Privacy Policy

Introduction

IIDB (“Internet Influencer Database,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. This policy applies to all users worldwide and is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Information We Collect

Information You Provide

• Account registration data: email address, display name, and role selection
• Profile information: avatar, bio, and account preferences
• User-generated content: reviews, list items, watchlist entries, and submissions
• Communications: messages sent through contact forms or support channels

Information Collected Automatically

• Device and browser information: type, operating system, screen resolution
• Usage data: pages visited, time spent, click patterns, search queries
• Network data: IP address, approximate location, referring URL
• Cookies and similar technologies (see our Cookie Policy)

How We Use Your Information

• Provide, operate, and maintain the IIDB platform
• Authenticate your identity and manage your account
• Process and display your reviews, lists, and submissions
• Analyze usage patterns to improve features and performance
• Send transactional emails (account verification, password resets)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

• Consent: For analytics and marketing cookies, and optional communications
• Contract: To provide services you have requested (account, reviews, lists)
• Legitimate Interest: To improve our platform, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: Supabase (database and authentication), Vercel (hosting), Resend (email delivery)
• Analytics providers: Google Analytics (when you consent to analytics cookies)
• Legal authorities: When required by law, court order, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention). Anonymized, aggregated data may be retained indefinitely for analytics purposes.

Your Rights

Under GDPR (EU/EEA residents)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

Under CCPA (California residents)

• Right to know what personal information is collected
• Right to delete your personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at privacy@iidb.com.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure authentication via Supabase Auth, row-level security policies on all database tables, and regular security reviews. However, no method of electronic storage or transmission is 100% secure.

International Data Transfers

Your data may be processed in countries outside your jurisdiction, including the United States. We ensure adequate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

Children's Privacy

IIDB is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. Your continued use of IIDB after changes constitutes acceptance of the revised policy.

Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at privacy@iidb.com.