Data deletion

Influencr is operated by The Build Brain Ltd. We respect your right under UK GDPR Article 17 (“right to erasure”) to ask us to delete personal data we hold about you. This page explains exactly how to do that, what we'll delete, and how long it takes.

How to request deletion

The quickest way is the form below. We'll acknowledge within 3 business days.

Or, if you'd prefer:

• Email us: dpo@influencr.co.uk with the subject line “Erasure request”. Tell us which platform handle(s) you want removed (e.g. @yourhandle on Instagram). You don't need to have an Influencr account — we'll honour the request either way.
• Use the in-app control: if you have an Influencr account, sign in and go to Settings → Danger zone → Delete account. You will be asked to confirm your email address; deletion is then immediate.
• API intake: developers can POST a JSON body containing your platform + handle + an optional contactEmail + optional proofUrl to https://api.influencr.co.uk/creators/forget. No authentication required — this is the same endpoint the form above uses.

What gets deleted

When you delete your account in-app (or we action your email request), we apply the following changes immediately:

• Your email address is overwritten with a non-reversible placeholder so it can never be linked back to you. The original email is freed so you can sign up again later as a fresh account if you wish.
• Your brand profile (if any) is marked closed. Brand metadata (name, industry, brand description) is retained in tombstoned form so creators you have collaborated with still see context for their record of the work.
• Your creator profile (if any) is marked closed and unlinked from your identity. Cached profile fields persist as an unclaimed directory entry — anyone could re-claim the handle later.
• Any OAuth tokens we hold for your connected platforms are revoked at the upstream provider first, then marked revoked locally so they can no longer be used.
• A non-reversible audit-log entry is written recording that you actioned the deletion, when, and what was tombstoned — so we can demonstrate we honoured the request.

What we keep, and why

UK GDPR allows us to retain some records for limited, lawful purposes — only the minimum necessary:

• Counterparty records: campaigns, collaborations, content submissions, and messages between you and another party (brand or creator) are kept so the OTHER party retains their record of the work and the conversation. Where your name or handle is referenced, the UI surfaces “Account closed” rather than your former identifying details.
• Financial records: invoices, billing-history metadata, and payment-processor transaction references (via Paddle, our merchant of record) are kept for 6 years under HMRC rules.
• Records of the deletion itself: the audit-log entry above, retained indefinitely as an append-only record.
• Published-content records: if a creator's handle appeared in a verified-live campaign post, the campaign record is kept (without your personal data attached) for the brand's post-campaign reporting.

How long it takes

We acknowledge requests within 3 business days and complete deletion within 30 days, as required by UK GDPR Article 12(3). Most cases finish within 5 working days. You'll get an email when it's done.

Disputes

If you're not happy with how we handled your request you can complain to the UK Information Commissioner's Office at ico.org.uk/concerns or by post:

Related

• Privacy policy — full detail on what data we collect, why, and your other rights.
• Terms of service.