Privacy Policy

Last Updated: October 19, 2026

Recent changes

Here is what changed in the most recent updates, in plain English. Nothing below changes what the Software collects or who receives it. These are corrections and clarifications so this policy matches what the Software actually does.

• October 19, 2026:
  • Residential proxy scope (§2.3). We made clear that a residential proxy you configure is used only for the desktop application's Facebook features (Deals Butler Facebook posting, the Facebook sign-in check, and the Best Seller Butler Facebook scan). Instagram, Messenger, the Amazon butlers, and everything else connect from your own network.
  • Connection check (§2.3). We corrected a sentence that said the automatic connection check is skipped once a proxy is configured. The check still runs; what changes is that the application stops showing the data-center warning.
  • Browser sign-ins (§2.1). We corrected the list of sites the desktop application keeps sign-in sessions for. We removed one site we do not keep a session for, added the ones that were missing (including Facebook), and moved Reddit, Telegram, and Archer to the list of stored keys and tokens, because those connect with credentials rather than a browser sign-in.
  • Amazon Creator API credentials (§2.1, §2.2, §2.5, §7). We spelled out where your own credentials live: on your computer if you only use the desktop application, and saved (encrypted) to your account if you use them in the Chrome extension while signed in, including when they reach the extension from the desktop application through the local settings sync. We also described how the Software uses our own Creator API credentials on our servers, for Shopping Butler searches and for the optional short-term lease.
• October 18, 2026: We stated that each sub-processor is under a Data Processing Agreement (or the provider's equivalent terms), and that business customers can request a Data Processing Agreement with us directly (§2.3).
• October 17, 2026: We disclosed the automatic connection check that sends your public IP address to api.ipify.org and proxycheck.io (§2.3).

1) Who we are

• Controller: The Social Media Posse LLC
• Mailing address: 3556 S 5600 W #1-478, Salt Lake City, UT 84120, United States
• Privacy contact: privacy@influencerbutler.com
• General contact: hello@influencerbutler.com

We are a small US-based independent software vendor. Much of the desktop application runs on your computer, and we keep what the Software sends to us as limited as we can. But the Software also includes an online account and dashboard, a Chrome extension that can sync to it, and a few hosted features (an AI Assistant, scheduled calls and live events, an affiliate program, and email). Each is described below, along with the service providers behind it.

2) What we collect, and where it goes

We organize our data practices by destination, because much of what the desktop application touches never leaves your device. §2.1 to §2.10 describe the data we handle and where it goes. If you believe we handle something that is not described here, tell us at privacy@influencerbutler.com and we will correct this policy or our practice.

2.1 Local-only: never leaves your device

The following data is processed entirely on the device on which you run the Software and is never transmitted to us or to any third party unless you explicitly export, share, or sync it:

• Workspace settings, templates, brand lists, message drafts, and campaign keywords.
• Screenshots, generated images, and any media you author inside the Software.
• Browser sign-in sessions (cookies) for the sites you sign in to inside the desktop application: Amazon, Instagram and Threads, Facebook, TikTok, YouTube, Pinterest, Walmart, Target, Mavely, PostTap, Benable, and Levanta. These are isolated per-site Chromium profiles stored under your operating-system user-data directory. For Facebook and Instagram, the application also keeps a backup copy of your login cookies in the same directory so a sign-in is not lost when the browser closes.
• Keys, tokens, and passwords you enter for services the application connects to with credentials: your AI provider API keys (OpenAI, Ideogram, FAL AI, etc.), Reddit and Telegram credentials, affiliate-network and link-provider credentials (such as Levanta, Archer, GeniusLink, URLgenius, and Linktw.in), your residential proxy login, and your own Amazon Creator API credentials. These are stored in an AES-256-GCM-encrypted credential store under the same user-data directory. The desktop application does not send your own Creator API credentials to us. If you also use the Chrome extension, see §2.5.
• Diagnostic logs, telemetry traces, and engine state files.

If you choose to export a .ibworkspace bundle, copy log files manually, or sync your user-data directory through OneDrive / iCloud / Dropbox / Google Drive, that data leaves the local-only scope. From that point forward, the terms of the service you use to move or store the data apply, and Company has no visibility into or control over it.

