influjoy

Privacy

A starting point written for this template: have a lawyer read it against what your product actually does before you launch.

Who is responsible

LNDR UG (haftungsbeschränkt), Am Hainebuch 20, 32457 Porta-Westfalica, Germany, decides what is collected here and why. Write to support@influjoy.com with any question about this page.

What is collected

  • Your email address and name, because an account needs one of each.
  • A session record for each device you sign in on, so you can see them and end them.
  • What you create in the product, which is stored until you delete it.
  • Subscription state from the payment provider: which plan, whether it is active, and when the period ends.
  • Server logs with the request path, a timing and an account id, kept for troubleshooting.
  • If you make an AI version of you: the consent video you record, the photos and the voice sample you add, a still from the video, the scores that match each photo to that still, and a copy of your voice. Matching faces reads the shape of your face, which is biometric data.

Why

To run the account you asked for and to bill it, which is the contract between us. Logs and error reports are kept because a service that cannot be debugged cannot be fixed, and that is a legitimate interest. Anything beyond that asks first. Your face and voice for an AI version of you are used only with the consent you give on camera, and only to make that AI version for your own account.

Who else sees it

Processors that make the service work. Each receives the minimum the job needs and is bound by a processing agreement.

  • Vercel hosts the app, in Frankfurt.
  • Supabase holds the database and your files, in Frankfurt.
  • Google Cloud runs the jobs that make pictures, voices and videos, in Frankfurt.
  • Stripe handles payments and keeps your customer record and invoices.
  • Resend sends the emails you ask for: sign-in links, confirmations and resets.
  • Upstash counts requests for an hour or less, to stop abuse.
  • Sentry records errors, without your address or request contents.
  • PostHog records how the product is used, if you agree to analytics.
  • OpenRouter, fal, xAI and ElevenLabs answer AI requests for text, pictures, video and voice.
  • Langfuse records those AI requests and their answers, for debugging.
  • Amazon Web Services compares the faces for an AI version of you, in Frankfurt. Your photos and stills from your consent video are sent to it for each comparison. We keep the scores, never a face template.

How long it is kept

Account data for as long as the account exists. Deleting the account removes your content and profile, cancels your subscription, and deletes your analytics profile and the records of your AI requests; invoices and the records tax law requires are kept for as long as the law says. One more thing stays: a fingerprint of your email address, made with a secret key so it cannot be turned back into the address or checked against one, kept only to refuse a second free trial to the same inbox. Logs and traces roll off after thirty days. Taking back your consent for an AI version of you, or archiving it, deletes its photos, the stills from the video, your voice sample, the hello in your voice and your voice copy at once. The pictures it made of you, the three previews among them, stay until you delete that creator or your account. So do the consent video and the record of when you agreed and when you took it back, as proof.

Your rights

You can ask for a copy of your data, ask for it to be corrected or deleted, and object to processing based on legitimate interest. Write to support@influjoy.com and you get an answer within a month. You can also complain to a supervisory authority in the country you live in.

Cookies

One cookie holds your session and it is required to stay signed in. Analytics run without an advertising identifier and are not shared with ad networks.