Back to Home

Privacy Policy

Last updated: February 17, 2026

1. Introduction

InfluOS is operated by DMR LABS LTD, a company registered in the United Kingdom (referred to as "we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered influencer content platform.

By using InfluOS, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our services.

2. Information We Collect

2.1 Account Information

  • Email address (required for account creation)
  • Name (optional, for personalization)
  • Profile picture (if using Google OAuth)
  • Authentication tokens

2.2 Content You Create

  • AI character profiles and descriptions
  • Generated images and visual content
  • Captions and text content
  • Content calendars and planning data
  • Pinterest references and inspirations

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers, CVV, or full payment details. We only receive:

  • Stripe customer ID
  • Subscription status
  • Last 4 digits of payment method (for display)
  • Billing history and invoice records

2.4 Usage Data

  • Feature usage and interaction patterns
  • Credit consumption and transaction history
  • Error logs and performance data
  • Device type, browser, and IP address

3. How We Use Your Information

  • To provide and maintain our services
  • To process your transactions and manage subscriptions
  • To generate AI content based on your inputs
  • To communicate with you about your account
  • To improve our services and develop new features
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate InfluOS:

Payment Processing Provider

Secure payment processing and subscription management. Subject to Stripe's Privacy Policy.

Authentication Provider

Third-party authentication for secure sign-in. Subject to Google's Privacy Policy.

AI Image/Video Generation Providers

We use third-party AI services to generate images and videos. Your prompts and reference images are sent to these providers for processing.

AI Text/Chat Providers

We use third-party AI services for text generation and character conversations.

Email Delivery Provider

Transactional and marketing email delivery.

Error Monitoring

Error tracking and monitoring for service reliability.

Analytics Services

Website analytics to understand usage patterns. You can opt out via the cookie consent banner.

4.5 Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Contract Performance: Processing necessary to fulfil our contract with you (e.g., providing the service, managing your subscription).
  • Legitimate Interest: Processing necessary for our legitimate interests (e.g., improving services, preventing fraud), provided these interests are not overridden by your rights.
  • Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications, optional analytics cookies). You may withdraw consent at any time.
  • Legal Obligation: Processing necessary to comply with a legal obligation (e.g., retaining billing records for tax purposes).

5. Data Storage and Security

Your data is stored on secure servers hosted in the European Union. We implement industry-standard security measures including:

  • Encryption in transit (TLS/SSL)
  • Encryption at rest for sensitive data
  • Regular security audits
  • Access controls and authentication
  • Regular backups

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to certain processing activities
  • Withdrawal: Withdraw consent at any time

To exercise these rights, contact us at [email protected]

6.5 International Data Transfers

Some third-party providers we use operate in the United States or other countries outside the European Economic Area. When your data is transferred internationally, we rely on Standard Contractual Clauses (SCCs) and provider-specific data protection agreements to ensure an adequate level of protection for your personal data.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion:

  • Account data is deleted within 30 days
  • Generated content is permanently removed
  • Anonymized usage statistics may be retained
  • Billing records are kept for legal compliance (typically 7 years)

7.5 Marketing Communications

We may send you marketing communications including product updates, tips, and promotional content if you have provided your email address through one of our sign-up forms (e.g., quiz, exit popup, footer signup, or account registration).

  • Every marketing email contains an unsubscribe link. You can opt out at any time.
  • We use automated email sequences (drip campaigns) to onboard new leads and share relevant content.
  • Transactional emails (e.g., password resets, billing receipts, account notifications) cannot be unsubscribed from as they are essential to service operation.

8. Cookies

We use cookies and similar technologies to operate and improve our services. You can manage your cookie preferences through the cookie consent banner displayed on your first visit.

Essential Cookies

Required for the platform to function. These cannot be disabled.

authjs.session-tokenAuthentication session management
authjs.csrf-tokenCross-site request forgery protection
cookie_consentStores your cookie consent preferences
localeStores your preferred language

Analytics Cookies (Optional)

Help us understand how visitors use our website. You can opt out via the cookie consent banner.

_ga, _gidGoogle Analytics visitor identification and session tracking
datafast_visitor_id, datafast_session_idDataFast analytics visitor and session identification

Functional Cookies

Enhance user experience by remembering your preferences and interactions.

exit_popup_dismissedRemembers if you dismissed the exit popup
activity_toast_shownRemembers if the activity notification was shown

9. Children's Privacy

InfluOS is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

9.5 Data Breach Notification

In the event of a data breach affecting your personal data, we will notify affected users and the relevant supervisory authority within 72 hours as required by GDPR. Notification will include the nature of the breach, the categories of data affected, and the measures taken to address it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

DMR LABS LTD

United Kingdom

Email: [email protected]