In short
- We track clicks on the links you create — that's the whole point of Influpitch. We don't track you anywhere else.
- We never sell, rent, or share your data with advertisers or data brokers.
- Your data is encrypted in transit and at rest, protected by row-level security policies.
- Pitch Boards you share with brands are visible only to people you send the link to — we don't index or publicize them.
- You can request export or deletion of your account and data anytime.
What makes Influpitch different
Most link-shortening and bio-link tools either bury you in ads or quietly resell your audience data to third parties. Influpitch takes the opposite approach:
Other tools
Aggregate and resell creator/audience data, run ads against your links, share analytics with undisclosed partners.
Influpitch
Your click data exists to help you pitch brands. We don't sell it, we don't advertise against it, and we don't share it beyond what you choose to put in a Pitch Board.
We built Influpitch because Indian creators with strong engagement and modest follower counts had no credible, verified way to prove their audience quality to brands — not because we wanted another data pipeline to monetize.
What we collect
- Account info: your name, email, and profile picture, via Google OAuth (Supabase Auth). Used solely for authentication and account identification.
- Links and content you create: short links, QR codes, link groups, Pitch Boards, bio board content, uploaded files (PDFs, images), and AI prompts you choose to share.
- Click and engagement data: every time someone clicks one of your tracked links or views your Pitch Board, we log a timestamp, approximate geographic location (city/country), device type, OS, and browser. This is the core analytics data the product is built around.
- Pitch Board view data: when a brand or visitor opens a Pitch Board you've shared, we record the timestamp, device, and approximate location, so you can show brands verified proof of engagement.
- Payment info: if you subscribe to a paid plan, our payment processor (Dodo Payments) handles your card details directly. We store only your subscription status and plan tier — never your card number.
- Basic product analytics: aggregate, anonymized usage data to understand which features are used. No personal identifiers are tied to this.
Why we process your data
- Account info: to authenticate you, manage your session, and send essential account emails (welcome, subscription status, payment issues).
- Click and view data: to power your analytics dashboard and Pitch Boards — this is the data you use to pitch brands, and it's shown back to you (and to whoever you share a Pitch Board link with).
- Payment info: to manage your subscription and billing.
- Product analytics: to understand usage patterns and improve the app.
What we do NOT do
- ✕We never sell, rent, or share your data with third parties for advertising or resale.
- ✕We never use your data to build advertising profiles or marketing segments.
- ✕We never store passwords — authentication is handled entirely via Google OAuth.
- ✕We never store full payment card details — Dodo Payments handles all payment data directly.
- ✕We never use third-party advertising trackers or ad pixels on your links or Pitch Boards.
- ✕We never index your Pitch Boards publicly — they're only accessible via the unique link you share.
How your data is protected
Database
PostgreSQL hosted on Supabase infrastructure with encryption at rest. All connections use TLS encryption in transit.
Row-Level Security
Every database table has row-level security policies. Your data, links, and analytics can only be accessed by your authenticated session.
Authentication
Google OAuth only, via Supabase Auth. No passwords are stored by Influpitch at any point.
Application
HTTPS enforced across influpitch.app and infpt.link. Service role access (used for click tracking and Pitch Board view logging) is restricted to backend endpoints only and never exposed to the client.
Third-party services
We use a minimal set of third-party services, each scoped to a specific purpose:
- Authentication provider: receives your name, email, and profile picture when you sign in. No other account data is accessed.
- Database and backend provider: hosts your account data, links, and click/view analytics with row-level security as described above.
- Geolocation: resolves the approximate city/country of a click or Pitch Board view from request data. We don't store the visitor's full IP address long-term.
- Payment processor: handles all subscription billing. We never see or store full card details.
- Email provider: sends transactional emails — welcome messages, subscription confirmations, and payment notifications.
- Hosting provider: hosts the web application. Standard server logs may be generated.
Your rights
Under the Digital Personal Data Protection Act (DPDPA) 2023, you have the following rights:
- Right to access: all data you've entered — links, groups, Pitch Boards, bio board content — is visible to you in the app at all times.
- Right to correction: you can edit or delete any link, group, or Pitch Board directly in the app.
- Right to data portability: you can request an export of your account and analytics data by contacting us.
- Right to erasure: you can request permanent deletion of your account and all associated data at any time.
- Right to withdraw consent: you may stop using Influpitch at any time and request account deletion. We do not retain personal data after a verified deletion request.
Visitor and click data
When someone clicks one of your short links or views your Pitch Board, they may not be an Influpitch account holder. For these visitors, we collect only what's needed to power your analytics: timestamp, approximate location, device, and browser. We don't build profiles of these visitors across sites, and this data is shown only to the creator whose link was clicked.
Children's data
Influpitch is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we've collected data from a minor without appropriate consent, we will delete it promptly.
Cookies
Influpitch uses a session cookie for authentication to keep you logged in. We do not use third-party advertising or tracking cookies on influpitch.app. Click tracking on infpt.link redirects is done server-side at the point of redirect, not via persistent cookies on visitors' devices.
Data breach notification
In the unlikely event of a data breach affecting your personal data, we will notify you via email and report the breach to the Data Protection Board of India as required under the DPDPA 2023, within the prescribed timeframe.
Changes to this policy
If we update this policy, we'll post the changes on this page with an updated date. For significant changes, we'll notify you via email. Our core promise — that your click and engagement data is yours, and is never sold or shared without your control — will not change.
Contact us
If you have questions or concerns about your data, reach out to us at support@influpitch.app. We will respond to your inquiries within 2 weeks.