PRIVACY POLICY

On influnec.com we process personal data of two different groups of people: whoever uses the service (the USER) and the holders of the public social media profiles measured in the service (the HOLDERS), who are mostly brands, media and organisations, but may also be public figures. This Privacy Policy explains what data we process about each of them, for what purpose, on what legal basis and for how long. We are established in Spain and apply Regulation (EU) 2016/679 (GDPR) as our reference standard. Section 7 is addressed to the holders of the profiles analysed and section 15 contains specific information for the United Kingdom and the United States.

Controller: SOLUCIONEC
Represented by: David Rodríguez Sánchez
Spanish tax ID (NIF): 45774319H
Address: C/ Calzada Lateral del norte, 22. 35014 Las Palmas de Gran Canaria (Las Palmas – Spain)
Email: info@influnec.com

About the USER:
- Identification and contact: your email address and name if you create an account, which we store encrypted, and whatever you write to support, also encrypted.
- Account and use of the service: workspaces, your role in each workspace, linked profiles, reports, schedules, the addresses of the recipients you enter for scheduled reports (encrypted), language, commercial email preference and the record of your acceptance of the terms (version, date and IP).
- Trial without signing up: if you click «Try for free» we create an anonymous user linked to your browser, with its IP address and user agent, so that you can build reports before signing up.
- Payments: subscriptions are processed through Stripe. We do not store your card number; we keep the order and subscription identifiers, the product, the amount, the IP address and user agent from which the payment was started, and the data required by tax and accounting rules.
- Emails we send you: we record each delivery and, through a tracking image, whether it was opened.
- Technical and browsing data: the IP address, browser, date and time of access and page visited, recorded by our server, and, if you consent, the data collected by the analytics and advertising cookies described in the Cookie Policy.

About the HOLDERS of public profiles:
- Username, platform identifier, public name and profile picture.
- Daily public counters: followers, following, posts, total likes and views, depending on what each network shows.
- About posts from the last 7 days: link, date, type, text excerpt (500 characters at most), cover image and their public counts of likes, comments, shares, saves and views.
We only process information the holder has made public on the social network. We do not access private messages, we do not process data about the account's followers or their comments, we do not cross-reference these data with other databases and we do not profile people. Private accounts are not measured.

- The public data of each profile are collected once a day through the providers listed in section 9, only for profiles that a user has linked to their workspace or that are part of our public rankings.
- A workspace's reports are only visible to its members, unless its administrator makes them public through a link. INFLUNEC's public rankings and comparisons are accessible to anyone.
- Scheduled reports are sent to the addresses entered by the workspace administrator, and each email includes a link to stop receiving them.

- Providing the service: managing your account and workspaces, measuring linked profiles and producing, displaying, exporting and sending reports.
- Publishing public rankings and comparisons of public profiles of brands, media, organisations and public figures.
- Managing payments, subscriptions, invoicing and accounting.
- Handling enquiries, incidents and support requests.
- Sending you service emails (welcome, sign-in details, invitations, support replies and scheduled reports) and, unless you object, INFLUNEC news.
- Preventing abuse of the service and keeping it secure.
- Analysing use of the website in aggregate to improve it and, if you accept, measuring our advertising campaigns.
- Complying with legal obligations and responding to requests from competent authorities.

About the USER:
- Performance of a contract (art. 6.1.b GDPR): account, workspaces, reports, schedules and payments.
- Consent (art. 6.1.a GDPR): cookies and similar technologies that are not strictly necessary.
- Legitimate interest (art. 6.1.f GDPR): platform security, server logs and prevention of fraud and abuse.
- Compliance with legal obligations (art. 6.1.c GDPR): tax, accounting and data protection obligations.
- Legitimate interest (art. 6.1.f GDPR) and art. 21.2 of Spanish Law 34/2002 (LSSI): emails with INFLUNEC news to users with an account, which you may object to at any time.
- Recipients of scheduled reports: legitimate interest of the workspace administrator who enters them; every email allows unsubscribing.

About the HOLDERS:
- Legitimate interest (art. 6.1.f GDPR) in analysing and comparing the public social media presence of brands, media, organisations and public figures, for the benefit of our users and of the informative interest of public rankings. We have balanced that interest against your rights: we only process data you have made public yourself, limited to public activity metrics, no special categories of data are processed, no profile is built and you can object at any time.
- Informing each holder individually under article 14 GDPR would involve a disproportionate effort, so, in accordance with its paragraph 5.b, we make that information publicly available in section 7.

