Privacy Policy

1. Who we are

SFENKIA LTD (“Inflyze”, “we”, “us”), a private limited company registered in England and Wales under company number 16242031, with its registered office at Unit 501 Leroy House, 434-436 Essex Road, London, England N1 3QP, operates the Inflyze creator–brand platform at inflyze.com and related subdomains (including business.inflyze.com and blog.inflyze.com), native mobile applications, and associated APIs. For privacy questions or data subject requests, contact legal@inflyze.com or info@inflyze.com.

2. Scope

This Privacy Policy applies when you visit our sites, create an account, use the feed, post content, apply to jobs, manage collaborations, use wallet and payments, connect social accounts for verification, interact with admin or support, or otherwise use Inflyze services. It should be read together with our Cookie Policy and, for users in Türkiye, our KVKK Aydınlatma Metni.

3. Personal data we collect

We collect data you provide directly, data generated through your use of the platform, and data from integrated services where you choose to connect them.

• Account data: name, username, display name, email address, password hash, profile photo, bio, preferred language, role, ban status, email verification status.
• Onboarding and profile data: profile type (influencer, company, agency, artist), survey answers, goals, signup sources, location and address fields where provided.
• Verification and compliance data: tax plate, trade registry, MERSIS, tax ID (VKN), authorized person identity documents, sector permits, ISO/quality certificates, influencer identity documents, IBAN and bank details for payouts, social account handles and synced follower metrics (Instagram, TikTok, X, YouTube, Kick, Twitch), verification notes and admin review records.
• Content and activity: posts, stories, comments, likes, reposts, bookmarks, live streams, job listings, applications, collaboration messages, contract proposals, representation requests, reports, blocks, mutes, search history, profile views, post analytics.
• Messaging and notifications: direct messages, collaboration inbox content, in-app and email notification preferences and delivery logs.
• Payment and wallet data: Stripe customer ID, top-up and transaction records, withdrawal requests, commission calculations, agency managed earnings, billing-related metadata processed by Stripe.
• Technical data: IP address, device and browser type, operating system, session identifiers, access and refresh tokens (mobile), Auth.js session cookies (web), locale cookie, sidebar preferences, OAuth state cookies, cookie consent choices, server and application logs.
• Support and contact data: messages sent through contact forms, help center inquiries, and correspondence with our team.

4. How we use personal data

We process personal data to operate, secure, and improve Inflyze, including:

• Creating and authenticating accounts; providing email verification and password reset flows.
• Running onboarding, profile management, and platform verification workflows.
• Displaying feeds, search, hashtags, profiles, jobs, collaborations, wallet, and agency tools.
• Processing payments, wallet top-ups, withdrawals, commissions, and related notifications.
• Sending service, security, collaboration, job, and marketing-related communications where permitted.
• Detecting abuse, enforcing terms, moderating content, and responding to reports.
• Complying with legal obligations, responding to lawful requests, and defending legal claims.
• Analyzing aggregated usage to improve performance, reliability, and product design.

5. Legal bases

Depending on your location, we rely on one or more of the following: performance of a contract; legitimate interests (security, fraud prevention, product improvement, B2B networking); consent (optional cookies, certain marketing, social integrations you initiate); and legal obligation. Where consent is required, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

6. Cookies and similar technologies

We use cookies and local storage for essential operation, preferences, and—where configured—aggregated analytics. On first visit we show a one-time cookie notice at the bottom of the screen. See /cookie-policy for details.

7. Sharing and processors

We do not sell your personal data. We share data with service providers that help us operate Inflyze, including:

• Hosting and infrastructure (e.g. Vercel, PostgreSQL providers).
• Authentication and OAuth (Google, Apple).
• Payments (Stripe).
• File storage and uploads (UploadThing and related object storage).
• Realtime messaging signals (Pusher Channels).
• Background jobs and email delivery (Inngest, transactional email providers).
• Live streaming (LiveKit and related infrastructure).
• Social platform APIs you connect for verification or profile sync.
• Professional advisers and authorities when required by law.

8. International transfers

Inflyze is operated globally. Your data may be processed in Türkiye, the United States, the European Union, the United Kingdom, or other countries where our providers host services. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

9. Retention

We retain personal data for as long as your account is active and as needed to provide services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Verification documents, financial records, and security logs may be kept for longer periods where required by law or legitimate business needs. You may request deletion subject to applicable exceptions.

10. Security

We apply technical and organizational measures including encrypted transport (HTTPS), hashed passwords, JWT and refresh token controls, role-based admin access, rate limiting, and monitoring. No method of transmission or storage is completely secure; please use a strong password and protect your devices.

11. Your rights

Depending on applicable law (including GDPR, UK GDPR, and KVKK), you may have the right to access, rectify, erase, restrict, object to, or port your personal data, and to withdraw consent where processing is consent-based. You may also lodge a complaint with a supervisory authority. Submit requests to legal@inflyze.com; we may need to verify your identity.

12. Children

Inflyze is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will take appropriate steps.

13. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use after changes constitutes acknowledgment where permitted by law.