an international software-as-a-service product based in Turkey. For purposes of applicable data protection law, influgen.ai is the controller of the personal data described in this Privacy Policy unless we expressly state that we process data on a customer's behalf.

2. Scope and Application

This Privacy Policy applies to personal data we collect directly from you, automatically through your use of the service, from authentication providers, payment processors, analytics providers, social media platforms that you connect, and from other service providers that support the product.

It does not apply to third-party websites, applications, payment pages, or social networks that have their own privacy notices. When you leave influgen.ai or authorize a third party to access your data, that third party's terms and privacy practices apply.

3. Account, Identity, and Profile Data

We collect account information such as your email address, display name, password hash where applicable, account status, language and timezone preferences, referral or marketing attribution data, consent records, and customer support history.

If you sign in or register through Google OAuth or Facebook OAuth, we may receive profile and authentication details such as your provider user ID, email address, name, profile photo, and other information you authorize the provider to share. If you use email one-time passcodes, we collect the email address needed to send and verify those codes.

4. Billing and Transaction Data

When you purchase a subscription or credit pack, payment processing is handled by Stripe. We do not store your full payment card number, but we may receive limited billing metadata such as customer IDs, subscription status, invoice records, card brand, last four digits, billing country, payment method identifiers, renewal dates, tax information, and transaction history.

We use this information to provision plans, prevent fraud, manage renewals and cancellations, send receipts, respond to billing questions, and comply with tax, accounting, and legal obligations.

5. Content, Prompt, and Character Data

We collect the prompts, uploads, reference media, character profiles, captions, generation settings, campaign instructions, generated images, generated videos, voice or likeness references you provide, and other content you create or store through influgen.ai.

We also collect workflow metadata related to your generations and publishing activity, such as model selection, quality settings, content status, moderation or review flags, asset URLs, publishing schedules, revision history, and export activity. Generated media may be stored in S3-compatible infrastructure, including MinIO-backed storage and related delivery systems.

6. Social Platform and OAuth Data

If you connect Instagram, TikTok, YouTube, Pinterest, X, or another supported platform, we may collect and store access tokens, refresh tokens, page or channel IDs, usernames, profile images, permissions, posting history, and connection health data needed to publish content or maintain the integration.

Depending on the integration and the permissions you grant, we may also receive engagement and performance information such as post IDs, impressions, views, likes, shares, comments, saves, clickthrough data, and other analytics exposed by the platform. You can usually revoke our access at any time through your influgen.ai settings or directly through the connected platform.

7. Usage, Device, and Technical Data

We automatically collect technical information about how you access and use the service, including IP address, browser type, device identifiers, operating system, approximate location derived from IP, error logs, request metadata, session events, feature usage, and performance diagnostics.

We also collect activity data such as page views, clicks, timestamps, referrers, generation history, scheduling actions, onboarding progress, and support interactions so that we can operate the service, troubleshoot issues, understand adoption, and improve reliability.

8. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for session management, authentication, security, remembering preferences, abuse prevention, and measuring service performance. Some cookies are strictly necessary for login, account security, or payment flow continuity.

Where we use optional analytics or similar measurement tools, we will do so in accordance with applicable law and the controls made available through the product or your browser settings. Blocking some cookies may reduce or disable parts of the service.

9. How We Use Personal Data

We use personal data to create and manage accounts, authenticate users, deliver the service, generate images, videos, captions, and plans, store and serve assets, schedule and publish posts, calculate credit usage, provide analytics, process payments, and communicate with you about your account or transactions.

We also use personal data to provide customer support, investigate misuse, detect fraud and security incidents, enforce our Terms, comply with legal requests, improve the quality and safety of the product, develop new features, create aggregated reporting, and send product, service, or legal notices.

If permitted by law, we may also use contact information to send you marketing communications about influgen.ai. You can opt out of non-essential marketing emails at any time by using the unsubscribe link or contacting us.

10. AI Processing and Model Providers

To generate outputs and operate AI-assisted features, we may send prompts, generation parameters, reference images, uploaded media, and related instructions to third-party model and infrastructure providers, including fal.ai for image and video generation and Anthropic for text generation, captioning, planning, summarization, and similar tasks.

These providers process data only as needed to provide the requested functionality, to maintain their infrastructure, and as otherwise permitted by their agreements and applicable law. Where appropriate, we use contractual protections such as data processing terms and confidentiality obligations, and we may make additional subprocessors available on request for business customers.

We may also use generated content and associated metadata internally to monitor quality, detect misuse, debug failures, and improve product performance and safety. We do not sell your prompts, generated media, or connected account tokens to data brokers.