2.2 Sent to our servers (Cloudflare Workers, R2)

We operate three Cloudflare Workers that handle a small, well-defined set of data flows:

• Email address → licensing Worker: magic-link sign-in, license lookup, transactional email (lawful basis under GDPR Art. 6: contract performance).
• License key → licensing Worker: tier enforcement, seat counts, and license activation status - whether your license is active and when it last checked in (contract performance).
• Device fingerprint (a one-way SHA-256 hash of OS and hardware identifiers; the raw identifiers never leave your device) → licensing Worker: per-device activation, anti-piracy, suspicious-login alerts (legitimate interest in license enforcement and account-security alerting).
• License usage counters (message-send counts, tier-gated feature usage) → licensing Worker: tier-cap enforcement, billing reconciliation (contract performance).
• Feedback, feature requests, community Q&A submissions → feedback Worker: product improvement, public Q&A on the website (consent - you actively submit).
• Product search terms and ASINs from Shopping Butler → licensing Worker: your license key and the search terms or product IDs you look up are sent to our Worker, which runs the search using the Company's own Amazon Creator API credentials (see §2.5) and returns the results to you. The Worker does not save the search terms (contract performance).
• Outbound deep-link rewrites and post-tap analytics → links Worker: affiliate link resolution (legitimate interest).
• Update-feed requests for update manifests (latest.yml / latest-mac.yml) and installer blobs (.exe on Windows; .dmg / .zip on Mac) → our release hosts (dl.influencerbutler.com, Cloudflare R2, for Windows; influencerbutler.influencerbutler.com for Mac): auto-update delivery (contract performance).

Through the desktop application and the Workers above, we do not receive: the contents of your messages to third-party platforms, your login credentials for third-party platforms, your AI provider API keys, the contents of your workspace bundles, your screenshots, or any cookies beyond the magic-link auth cookie issued by our own Worker. The optional features in §2.5 to §2.10 send us additional data, as described there. In particular, if you use your own Amazon Creator API credentials in the Chrome extension while signed in, the extension saves them to your account and we store them (see §2.5). The desktop application on its own does not send your own Creator API credentials to us.

2.3 Sent to third-party processors acting on our behalf

We contract with the following sub-processors. Each acts under written agreement and processes only the data needed to deliver its part of the Software. That agreement is a Data Processing Agreement (DPA) or the provider's equivalent data processing terms, incorporating Standard Contractual Clauses where a transfer requires them (see §9). If you are a business customer who needs a Data Processing Agreement with us directly, request one using the contact details in §12.

