Privacy Policy

1. Creators: what we collect

Your Instagram username and the public parts of your profile (name, picture, bio, follower and post counts, whether the account is private); the email address you register; the Highlights you select and every Story inside them (images, video, captions, stickers, location tags, tagged accounts, links); for travel creators on public accounts, the captions, location tags, dates, links and cover images of your feed posts and Reels; the AI output derived from them (transcripts, summaries, places, products, brands, codes, categories, a profile of your content style); your dashboard settings; and technical logs of your sign-ins.

We receive Highlight and post data from Instagram on your instruction, through Instagram's interface as used by our ingestion account or through a data provider (HikerAPI) for public accounts. We never ask for, see or store your Instagram password.

2. Visitors: what we collect

Searches and questions you type on a page and the answers shown, which the creator sees in aggregate as Insights (the query text, never who asked); which chips, codes, links and Stories are opened; a random identifier in a cookie so the creator's statistics can count unique visitors; product analytics through PostHog (hosted in the EU) covering pages viewed and features used; and your IP address, kept briefly for rate limiting and abuse prevention.

If you subscribe to a page or join a waitlist we keep your email address, the page it concerns, the time and the IP address it came from, until you unsubscribe.

If you create a follower account we keep your email address, your language, sign-in times, the boards you create and what you save to them (references to places, codes, Stories and creators), and the destinations, brands and creators you follow. What you do on the maps and in the planner (places and Stories opened, searches, filters, saves, links to Google Maps and Booking.com followed) is recorded in product analytics with a random id, joined to your account or anonymous trip id once you have one. When you came from a link we shared (for example in one of our WhatsApp groups), your browser remembers which one for 30 days, and a Booking.com link you open carries it, with the page it was on, in its affiliate label, so we know which link led to a booking; it never says who you are. Trips keep the destination, dates, the places you saved and the day plan, and, only if you tell us, who is coming and your preferences for the trip (pace, what you love, food needs such as kosher or vegan), which we also use as the starting point for your next trip; to plan the days we send the saved places (names, kinds, the creators' tips) and those preferences to Anthropic and ask Google for their opening hours at that moment, and we do not store the hours. When you ask the planner to change your trip in your own words, that text is sent to Anthropic with the trip's places, only to rebuild the plan, and it is stored with the trip. On the maps, "My location" shows where you are from your device's location, on your device only: it is never sent to us or stored. When you ask the planner about places near you ("coffee near me"), your browser or the app asks for your device's location for that one question; we receive it rounded to about 100 metres and use it only to find the city you are in and the places nearest to you. We send Anthropic the city and those places with their walking time, never the location itself, and we do not store the location; the answer (the places and how far they were) stays in the conversation like any other. In the app, if you turn on nearby alerts, your phone watches for the places on your trips and, in the city you are in, the places the creators you marked as yours loved, and alerts you when you are near one. Your location is used on your phone only; we never receive or store it, nor which city you are in. We send the app those places and the creators' tips about them; the phone counts how many alerts it showed so the app can ask whether you want more, and we remember your choices in a cookie on that phone. Choose them on your account page in the app, or turn alerts off anytime in your phone's settings. When you share an Instagram Highlight link with us, we read that public Highlight (its Stories, captions and location tags) to build your trip. We only read public accounts, and we keep the places and a link to each Story, not the videos. If you plan a trip without an account, we show it to you with an anonymous id in a cookie in your browser; it is saved to your account when you add your email, and deleted within about a day otherwise. When you talk to the planner ("Plan with me"), what you write is sent to Anthropic together with the places and the creators' tips it is about, only to answer you, and the conversation is kept in your account (with the anonymous id, if you have no account yet) so you can continue it; a conversation can be deleted from its page, and the account page deletes them all. When you tell the planner something lasting about yourself (that you're vegan, travel with a toddler, trust a creator), it keeps it as one line on your account, sends it to Anthropic with your next conversations and your trips' destinations and dates so it doesn't ask again, and shows it on your account page, where you can edit or delete it. You can delete the account and everything in it from your account page.

3. People who appear in Stories but do not use Influenced

Stories mention venues, brands and people, and tag accounts. Influenced extracts and shows those mentions because the creator chose to publish the Story. We show public information only (a username, a place name), never private contact details, and we do not build profiles of people across creators. If you appear on a page and would rather not, write to hey@lametaylim.com or use the creator's contact on Instagram; we can hide the Story or the mention.

For creators who have not joined, we may show a preview built from their public Instagram profile (name, picture, follower count, Highlight titles) with a waitlist. It is hidden from search engines and can be removed by the creator with one click on the preview or by email. Their recommendations can also appear in Lametaylim's Instagram lists (section 4).

