Skip to content
Commentfluencer

Privacy Policy

Effective June 1, 2026

This Privacy Policy explains how Commentfluencer, Inc. (“Commentfluencer,” “we,” “us,” “our”) collects, uses, shares, and protects information when you use commentfluencer.com and our related applications and services (the “Platform”). By using the Platform, you agree to this Policy. Capitalized terms not defined here have the meaning given in our Terms of Service.

1. Who this applies to

This Policy applies to Brands, Commenters, visitors to our site, and end users who click tracked links generated through the Platform. The Platform is intended for users 18 and older; we do not knowingly collect data from anyone under 18 (see Section 9).

2. Information we collect

2.1 Information you provide

  • Account and profile data: name, email, password (hashed), role (Brand/Commenter), business information (for Brands), profile details, niche/category tags, and rate preferences.
  • Social account data you submit: links/handles to your TikTok, Instagram, and YouTube accounts, verification information you provide to prove ownership, and links to specific comments you want counted toward your stats and leaderboard ranking.
  • Communications: messages you send through in-app messaging, and support requests and correspondence.
  • Tax and payout onboarding data: collected and verified by our payments provider (Stripe), see Section 2.3.

2.2 Click, tracking, and device data

When a tracked link is used, and when you browse the Platform, we (and our tracking infrastructure) collect: IP address, user-agent and device/browser information, referrer, click identifiers, timestamps, approximate (IP-derived) location, the tracked link/Deal involved, and conversion/postback data reported by Brands. This is the billing source of truth for clicks and conversions and is used for attribution and fraud detection.

2.3 Payment data (via Stripe)

Payments and payouts are handled by Stripe. Brands provide card/payment details and Commenters complete KYC/identity verification and bank/payout details directly to Stripe; Stripe also collects tax-form information (W-9/W-8). We do not store full card numbers or full bank-account numbers. We receive limited information from Stripe (e.g., payment/payout status, masked identifiers, onboarding/verification status) to operate the Platform. Stripe’s handling of your data is governed by Stripe’s Privacy Policy and the Stripe Connected Account Agreement.

2.4 Cookies and similar technologies

We use cookies and similar technologies for authentication/sessions, security, preferences, analytics, and click attribution. See Section 6.

3. How we use information

We use information to:

  • Operate the marketplace: create and secure accounts, verify social accounts, power search/discovery, messaging, and deal flow;
  • Track and attribute clicks and conversions, calculate commissions, the 20% Platform Fee, and payouts, and maintain our authoritative billing records;
  • Facilitate payments and payouts through Stripe, including holds, thresholds, clawbacks, and tax reporting;
  • Detect and prevent fraud and abuse (invalid traffic, bots, fake engagement, self-dealing), enforce our Terms and Acceptable Use Policy, and ensure FTC-disclosure and platform-rule compliance;
  • Display public profile stats and the leaderboard based on verified public-comment data;
  • Communicate with you (transactional notices, support, and, where permitted, product updates);
  • Improve and secure the Platform and comply with legal obligations.

3.1 Legal bases (EEA/UK users)

Where the GDPR/UK GDPR applies, we rely on: performance of a contract (operating the Platform and processing Deals/payments), legitimate interests (security, fraud prevention, displaying public stats, improving the Platform), consent (certain cookies/marketing, where required), and compliance with legal obligations (tax, anti-fraud, record-keeping).

4. How we share information

We are not in the business of selling your personal information. We share information as follows:

  • Between Brands and Commenters: to enable Deals, e.g., a Commenter’s public profile, stats, and handles are visible to Brands; messaging is shared between the parties.
  • Service providers / processors, including:
    • Supabase, authentication, database, and hosting of application data;
    • Stripe, payments, payouts, KYC, and tax reporting;
    • Social platform APIs (YouTube/Google, TikTok, Instagram/Meta) , where used for verification/stats;
    • hosting, analytics, email, logging, and fraud-prevention vendors.
  • Public leaderboard and profiles: verified public-comment stats and rankings are publicly displayed, which is core to the product.
  • Legal and safety: to comply with law, respond to lawful requests, enforce our Terms, and protect rights, safety, and the integrity of the Platform.
  • Business transfers: in a merger, acquisition, financing, or sale of assets, subject to this Policy.

We require service providers to protect your information and use it only to provide services to us.

5. International data transfers

We are US-based, and we and our providers may process information in the United States and other countries. Where we transfer personal data from the EEA/UK or other regions, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required. By using the Platform, you understand your information may be processed in countries with different data-protection laws than your own.