• LemonSqueezy, Inc.: payment processing, subscription management, customer-portal hosting. Receives your billing details and transaction history. It also supplies the license keys and subscription status we use for your account. We do not receive or store full payment-card numbers. Their privacy practices: lemonsqueezy.com/privacy.
• Resend (Bounce, Inc.): transactional email delivery. Receives your email address and the message body of magic-link emails, new-device login alerts, onboarding messages, per-Butler issue notifications, and, for people who have an account or have signed up on our site, product, newsletter, and event emails (§2.8) along with delivery, open, and click events. Their privacy practices: resend.com/legal/privacy-policy.
• Cloudflare, Inc.: infrastructure for the licensing / feedback / links Workers and for dl.influencerbutler.com (CDN + R2 object storage). Processes request metadata (IP address, user-agent, request headers) for transport-layer security and abuse mitigation. Their privacy practices: cloudflare.com/privacypolicy.
• AI providers you enable (OpenAI, Ideogram, FAL AI, and any others you add) - when you enable an AI feature and supply your own API key, the Software calls that provider directly from your device under your account. Company has no visibility into or contractual relationship with the provider on your behalf; the provider's privacy policy applies to whatever you send.
• DeepLink / smart-link providers you connect (GeniusLink, URLGenius, Linktw.in) - if you turn on "single redirect" (smart-link) marketplace links and connect one of these services with your own account, the Software sends the destination product URL (a tagged Amazon link) to the provider you chose so it can mint a country-routing short link. Company has no contractual relationship with the provider on your behalf; the provider's own privacy policy governs what it does with that data. If you leave this feature off, or use "off" or "country links" mode, no such request is made.
• Influencer Butler branded links (our own service) - if you choose Influencer Butler as your link provider (a paid feature), the Software sends the destination product URL (a tagged Amazon link) to our links service at links.influencerbutler.com to create a short, branded link. When someone clicks that link, we record the click (time, approximate country from the network, referring site, and device type) against an anonymized owner identifier derived from a one-way hash of your license key, so we can show you a Link Performance dashboard. We do not store your raw license key alongside links or clicks, and we do not sell this data. If you use a different provider, or "off" or "country links" mode, no such request is made.
• Google LLC (Google Analytics 4 / gtag.js): only on the influencerbutler.com website, and only with your prior consent via the cookie banner. Receives standard GA4 event data (page views, referrer, anonymized IP). The desktop application does not contain Google Analytics or any comparable third-party analytics library.
• Meta Platforms, Inc. (Meta / Facebook Pixel and Conversions API): only on the influencerbutler.com website, and only after you choose "Accept all" on the cookie banner. When enabled it records page views and key website actions (starting a trial, creating an account, beginning checkout, and completing a purchase) so we can measure our Facebook/Instagram advertising and build audiences of people similar to our customers. For purchases and sign-ins we also send a hashed (irreversible) form of your email address as a match key; we never send Meta your raw email, your name in the clear, or any Software workspace data. The desktop application contains no Meta pixel or comparable advertising tracker. Their privacy practices: facebook.com/privacy/policy.
• Vercel, Inc.: hosting and serverless functions for the influencerbutler.com website, your online account, and the dashboard. Processes request metadata (IP address, user-agent) and the data you submit through the site.
• Supabase, Inc.: managed database and authentication for your online account, dashboard data, and the other data described in §2.5 to §2.9. Our project is hosted in the United States. Their privacy practices: supabase.com/privacy.
• OpenAI and Groq (as used by us, in addition to the providers you connect yourself): the AI Assistant, call and event summaries, and support-ticket extraction described in §2.6.
• Recall.ai, Inc.: records Google Meet calls and events we host, and produces transcripts (§2.7). Their privacy practices: recall.ai/privacy.
• Google LLC (Google Calendar, Google Meet, YouTube): hosts our calls, receives your email address as a calendar invitee, and hosts event replays we publish to our YouTube channel. This is in addition to the Google Analytics use described above.
• PayPal, Inc.: affiliate commission payouts (§2.9).
• Residential proxy provider you connect (for example Decodo or IPRoyal): if you configure a residential proxy in the desktop application, the traffic of the application's Facebook features goes through the proxy you choose, and that provider sees it. Those features are Deals Butler Facebook posting, the Facebook sign-in check, and the Best Seller Butler Facebook scan. The proxy is not used for Instagram, Messenger, the Amazon butlers, or any other feature, which connect from your own network. Company has no relationship with the provider on your behalf. If you do not configure one, nothing is sent.
• api.ipify.org and proxycheck.io (automatic ban-risk check): the desktop application checks your current egress IP address against these two services, shortly after launch, when your network reconnects, and periodically afterward, so it can warn you if you appear to be posting from a data-center or VPN-style address rather than a residential one (a strong bot signal to platforms like Meta). This check runs automatically and is not something you configure. It looks at your computer's own connection, so it still runs if you have configured a residential proxy; in that case the application simply stops showing the data-center warning. Company has no relationship with either provider on your behalf; their own privacy practices apply to the IP address they receive. The result is cached on your device, and the warning is informational only: it never blocks posting.

Except for the Meta advertising described above, which runs only after you choose "Accept all", we do not sell or "share" (as defined by CCPA/CPRA) your personal data for cross-context behavioral advertising. If you reject non-essential cookies, or your browser sends a Global Privacy Control signal, the Meta pixel does not load and no advertising data is shared. We do not use your data to train AI models.

2.4 Affiliate links and how the Software helps you earn

Influencer Butler is an affiliate-marketing tool. When you build a product link (for example the "copy my link" action or a scheduled post), the Software creates an Amazon affiliate link tagged with your own Amazon Associates account or storefront handle, the one you enter in settings, so that qualifying purchases earn a commission that Amazon pays to you. The Software does not use its own or the Company's affiliate tag, does not substitute a different tag, and does not take a share of your commissions. If you have not set a tag, the link is left untagged.

If you connect an optional smart-link or affiliate-network provider (see §2.3), your tagged link may be sent to that provider to create or shorten it. You are responsible for the affiliate disclosures your own audience and the law (for example the U.S. FTC) require. Where the Software publishes content on your behalf, it appends your configured disclosure (such as "(AD)") to help.

