1. Introduction
Blue Beach Media LLC ("Company", "we", "us", "our") operates InfluencerArmor ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws including the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR).
2. Information We Collect
2.1 Information You Provide
- Account information: Email address, display name, password (stored as a bcrypt hash).
- Social media handles: Platform usernames you connect for monitoring (Instagram, TikTok, YouTube, X/Twitter, etc.).
- Uploaded contracts: PDF and document files you submit for AI analysis.
- Profile information: Avatar, notification preferences, connected accounts.
- Payment information: Processed and stored by Stripe. We do not store your credit card number, only a Stripe customer ID and subscription status.
2.2 Information We Collect Automatically
- Usage data: Pages visited, features used, actions taken within the Service.
- Device information: IP address, browser type, user agent string.
- Session data: Authentication tokens and session timestamps.
2.3 Information from Third-Party Sources
- Public social media data: Publicly available profile information, posts, and mentions from social platforms — collected solely for the purpose of impersonator detection and reputation monitoring on your behalf.
- Breach databases: We check your email addresses against HaveIBeenPwned's database of known data breaches using their k-anonymity API. We do not receive or store passwords from this service.
3. How We Use Your Information
| Purpose | Data Used |
|---|
| Provide protection services | Social handles, email, uploaded contracts |
| Detect impersonators | Social handles, public profile data |
| Monitor reputation | Social handles, public mentions |
| Analyze contracts | Uploaded document content |
| Check for data breaches | Email addresses (via HaveIBeenPwned k-anonymity) |
| Send alerts and notifications | Email, notification preferences |
| Process payments | Stripe customer ID, plan selection |
| Improve our AI models | Aggregated, anonymized usage patterns |
| Prevent fraud and abuse | IP address, usage patterns |
4. Data Sharing
We do not sell your personal data. We share information only with the following categories of service providers, solely as necessary to deliver the Service:
- Stripe: Payment processing. Stripe receives your payment method details directly. See Stripe's Privacy Policy.
- Brevo: Transactional email delivery (alerts, notifications, password resets). Brevo receives your email address and message content.
- HaveIBeenPwned: We send partial hashes of email addresses via their k-anonymity API. No plaintext emails are transmitted.
We may also disclose your information if required by law, court order, or governmental regulation, or to protect the rights, property, or safety of our users or the public.
5. Data Retention
- Active accounts: Your data is retained for as long as your account is active and your subscription is current.
- After account closure: We delete your personal data within 30 days of account closure, except where retention is required by law.
- Uploaded contracts: Deleted within 30 days of account closure or upon your request.
- Activity logs: Retained for up to 90 days for security and debugging purposes, then automatically purged.
- Anonymized analytics: Aggregated, anonymized data may be retained indefinitely for service improvement.
6. Your Rights
Regardless of your location, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Data portability: Request an export of your data in a structured, machine-readable format.
- Opt-out of marketing: Unsubscribe from marketing communications at any time via email preferences or by contacting us.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. CCPA-Specific Rights (California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email [email protected] with the subject line "CCPA Request".
8. GDPR-Specific Rights (EU/EEA Residents)
8.1 Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing necessary to provide the Service you have subscribed to.
- Legitimate interest: Security monitoring, fraud prevention, and service improvement.
- Consent: Marketing communications and optional data processing (you may withdraw consent at any time).
8.2 International Data Transfers
Your data may be transferred to and processed in the United States, where our servers are located. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure adequate protection for international data transfers.
8.3 Data Protection Contact
For GDPR-related inquiries, contact our Data Protection Officer at [email protected]. You also have the right to lodge a complaint with your local data protection authority.
9. Cookies & Local Storage
InfluencerArmor uses minimal client-side storage:
- Session token: Stored in localStorage for authentication. This is not a cookie and is not sent to third parties.
- UI preferences: Theme and layout preferences stored in localStorage.
- No tracking cookies: We do not use advertising cookies, analytics cookies, or third-party tracking pixels.
- No cross-site tracking: We do not participate in advertising networks or cross-site tracking.
10. Security Measures
We implement appropriate technical and organizational measures to protect your data:
- All connections encrypted via TLS (HTTPS).
- Passwords hashed with bcrypt (never stored in plaintext).
- Authentication tokens with automatic expiration.
- Per-user data isolation and access controls.
- Regular security monitoring and vulnerability assessments.
While we take security seriously, no method of transmission over the Internet is 100% secure. See our Security Practices page for more detail.
11. Children's Privacy
InfluencerArmor is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will promptly delete the information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting a notice on the Service or sending an email to your registered address. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
13. Contact
For questions or concerns about this Privacy Policy or our data practices, contact us at:
Blue Beach Media LLC
Email: [email protected]
Website: influencerarmor.com