// Influ3nca legal
Privacy Policy
Effective June 28, 2026 · Fieldwork, Inc.
This Privacy Policy explains how Fieldwork, Inc. (“Influ3nca”) collects, uses, shares, and protects personal data when you use our Service. For privacy questions or to exercise your rights, contact dhizdsa@gmail.com.
1. Who is the controller
For account holders and visitors, Influ3nca is the data controller. When a Client uses Influ3nca to process personal data about its own prospects or Creators (“Customer Data”), the Client is the controller and Influ3nca acts as a processor on the Client’s behalf, governed by our Data Processing terms.
2. Data we collect
- Account & company data: name, email, company details, role, and authentication data.
- Billing data: processed by Stripe; we store limited records (plan, status, invoice identifiers), not full card numbers.
- Customer Data: information you upload or generate about prospect companies, contacts, and Creators — including names, business email addresses, social handles, and engagement metrics.
- Usage data: log data, device/browser information, pages viewed, and actions taken.
- Influ3nca Signal subscriptions: your email address, selected topic preference, subscription source, consent time, welcome-email status, and unsubscribe status when you choose to join the list.
- Connected advertising data: advertiser-account identifiers, campaign metadata, and provider-reported spend and performance when you authorize Meta, Google, or TikTok. OAuth credentials are encrypted and used only for the access you grant.
- Cookies: as described in our Cookie Policy.
3. How we use data
- To provide, operate, secure, and improve the Service.
- To run AI-assisted matching, drafting, classification, and analytics.
- To process payments and send transactional and service communications.
- To send the Influ3nca Signal and occasional product updates when you explicitly consent.
- To detect, prevent, and address fraud, abuse, and security incidents.
- To import and display read-only advertising performance from accounts you connect.
- To comply with legal obligations and enforce our Terms.
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract; our legitimate interests (operating and improving the Service, B2B outreach, security); consent (where required, e.g. certain cookies); and compliance with legal obligations.
5. AI processing
We use Anthropic’s Claude models to power matching, draft outreach, and classify replies. Content sent for these features is processed by Anthropic as our subprocessor. AI-generated output may be inaccurate and should be reviewed before use.
6. How we share data & subprocessors
We do not sell personal data. We share data with service providers who process it on our behalf under contract, and with authorities where required by law or to protect rights and safety. Our current subprocessors:
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, file storage | United States |
| Vercel | Application hosting & edge delivery | United States |
| Anthropic | AI matching, drafting & classification (Claude) | United States |
| Stripe | Payments, billing & invoicing | United States |
| Resend | Transactional & outreach email delivery | United States |
| Cal.com | Meeting scheduling | United States / EU |
| Telegram | Internal operator notifications & approvals | Global |
7. International transfers
We may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses for transfers from the EEA/UK.
8. Data retention
We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained per the Client’s instructions and deleted or returned on termination, subject to backups and legal requirements.
9. Security
We use technical and organizational measures including encryption in transit, access controls, row-level security, and least-privilege service credentials. No method of transmission or storage is 100% secure.
Connected-platform credentials are encrypted at the application layer, isolated from browser-readable account data, and removed when you disconnect. Disconnecting stops future imports; previously imported campaign metrics may remain under the retention terms above.
10. Your rights
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and delete and the right not to be discriminated against for exercising rights. To exercise any right, contact dhizdsa@gmail.com. If we process Customer Data on a Client’s behalf, we will refer requests to that Client.
11. Recipients of outreach
If you received a message sent through Influ3nca and wish to opt out or have your data removed, use the unsubscribe link in the message or email dhizdsa@gmail.com, and we will route your request to the responsible sender.
12. Influ3nca Signal
Joining the Influ3nca Signal is optional and separate from requesting a demo or becoming a sales lead. We use your selected preference to prioritize relevant creator-growth material. You can withdraw consent at any time through the unsubscribe link in every email. We retain a minimal suppression record after unsubscribe so we can respect your choice and avoid sending further marketing email.
13. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
14. Changes
We may update this Policy and will post the new effective date here, notifying you of material changes where required.
15. Contact
Fieldwork, Inc., [Registered business address]. Privacy: dhizdsa@gmail.com.