Privacy Policy

Fluvencio is a managed platform connecting Brands (who fund campaigns), Campaign Partners / mediators (who manage execution), and Creators (who deliver content). Different data is collected depending on your role, described below.

• Account & organisation data: name, email address, a securely hashed password, organisation name, role, and (for brands/partners) billing and tax details such as GSTIN and PAN used to raise invoices and process credit.
• Creator profile data: name, handle, city, contact details, niches, and reliability signals used to match and manage creators on campaigns.
• Connected social accounts (with your authorisation): when a creator connects Instagram via official Instagram login (the Instagram Graph API), we access profile information (username, name, follower and media counts, profile picture), media (captions, media URLs, permalinks, like and comment counts), and available insights (e.g. reach). We store an access token to keep this data in sync; you can disconnect at any time.
• Publicly available social data: where a creator provides a public handle instead of connecting officially, we retrieve publicly visible profile and post information for campaign measurement. We never bypass a platform’s login or access private data this way.
• Campaign content & communications: deliverables, submissions, published-post links, in-app messages, and file attachments you upload.
• Payment data: payments and payouts are processed by our payment partner (Razorpay). We do not store full card numbers; we retain transaction references, amounts, and status.
• Technical data: authentication cookies, IP address, device/user-agent, push-notification subscription endpoints, and audit/usage logs.

• Provide and operate the Service — accounts, campaigns, allocations, messaging, and payouts.
• Measure publicly observable campaign performance and display metrics with their provenance.
• Process campaign credit, earnings, and payouts, and issue invoices.
• Send transactional emails and (with permission) push notifications.
• Detect, prevent, and investigate fraud, abuse, and policy or security violations.
• Comply with legal, tax, and accounting obligations.

When you connect Instagram, we use the official Instagram API with Instagram Login and only access data you authorise, in line with the scopes you approve. Our use of information received from Meta APIs follows the Meta Platform Terms and Developer Policies. We use this data solely to display your profile and content and to measure campaign performance within Fluvencio — we do not sell it, and we do not use it for advertising or any purpose unrelated to the Service.

You can revoke Fluvencio’s access at any time by disconnecting the account inside the app, or from Instagram’s Settings → Apps and websites. Revoking access stops future syncing; see “Your rights” and “Data deletion” below to remove previously collected data.

We share information only as needed to run the Service:

• With campaign participants: a creator’s profile and public/authorised social data is visible to the campaign partner managing them and the brand funding a campaign they work on. Message threads are visible to the two parties in that thread.
• Service providers: Razorpay (payments), our email provider (transactional email), cloud hosting infrastructure, and Meta/Google platforms (for authorised or public social data). These process data on our behalf under contract.
• Legal & safety: where required by law, or to protect the rights, safety, and integrity of the Service and its users.

We do not sell personal information.

We use strictly necessary cookies to keep you signed in (short-lived access and refresh tokens). These are essential to the Service and are not used for third-party advertising or cross-site tracking.

We keep personal information for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, tax, financial, and audit obligations. Tamper-evident audit and financial records may be retained longer where the law requires. You may request deletion as described below.

We protect data with encryption in transit (HTTPS/TLS), hashed passwords and refresh tokens, short-lived access tokens, scoped access controls, and least-privilege access to systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to incidents.

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most information in-app, disconnect social accounts at any time, or contact us to exercise these rights.

To request deletion of your personal data, including data obtained from connected Instagram or other social accounts:

• Disconnect the social account in Accounts within the app (stops further syncing), and/or
• Email hello@fluvencio.com with the subject “Data Deletion Request” from your registered email.

We will verify your identity and delete the associated data within 30 days, except records we are legally required to retain (e.g. financial/tax records). We will confirm once completed.

We operate primarily from India and may process data on infrastructure located in other regions. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this Policy and applicable law.

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a minor has provided us data, contact us and we will remove it.

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified in-app or by email.

Whizzyminds Tech LLP (operating “Fluvencio”) — hello@fluvencio.com.