If your public profile is measured on INFLUNEC, this section gathers the information we must give you under article 14 GDPR.
- Who processes your data: SOLUCIONEC, Spanish tax ID 45774319H, C/ Calzada Lateral del norte, 22. 35014 Las Palmas de Gran Canaria (Las Palmas – Spain). You can write to us at info@influnec.com.
- Where we obtain them: from the public information on your social network profile, through the providers listed in section 9.
- What data: those described in section 3 (username, public name and picture, public counters and posts from the last 7 days with their counts).
- What for: to produce the reports of the users who have linked your profile and, where applicable, public rankings and comparisons. We will not contact you and we do not share your data with advertisers.
- Legal basis: our legitimate interest (art. 6.1.f GDPR). You can ask us for the balancing test and object at any time.
- Retention: the metrics and posts collected are kept to show their history while the profile is linked to a workspace or appears in a public ranking, and are deleted when you exercise your right to erasure or to object.
- Your rights: you can request access, rectification, erasure, restriction and object by writing to info@influnec.com and stating the network and username of the profile. If you object, we will stop measuring the profile, remove it from public rankings and delete its data, unless there are compelling legitimate grounds. Exercising these rights is free of charge.
- Complaints: you can lodge a complaint with the Spanish Data Protection Agency (AEPD) or with the supervisory authority of your country of residence.

- Service emails: welcome with your sign-in details, password recovery, workspace invitations, support replies and scheduled reports. To know whether they arrive correctly we record their delivery and opening.
- Commercial emails: when you create an account you are subscribed to news about INFLUNEC itself. The legal basis is our legitimate interest in direct marketing (art. 6.1.f and recital 47 GDPR) and art. 21.2 LSSI. You can unsubscribe at any time, free of charge, from the Newsletter option in your profile. We never send third-party advertising or share your email with anyone for that purpose.
- Recipients of scheduled reports: each email includes a link to stop receiving that report.

We do not sell your personal data. We only share them with the providers we need to provide the service and where required by law:
- Hosting, database and email: IONOS CLOUD, S.L.U. (Spain). Processor. Emails are sent from our own infrastructure with this provider.
- Payments: Stripe Payments Europe Ltd. (Ireland). Independent controller for payment data.
- Analytics: Google Ireland Limited (Google Analytics 4 and Google Tag Manager). Processor. Only if you accept.
- Campaign measurement: Google, Microsoft, Meta and X, through Google Tag Manager and only if you accept.
- Support chat: tawk.to, inc. (USA), only if you accept all cookies.
- Public social media data: RapidAPI, Inc. (USA) and the X, Instagram, TikTok and LinkedIn data providers it offers, AK API for Facebook and Google LLC (YouTube Data API). We only share with these providers the public username of the profile we measure, never data about our users.
- Public authorities and courts, where there is a legal obligation or a valid request.
Processors handle the data under the contract required by article 28 GDPR.

Your data are stored and processed in the European Economic Area. Some of the providers listed process data outside it, for example in the United States. Where that happens, the transfer is covered by an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for participating organisations, or by the Standard Contractual Clauses approved by the Commission, together with any supplementary measures that are necessary.

- User account: while it remains active. You can delete it from your profile, which removes your user and the workspaces in which you were the only member.
- Trial user without sign-up: deleted after 90 days without activity.
- Server logs (pages visited, IP and user agent), provider call logs and the log of emails sent: 12 months.
- Payments, invoicing and accounting: for the periods required by commercial and tax rules.
- Support and data protection requests: 3 years, as evidence that they were handled.
- Public profile data: as set out in section 7.
- Cookies: the periods set out in the Cookie Policy.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, without affecting the lawfulness of prior processing.
From your profile you can change your details, unsubscribe from commercial emails and delete your account. For everything else, write to info@influnec.com stating the right you wish to exercise.
Exercising these rights is free of charge. If you consider that your request has not been properly handled, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) or with the supervisory authority of your country of residence.

The service is intended exclusively for people aged 18 or over and we do not knowingly collect data from minors. If we detect, or are told, that an account belongs to a minor, we will block it and delete its data without delay. If you are a parent or guardian and a public profile of a minor in your care appears on INFLUNEC, write to info@influnec.com and we will stop measuring it.

We apply encryption in transit (HTTPS), field-level encryption of email addresses, names, report recipients and support messages, hashed passwords, sessions with random identifiers and role-based access control in each workspace.
In the event of a security breach we will notify the Spanish Data Protection Agency within 72 hours and, where it poses a high risk to your rights, we will inform you directly and without undue delay.

- United Kingdom: we process your data in accordance with the UK GDPR and the Data Protection Act 2018. Transfers originating in the United Kingdom are covered by the UK International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses. The cookie panel is how we obtain the consent required by the Privacy and Electronic Communications Regulations 2003. You can complain to the Information Commissioner's Office (ico.org.uk).
- United States: we do not sell personal information. The campaign measurement cookies described in the Cookie Policy may amount to «sharing» for cross-context behavioural advertising under some state laws; rejecting them in the cookie panel opts you out of that processing. Depending on your state of residence, you may have the right to know what personal information we hold about you, to obtain a copy, to correct it, to delete it, to opt out of its use for targeted advertising and not to be discriminated against for exercising these rights. Write to info@influnec.com stating your state and the right you wish to exercise; we will respond within 45 days, extendable once where permitted.

We may update this Privacy Policy to adapt it to legal, technical or service changes. We will publish the updated version on influnec.com showing the date of the last change and, where the change is substantial, we will inform you by email.

Last updated: 10/23/2026