2.5 Your online account, dashboard, and Chrome extension sync

When you create an account or sign in on influencerbutler.com, or start a trial, we store your account in our database (hosted with Supabase). We process the following, for the reasons given:

• Account and subscription data: email address, name (if you give one), sign-in method, plan, trial and subscription status, license keys and seats, and the dates of key events such as sign-up and cancellation. Used to run your account and enforce your plan (contract performance).
• Dashboard data you choose to sync: if you sign in to the Chrome extension or the desktop application with your license key and leave sync on, the data described in our Extension Privacy Policy is sent to your dashboard (product scans, content gaps, order-history results including the price you paid, storefront checkup results, deals you send, and, if you use "Sync to web" in the desktop app, your earnings summaries and top products). This is shown only to you in your dashboard. You can turn sync off in the extension or desktop settings (contract performance, and consent where you turn on an optional sync).
• Your own Amazon Creator API credentials, in the Chrome extension (optional): if you enter these in the extension while signed in, the extension also saves them to your account so product lookups can run on our servers. We store the Credential ID, version, Associates tag, and Credential Secret per marketplace. The secret is encrypted before it reaches our database, is write-only (we never display it back to you or to any client), and is decrypted only on our servers to request product data from Amazon on your behalf. This also applies to credentials that reach the extension from the desktop application through the local settings sync between the two (that link stays on your own computer, but once the extension holds the credentials it saves them to your account like any others). If you do not use the extension, or are not signed in to it, your credentials stay on your device. The desktop application on its own never sends them to us. You can remove them at any time and we will delete them (contract performance).
• The Company's own Amazon Creator API credentials: some features use Influencer Butler's own Creator API credentials, which we hold as protected server-side secrets. They are ours, not yours, and are used to fetch product data from Amazon. First, Shopping Butler searches run on our Worker with these credentials (see §2.2). Second, if Amazon has not yet unlocked the Creator API for your own account, you can opt in to a short, expiring lease of these credentials. For the extension, the leased copy is stored encrypted with your account until you switch it off or delete your account. For the desktop application, it is stored on your device. Neither is your Amazon login, and neither gives us access to your Amazon account (contract performance).
• Usage counts: the action counts described in §3.3.
• Cross-device relay: if you link two of your devices so that the extension on one can send deals to the desktop application on the other, the deal data passes through a relay on our Cloudflare Workers and is delivered to the linked device. It is held only as long as needed to deliver it. Settings and secrets are never relayed.

Our website and its server functions are hosted on Vercel. See §2.3 and §9.

2.6 AI Assistant and AI-assisted features that we operate

Separate from the AI providers you connect yourself (§2.3), we operate a few AI features that use our own provider accounts:

• AI Assistant (voice and text) in your dashboard and the Chrome extension. What you say or type is sent to our AI providers to produce replies: OpenAI for voice, and Groq (with OpenAI as a fallback) for text. We store the session, including your account email and the transcript, so we can show your history, support you, and improve the Assistant (contract performance and legitimate interest). Please do not share passwords or payment-card numbers with the Assistant.
• Call and event summaries: recordings you take part in (see §2.7) are transcribed and the transcript is summarized, and support issues raised on a call may be filed as tickets, using Groq or OpenAI.
• Drafting help in the extension (post captions and per-campaign briefs), and for our own blog and event announcements. For the extension features, the product details or campaign signals you ask about are sent to our AI providers.

We use these providers through their business API, under their API terms. We do not use your data to train AI models, and we do not allow our providers to do so on our behalf.

2.7 Scheduled calls, live events, and recordings

If you book a call or register for a live event, we collect your name, email address, chosen time, and any topic you enter. Calls are held on Google Meet. We create the calendar event on our Google Calendar, so your email address is sent to Google as an invitee, and we read only our own calendar's busy times to offer open slots (we do not access your Google account).

Recordings. Calls and live events may be recorded. We use Recall.ai to send a recording bot into the Google Meet, which records the session and produces a transcript. You are told before you join, and by registering and joining you consent to being recorded. Call recordings and transcripts are used internally to follow up with you, summarize the call, and file support tickets. Recordings of live events may be shared publicly, including as a replay on our website, on YouTube (we upload to our own channel using Google's YouTube API), and as clips on social media, and may show your name, voice, and anything you say or show on screen. If you do not want to appear in a public replay, email privacy@influencerbutler.com before the event, or ask us afterward and we will remove you from the replay where we can. Lawful basis: your consent to be recorded, and contract performance.