11. How We Share Personal Data

We do not sell personal data. We disclose personal data only as reasonably necessary to operate the service, fulfill your instructions, protect rights and safety, or comply with law.

We may share personal data with payment processors such as Stripe, AI and infrastructure providers such as fal.ai and Anthropic, cloud hosting and storage vendors, email and customer support vendors, analytics providers, security vendors, and professional advisers such as lawyers, accountants, and auditors, each acting under appropriate contractual or legal obligations.

We may also share data with connected social platforms when you instruct us to publish content, sync account information, or retrieve analytics; with law enforcement, regulators, courts, or other parties where required or permitted by law; and with a buyer, investor, or successor in connection with a merger, financing, restructuring, sale, or other corporate transaction.

12. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar laws apply, we typically process personal data on one or more of the following legal bases: performance of a contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and your consent where consent is required.

Our legitimate interests include protecting the platform from abuse, measuring and improving product quality, supporting customers, maintaining reliable infrastructure, preventing fraud, enforcing our agreements, and developing the business in a responsible way. Where we rely on legitimate interests, we consider the impact on your rights and available safeguards.

We do not use solely automated decision-making that produces legal or similarly significant effects on you without appropriate safeguards and the right to request human review where required by law.

13. International Transfers

influgen.ai operates internationally and uses providers located in multiple countries, including Turkey, the European Union, the United States, and other jurisdictions where our vendors or subprocessors maintain infrastructure or support personnel. As a result, your personal data may be transferred to and processed outside your home country.

Where required by applicable law, we implement appropriate safeguards for international transfers, such as standard contractual clauses, equivalent contractual protections, or reliance on another lawful transfer mechanism. You may request more information about these safeguards by contacting privacy@influgen.ai.

14. Data Retention

We retain personal data for as long as necessary to provide the service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and protect against fraud and abuse. Retention periods vary depending on the data category, your plan, the features you use, and applicable law.

If your account remains active, we typically retain your account information, generation history, connected account records, and stored media until you delete them or close the account. After cancellation or termination, we generally retain account data and generated content for up to 30 days to allow export or recovery, after which we delete or de-identify it unless longer retention is required for legal, tax, accounting, security, backup, or dispute purposes.

Certain records, such as invoices, billing ledgers, fraud-prevention logs, legal correspondence, and audit trails, may be retained longer when required or permitted by law. Backup copies may remain in secure systems for a limited additional period before being overwritten.

15. Data Storage and Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include encryption in transit, encryption at rest where appropriate, access controls, credential management, network protections, logging, and role-based restrictions for internal access.

No internet service, cloud platform, or storage environment is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials, using secure devices and networks, and promptly notifying us if you suspect unauthorized access to your account or connected platforms.

16. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port certain personal data, as well as the right to withdraw consent where processing is based on consent. You may also have the right to know the categories of data we collect and disclose, and to request that we not process data in certain ways under applicable U.S. state privacy laws, including the CCPA or CPRA.

You may exercise privacy rights by emailing privacy@influgen.ai or legal@influgen.ai. We may need to verify your identity and authority before completing a request, and we may deny or limit a request where permitted by law, such as where honoring it would affect the rights of others or prevent us from complying with legal obligations.

You can also update basic account information through your settings, disconnect social accounts directly through the service, revoke third-party OAuth permissions at the provider level, opt out of non-essential marketing emails, and request an export of your content before account deletion.

17. Children's Privacy

influgen.ai is not intended for children and may not be used by anyone under 18 years old. We do not knowingly collect personal data from children under 18 or knowingly allow them to create accounts.

If you believe a child under 18 has provided personal data to us, please contact privacy@influgen.ai so that we can investigate and, where appropriate, delete the information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the product, our providers, data practices, or applicable law. When we do, we will post the updated version on this page and update the effective date shown above.

If a change is material, we may also provide notice by email, in-product notification, or another reasonable method before the change becomes effective. Your continued use of influgen.ai after the effective date means the updated Privacy Policy applies to your continued use.

19. Contact Information

For privacy questions, data subject requests, or complaints, contact privacy@influgen.ai. For legal notices, contact legal@influgen.ai. For product support, contact hello@influgen.ai.

influgen.ai is operated by Hakan Kozakli from Turkey. If you believe we have not addressed your privacy concern, you may also have the right to contact your local supervisory authority or regulator where applicable.

influgen.ai is operated by Hakan Kozakli. Questions about these documents can be sent to legal@influgen.ai or privacy@influgen.ai.