4. Creators: asking us to remove your content

If your Stories, posts or recommendations appear on Influenced, on your own page, on a page we prepared before you joined, or on a destination map, you can ask us to remove them. Write to hey@lametaylim.com with your Instagram username and say whether you want everything removed or only specific Stories, posts or places. To make sure nobody removes someone else's content, we may ask you to confirm that you control the account, for example with a short code sent from it.

We take the content off public view within 7 days of a confirmed request and delete it, together with everything derived from it (transcripts, summaries, tips, map pins and places attributed to you), within 30 days. Copies in backups are overwritten within a further 30 days. A place that other creators also recommended stays on the map, attributed only to them. We keep a short record of the request itself (your username, the date and what was removed) so that we do not import that content again unless you ask us to.

Lametaylim, the travel community behind Influenced, also posts short lists of places that travel creators recommended on Influenced on its Instagram account @lametaylimm: the place, its area and the creators' tips in our own words, over our own footage and maps, never your Stories or photos. Some lists also show the username of the creator who recommended a place and tag that account. A removal request, or deleting your page, covers those lists too: within the same 7 and 30 days we delete or re-cut the lists that used your recommendations, and we do not use them in new ones.

5. Why we process it and on what basis

To provide the page a creator asked for (performance of our agreement with the creator); to answer visitors' questions and show them what they searched for (our legitimate interest in running the service and the creator's interest in reaching their audience); to send subscription and waitlist emails (your consent, withdrawn by unsubscribing); to keep the service secure and measure how it is used (legitimate interest); and to meet legal obligations.

Where the EU or UK GDPR applies to you, those are our legal bases. Under Israel's Protection of Privacy Law, this policy is the notice we are required to give when we collect your details, and you are not legally obliged to provide them; without an email address we cannot sign you in or notify you.

6. AI processing

Stories are transcribed and read by AI models from Anthropic (Claude) and OpenAI (Whisper), under their API terms, which do not allow them to train models on your content. Venues are located through Google Places and shown on Google Maps under Google's terms. AI output is stored with your page and can be corrected or hidden by the creator.

7. Who else sees the data

Service providers that process data for us, under contracts: Supabase (database and media storage, Frankfurt, Germany), Render (application hosting, Frankfurt), Cloudflare (network and security), Resend (email delivery), PostHog (product analytics, EU), Anthropic and OpenAI (AI processing, United States), Google (maps and places), HikerAPI (Instagram data for public accounts) and, if paid plans return, Lemon Squeezy (payments; we never see card numbers). We do not sell personal data and we do not share visitor identities with creators.

We disclose data when the law requires it, to protect our rights or the safety of others, and to a successor if Influenced changes hands, under this same policy.

8. International transfers

Data is stored in the European Union. Some providers process it in the United States under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Israel, where Influenced is operated, is recognised by the European Commission as providing adequate protection.

9. How long we keep it

A creator's content and derived data stay as long as their page exists; deleting the page removes them, including from Lametaylim's Instagram lists (section 4), with backups following within 30 days. Visitor events are kept for the creator's Insights for up to 24 months. Subscriptions and waitlist entries stay until you unsubscribe or the creator's page is deleted. Server logs and rate-limiting records are kept for up to 90 days. Coordinates from Google Places are refreshed at least every 30 days as Google requires.

10. Your rights

You may ask what data we hold about you, have it corrected or deleted, object to or restrict its processing, receive a copy in a portable format, and withdraw any consent. Creators can delete their page and all its data themselves from the Dashboard (Account → Delete my page). Everyone else, and creators with any other request, can write to hey@lametaylim.com; we reply within 30 days. Creators asking us to remove content we imported: section 4. If you are in the EU or UK you may also complain to your data protection authority; in Israel, to the Privacy Protection Authority.

11. Cookies

Influenced sets a sign-in cookie for creators (hl_session, 30 days) and for travellers (hl_user, 90 days), a language preference (hl_locale), a random visitor identifier for a creator's Insights, and PostHog's analytics cookie; your browser's storage also keeps which of our links you came from, for 30 days. There are no advertising cookies. You can block cookies in your browser; the sign-in and language cookies are needed for those features to work.

12. Security

Data travels over TLS and is stored with access controls; visitors read pages through a restricted database role that cannot see creators' emails, billing details or raw imports. Sign-in uses one-time links rather than passwords. No system is perfectly secure; if a breach affects you, we will tell you and the relevant authority as the law requires.

13. Children

Influenced is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created a page or subscribed, write to hey@lametaylim.com and we will remove the data.

14. Changes and contact

We will post changes to this policy here and, for material changes, tell creators by email. The controller of the data described here is Lametaylim, Israel. Contact: hey@lametaylim.com.