Event registrants may also receive an invitation, reminder, and replay email (see §2.8).

2.8 Support, email, and community

• Support and feedback: when you contact us (form, email, in-app, or extension feedback) we keep your message, attachments and screenshots you send, your email address, and context you include such as page, app or extension version, and browser. Attachments are stored in Cloudflare R2. Some first replies may be drafted or sent automatically. Lawful basis: contract performance and legitimate interest in supporting you.
• Product and marketing email: with your account we send transactional email (sign-in links, receipts, alerts). If you sign up for our newsletter, a freebie, or a webinar, or if you are a customer or trial user, we may also send you product tips, offers, and event invitations. We send these through Resend. Marketing email contains an unsubscribe link, and we honor unsubscribes; if you unsubscribe we keep your address on a suppression list so we do not email you again. Our emails record when they were delivered, opened, and clicked so we can see what is useful (consent where required, otherwise our legitimate interest in telling customers about the product). You can object at any time by unsubscribing. Email opens are measured with a small image and can be blocked by your email client.
• Public posts: community Q&A posts, testimonials, and reviews you submit may be shown publicly with the name you choose. Testimonials are shown only with your permission.
• Surveys: if you cancel, we may ask why. Your answers are linked to your account and used to improve the product.

2.9 Affiliate program, payouts, and tax forms

If you join the Influencer Butler affiliate program, we process your referral link and the sign-ups and purchases attributed to it, your payout details, and your commission history. Referral attribution uses a first-party cookie or the code in your link, and for people you refer we record that they were referred by you.

• Payouts: we pay commissions through PayPal. PayPal receives your payout email address and the payout amount.
• Tax forms: if you earn above the reporting threshold, U.S. law requires us to collect a tax form (IRS Form W-9, or W-8BEN / W-8BEN-E for non-U.S. affiliates). We store your legal name, business name, tax classification, address, signature and date, and only the last four digits of your tax ID. We use this to file information returns (such as Form 1099-NEC) and for tax compliance (legal obligation).
• Public leaderboard: the public "Top Affiliates" page shows a count of referrals. Your name appears only if you opt in; otherwise only your initials are shown.

We do not tell the people you refer anything about your earnings.

2.10 Shared product catalogue (optional, off by default)

If you use the Chrome extension and turn on the optional shared product catalogue, product facts the extension reads on Amazon product pages you visit (ASIN, marketplace, price, best-seller rank, the "bought in past month" figure, category, brand, and carousel video placements) are sent to us and pooled de-identified for the shared catalogue feature. These are product facts, not personal data. We keep a record of which account contributed for security and abuse prevention only; it is never shown to other users. If the toggle is off, none of this is sent.

3) Cookies and analytics on the website

The influencerbutler.com marketing website uses Google Analytics 4 (gtag.js, measurement ID G-S1TC1QLYNN) to understand aggregate visitor traffic. GA4 sets cookies including _ga and _ga_<id> with a 14-month default retention. With your consent it also loads the Meta (Facebook) Pixel, which sets the _fbp cookie (and reads a _fbc cookie if you arrive from a Facebook/Instagram ad) with a default retention of up to 90 days, for advertising measurement and audience building (see §2.3).

We use Google Consent Mode v2 with all consent signals (analytics and advertising) defaulted to denied. Before you make a choice on the cookie banner, no analytics or advertising cookies are stored and the Meta pixel does not load. After you choose:

• Accept all: the analytics and advertising consent signals are set to granted; standard GA4 cookies are set, aggregate analytics flow, and the Meta pixel loads and begins recording page views and the website actions listed in §2.3.
• Reject non-essential: the default-denied state persists; no analytics cookies are written and the Meta pixel never loads.

We also honor the browser Global Privacy Control signal as a rejection: where present, no banner is shown, no analytics cookies are set, and the Meta pixel does not load. You can change your choice at any time from the cookie policy page or by clearing localStorage.ibConsent in your browser; withdrawing consent stops any further advertising data from being shared. The desktop application does not load gtag.js, the Meta pixel, or any other website-style analytics or advertising script.

