Personal data
Privacy policy
What data the site keeps when you claim a profile or write in, on what legal basis, for how long and how to exercise your rights. Provisional version.
Provisional version, under legal review. In force since September 30, 2026. It will be replaced once the lawyer delivers the final text, and the date of the change will be noted here.
Controller
Influencerbench, publisher of the site. Contact for anything related to personal data: privacy@influencerbench.com.
What data is kept and why
Profiles: only data each agency publishes on its website (head office, markets, services, minimum, clients with a logo, year, size) and links to its public profiles; no personal data is stored. Profile claims: the email used to claim, its domain, the IP address the request came from, a hash of the verification link (never the link in clear) and the request and confirmation dates, which stay on the profile record as claim email and date; they serve to check that the claimant has a mailbox on the agency's domain and to limit attempts. On confirmation, the browser receives a technical cookie (ib_owner_<slug>, HttpOnly, 12 months) used only to identify the profile owner on this site, and we store its hash, never the cookie. Data contributions and emails: whatever each person writes to hello@, listings@, data@ or privacy@, which is forwarded to the publisher's mailbox, hosted on Google Workspace. Automatic email authentication reports (DMARC) sent to dmarc@ are discarded without forwarding; only a record that they arrived is kept.
Where each thing lives: claim data sits in the claims table of the database (ib_claims) and the inbound mail log in the reception table (influencerbench_inbound_events), which stores the identifier of each received email, its forwarding status and, if forwarding failed, the reason, which may include the sender address; it does not store the email content. Legal basis: the legitimate interest in checking that a claim comes from the agency and in answering corrections and removals, and the consent of whoever writes or contributes data. There is no profiling or automated decision-making.
For how long
From a confirmed claim, the email and the date are kept while the profile is published and deleted with its removal; the IP address and the link hash are deleted after 30 days. Verification links expire after 24 hours. If the claim is not confirmed, the email and the IP address are anonymized after 30 days and the hash of the expired link is deleted. The inbound mail log is deleted 90 days after each email is received. All of this is done by a daily automated task. Contact opt-out requests are kept without a time limit, only the email and the date, so as not to write again. If proofs for verified reviews are received in the future, the file is deleted when verification closes (at most 30 days after receipt) and its metadata is anonymized 30 days after closing if the review was rejected or unverified, and 24 months later if it was verified.
Where it is hosted and who processes it
The site is served from Vercel, the claims database is on Supabase, emails go in and out through Resend and the operator's mailbox is on Google Workspace. Fonts are served from this same domain, so opening a page sends no request to Google or any other font provider. Visit measurement uses Vercel Web Analytics, which uses no cookies and does not identify people; the only cookie on the site is the technical claim cookie described above. Data is not sold or shared with third parties for advertising.
Rights
Anyone can request access to, correction or deletion of their data by writing to privacy@influencerbench.com; we answer within 5 business days. Agencies request removal of their profile or logo at listings@influencerbench.com, within the terms of the editorial policy.