Influship Chrome Extension — Privacy Policy

When you first open the extension popup, you will see a one-time consent screen. Until you tap Enable on that screen, the extension does not transmit any data off your device. If you tap Not now, the contact card still works from the information already on the page (where possible), but nothing is sent to our servers.

You can change your choice at any time from the extension popup footer.

When you load a profile, video, post, or feed on a supported platform, the extension inspects the page you are already viewing to find:

• The creator’s handle and display name
• The creator’s public bio / channel description
• Public follower, subscriber, view, and engagement counts
• Emails written in the public bio or channel “About” section
• Public social links and external URLs (e.g. link-in-bio pages) listed by the creator
• The URL of the page you are on (used to label where the data came from)

The extension only reads information that is already publicly visible on the page. It does not read private messages, liked pages, saved collections, purchase history, logged-in session state, cookies, or any content gated behind an account that is not the creator’s public profile.

If — and only if — you have granted consent, the extension sends the information listed in Section 2 to https://finder.influship.com/... along with:

• A random, locally-generated install ID (UUID v4) used to rate-limit abusive clients. This ID is not tied to your name, email, Google account, or IP address in a way we can reverse.
• The extension version string (e.g. 0.1.0).
• An approximate timestamp.

Your IP address is visible to our server at the TCP level (as with any internet request) and is used solely for anti-abuse rate limiting. It is not stored next to the creator data we collect.

We do not collect:

• Your name, email, Google / Apple / social account
• Your browsing history outside the supported creator platforms
• Any form of persistent tracking identifier that can follow you across other sites
• Passwords, session tokens, or financial information

1. To show you the contact card. Most of the work happens locally in your browser. The YouTube channel lookup is the one piece that calls our server, because the YouTube Data API key must stay server-side.
2. To improve creator discovery across the Influship product. The creator data collected through the extension feeds back into our internal creator index, which powers influship.com. This is how the extension stays free: the data you help surface makes our paid product better.
3. Anonymous product analytics. Install ID counts, which platforms are being used, and error reports — so we know whether the extension is working and worth maintaining.

The extension talks to exactly two kinds of servers:

• finder.influship.com — our own extension ingest backend, described above.
• The platforms you are visiting (instagram.com, tiktok.com, youtube.com, x.com, syndication.twitter.com). These requests happen because you are already on those sites; the extension reads responses those sites are already sending your browser. We do not forward them.

We do not sell or rent your data. We do not share it with advertising networks, data brokers, or “enrichment” resellers. The YouTube channel enrichment calls the official YouTube Data API v3 via our proxy — so Google’s own privacy terms apply to those requests the same way they would if you opened youtube.com in a tab.

• Creator data (handles, bios, follower counts, etc.) is retained indefinitely as part of the Influship creator index, because creator profile information is the product itself.
• Install IDs and rate-limit counters are retained for up to 90 days and then rotated.
• Server access logs (IP + timestamp + URL path) are retained for 30 days for debugging and then deleted.

You can:

• Withdraw consent at any time from the extension popup. Subsequent browsing stops being reported.
• Uninstall the extension. No further data is collected once it is removed.
• Request deletion of any data linked to your install ID by emailing privacy@influship.com with your install ID (find it in the popup “About” screen). We will action the request within 30 days.
• Request a copy of the data we hold that is linked to your install ID via the same email.

If you are in the EU, UK, or California, you additionally have the rights granted by the GDPR / UK GDPR / CCPA respectively. The quickest path to exercising them is the email above.

The extension is not directed at children under 13 (or 16 in the EU), and we do not knowingly collect data from them. If you believe a child has installed the extension and sent data, email us and we will delete it.

Data between the extension and our server travels over HTTPS (TLS 1.2 or higher). At rest, the creator index is stored in a private SQLite database on infrastructure we control; access is limited to Influship engineers with an admin key.

We do not ship secret API keys inside the extension bundle, because anything inside a browser extension is effectively public.

If this policy changes materially, we will update the “Last updated” date at the top and — for material changes — show a fresh consent prompt in the extension popup on next open.

• Email: privacy@influship.com
• Postal: INF Labs, Inc., 131 Continental Drive Suite 301, Newark, DE 19713
• Data controller: INF Labs, Inc.