Beyond the analytics and advertising cookies above, the website sets a small number of first-party cookies that it needs to function, such as keeping you signed in, remembering a referral or discount code that brought you to the site so it can be applied at checkout (ib_ref, ib_promo, ib_aff_src), a visitor identifier used to decide which welcome offer applies (ib_pv), and a short-lived token used after checkout (ib_welcome_token). These are listed in full, with their lifetimes, in our Cookie Policy.

3.1 Trial-click notifications

When you click a "Start Free Trial" or download button on the website, our server records standard request metadata: your IP address, the approximate location (city, region, and country) our hosting provider derives from it, your browser user-agent, the page you clicked from, your browser language, and the time. We email this information to our team so we are aware of trial interest and can follow up. The lawful basis is our legitimate interest in understanding and responding to demand for the Software (GDPR Art. 6(1)(f)). We send this internal notification through Resend (see §2.3); we do not sell or "share" this data, and we do not use it for advertising or AI-model training. To avoid duplicate notifications, the website sets a single first-party cookie, ib_trial_ping, which expires after one hour and stores nothing beyond a flag that a notification was already sent for your visit.

3.2 Recent-activity widget

On the homepage we may display a small "recent activity" popup showing genuine recent events: for a trial click, the approximate city/region it came from and how long ago; for a purchase, the buyer's first name, approximate city/region, and how long ago. It never shows your IP address, full name, email, or any contact detail, and only summarizes events from a short recent window. The lawful basis is our legitimate interest in conveying genuine demand for the Software (GDPR Art. 6(1)(f)). An administrator can hide any individual entry, and you can dismiss the popup for your session.

3.3 Product usage metrics ("proof of numbers")

The desktop application and the browser extension count the automated actions they perform for you, for example deals harvested, products scanned, and Creator Connections campaigns accepted, and report those counts to us. Each report is associated with your account through your license key (sent as a bearer token), which is how the same license-key connection that syncs your data to your dashboard already works. We use these counts in two ways: internally, to understand how the Software is used and to improve it; and publicly, in aggregate only, to show combined activity totals (such as a running "deals posted" counter) on our marketing website. The public totals are sums across all users plus a fixed baseline; they never identify you, your account, your storefront, or any individual campaign, product, or action.

The lawful basis is our legitimate interest in understanding usage and demonstrating genuine activity for the Software (GDPR Art. 6(1)(f)). This reporting rides the same sync channel as the rest of your dashboard data, so turning off sync in the extension's settings (or in the desktop app) stops these counts from leaving your device. We do not sell or "share" this data for advertising, and we do not use it to train AI models.

4) How we use information

We use the data described in §2 to:

• Provide, operate, maintain, and update the Software.
• Authenticate you and enforce per-device seat counts.
• Process your subscription and issue / renew your license.
• Send you transactional email (sign-in links, new-device alerts, onboarding, issue notifications).
• Respond to support requests and incorporate your feedback into product decisions.
• Comply with legal obligations and enforce our agreements (including chargeback defense and anti-piracy).
• Run your online account and dashboard, and show you the data you sync to it.
• Provide AI Assistant, call, and event features, including recording, transcription, and summaries.
• Run the affiliate program: attribute referrals, pay commissions, and meet tax-reporting obligations.
• Send you product and marketing email you have not opted out of, and measure how it performs.

Apart from the consent-based Meta advertising measurement described in §2.3 and §3 (which runs only if you choose "Accept all"), we do not use your data for advertising or profile-building, and we never use it for model training.

5) GDPR / EEA / UK rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion, subject to our retention obligations under §7.
• Restriction: pause our processing while we investigate a dispute.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: for processing that relies on consent (analytics, feedback submissions), at any time.
• Lodge a complaint with your local supervisory authority.

To exercise any of these rights, email privacy@influencerbutler.com from the address associated with your license. We will respond within 30 days (extendable by 60 days for complex requests, with notice). Lawful bases for processing under GDPR Article 6 are listed inline in §2.

6) CCPA / CPRA rights (California residents)

If you are a California resident, you have the following rights:

• Right to know what categories of personal information we collect, the sources, the business purposes, and the third parties with whom we share it (the answer is in §2).
• Right to delete your personal information, subject to the retention exceptions in §7.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing: we do not sell your personal information. The only "sharing" (as CCPA/CPRA defines it) is the Meta advertising pixel described in §2.3, and it operates only if you choose "Accept all". You can opt out at any time by rejecting non-essential cookies, revoking consent from the cookie policy page, or sending a Global Privacy Control (GPC) signal, which we honor on the website as a "Do Not Sell or Share" request that keeps the pixel from loading.
• Right to non-discrimination: we will not deny service, charge different prices, or provide a different level of service because you exercised a CCPA right.