6. Cookies and tracking technologies

We use:

  • Essential cookies, authentication, session, security, and fraud prevention (cannot be disabled without breaking the Platform);
  • Functional cookies, preferences;
  • Analytics, to understand usage and improve the Platform;
  • Attribution identifiers, click IDs and related identifiers passed through our tracked redirects to attribute clicks/conversions.

You can control cookies through your browser settings; disabling some cookies may impair functionality. Where required, we present a consent banner and honor applicable opt-out signals (e.g., Global Privacy Control).

7. Data retention

We retain personal data for as long as needed to provide the Platform and for legitimate business and legal purposes, including:

  • Account/profile data, while your account is active and for a reasonable period afterward;
  • Tracking, attribution, commission, and payout records, retained as long as needed for billing, reconciliation, dispute resolution, fraud prevention, and to meet financial and tax record-keeping obligations;
  • Leaderboard and profile stats, historical snapshots may be retained for leaderboard and integrity purposes;
  • Payment/tax records, retained by Stripe and by us as required by law.

When data is no longer needed, we delete or de-identify it.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, port, or restrict your personal data, to object to certain processing, and to withdraw consent. California residents (CCPA/CPRA) have rights to know, delete, correct, and opt out of “sale”/“sharing” (we do not sell personal information) and to non-discrimination. To exercise rights, contact privacy@commentfluencer.com; we will verify your request and respond as required by law. You may also unsubscribe from marketing emails at any time. Some data must be retained for legal, security, fraud-prevention, and tax reasons even after a deletion request.

8.1 Your rights, self-serve

If you have an account you do not need to email us. Open Settings and use Your data to download a JSON file of everything we hold about you, or to delete your account. Deleting removes your login, profile, connected social accounts and their tokens, imported comments, your Commentfluencer page, directory links, Comment Lab history, notifications and feedback. We keep earnings records (commissions, payouts, partnerships) for accounting with your name removed, and messages you sent are replaced with “[deleted]”. Public YouTube index pages are built from public YouTube comments and are not account data; a page you claimed stays public and becomes unclaimed. The whole process takes two confirmations and under a minute, and we keep a record of the request without your personal data.

9. Children

The Platform is for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact privacy@commentfluencer.com and we will delete it.

10. Security

We use administrative, technical, and organizational safeguards (e.g., encryption in transit, access controls, hashed credentials, and reliance on Stripe for sensitive payment data) to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Protect your account credentials and notify us of any suspected compromise.

11. Third-party links and services

The Platform links to third-party sites (e.g., Brand destinations, social platforms, Stripe). Their privacy practices are governed by their own policies, not this one. Review them before providing information.

11A. YouTube API Services and Google user data

Commentfluencer uses YouTube API Services. When you choose to connect your YouTube account, the following applies in addition to the rest of this Policy.

Required notices. By using the YouTube-connected features you also agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.

What we access. With your permission we use the read-only scope https://www.googleapis.com/auth/youtube.readonly to read:

  • your YouTube channel’s public identity (channel ID, handle, subscriber count), to confirm you own the account you are claiming;
  • your subscriptions and liked videos, used only to work out which videos to look at when finding comments you wrote;
  • public comments on those videos, so we can identify the ones authored by your channel.

What we never do. We cannot and do not post, reply, edit, delete, or change anything on your YouTube account. We do not read your private data, watch history, private playlists, or any content belonging to other users beyond the public comments described above.

What we store. We store the comments we identify as yours (text, like and reply counts, the public link, and the video they appear on), your channel identity, and an OAuth token used to make these requests on your behalf. Tokens are stored server-side and are not readable by other users.

Limited Use. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not transfer it except as needed to provide the features you requested, to comply with law, or as part of a business transfer described above.

Revoking access. You can disconnect YouTube at any time from Connect Socials inside the app, which revokes our access immediately. You can also revoke it directly from your Google account at myaccount.google.com/permissions. Revoking stops all future access. Comments already imported remain on your profile until you remove them, and you can hide or delete any of them from the Viral Comments page at any time.

Retention and deletion. Stored YouTube data is deleted when you disconnect and request deletion, when you delete your account, or in line with the retention periods in Section 7. Email privacy@commentfluencer.com to request deletion of Google user data specifically.

12. Changes to this Policy

We may update this Policy. If we make material changes, we will provide reasonable notice and update the “Effective date” above. Your continued use after changes take effect constitutes acceptance.

13. Contact

Commentfluencer, Inc.
Privacy: privacy@commentfluencer.com
General support: support@commentfluencer.com
Website: commentfluencer.com