To exercise these rights, email privacy@influencerbutler.com. We will verify your identity by confirming control of the email address associated with your license.

7) Data retention

• License records (email, license key, tier, activation status/timestamps): life of the account + 24 months.
• Device-activation logs (fingerprint + timestamp): 90 days, then aggregated into anonymized counts.
• Product usage metrics (per-account action counts behind the aggregate "proof of numbers" totals): retained in aggregate; the public counters are sums that identify no individual account or action.
• Transactional email metadata (Resend logs): 30 days.
• Feedback / feature-request / Q&A submissions: indefinite (these inform product roadmap); displayed Q&A becomes part of the public knowledge base unless you request removal.
• Website analytics (Google Analytics 4): 14 months (GA4 default).
• Website advertising (Meta Pixel, with consent): the _fbp/_fbc cookies last up to 90 days; Meta retains the event data it receives under its own retention schedule.
• Secure-store contents (API keys, sign-in cookies, your own Creator API credentials entered in the desktop application, etc.): not sent to us by the desktop application; they persist on your device until you uninstall the Software or delete the user-data directory. The one route off your device is the extension case described in §2.5.
• Crash and diagnostic logs (local): 30 days rolling, locally only.
• Account and dashboard data: for the life of your account. If you ask us to delete your account (email privacy@influencerbutler.com), we delete or anonymize it within 30 days, except records we must keep for tax, fraud, or legal reasons.
• Amazon Creator API credentials saved to your account (from the Chrome extension), and any leased copy of the Company's credentials: until you remove or switch them off, or delete your account. A lease also stops working when it expires. Credentials you enter only in the desktop application are not stored by us; see the secure-store entry above.
• AI Assistant transcripts: 12 months, then deleted.
• Call recordings and transcripts (private calls): 12 months, then deleted. Live event recordings: kept for as long as the replay is offered; we will remove you from a replay on request where we can.
• Support tickets and attachments: 3 years, then deleted.
• Marketing email events and suppression list: opens and clicks for 24 months; unsubscribe records indefinitely so we honor them.
• Affiliate payout records and tax forms: 7 years after the tax year, to meet U.S. recordkeeping rules.

After the retention period, records are either deleted or irreversibly anonymized.

8) Security

We protect personal data with reasonable administrative, technical, and physical safeguards, including AES-256-GCM encryption for credentials stored on your device, TLS 1.2+ for all traffic between the desktop application and our Cloudflare Workers, code-signed installers and signature-verified auto-updates, tight file permissions on the secure-store directory, and least-privilege Worker bindings.

No system is perfectly secure. If we become aware of a security incident materially affecting your personal data, we will notify you without undue delay and at the latest within 72 hours, consistent with GDPR Article 33 and applicable state breach-notification laws.

9) International transfers

Personal data we collect is processed in the United States (including by LemonSqueezy, Resend, Vercel, Supabase, Recall.ai, OpenAI, Groq, Google, and PayPal, and our Cloudflare account home region) and in Cloudflare's global edge network, which may process request metadata in any region where Cloudflare operates.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, transfers of your personal data outside those regions are protected by the Standard Contractual Clauses (SCCs) adopted by the European Commission, to the extent required, under the data processing terms of each provider named in §2.3.

10) Children

The Software is a business productivity tool intended for adults operating as content creators or small-business owners. It is not directed to children under 16 (or under 13 in the United States), and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, email privacy@influencerbutler.com and we will delete it.

11) Changes to this Policy

We may update this Privacy Policy as the Software evolves. When we make a material change, we will revise the "Last Updated" date and bump the PRIVACY_VERSION constant in the desktop application, which causes the next launch to display a re-acceptance prompt asking you to agree to the updated policy. For non-material changes (typos, formatting, address updates), we may post the change without a re-acceptance prompt.

12) Contact

For privacy questions, requests, or complaints:

The Social Media Posse LLC
Attn: Privacy
3556 S 5600 W #1-478
Salt Lake City, UT 84120
United States
privacy@influencerbutler.com