Legal
Privacy Policy
This Policy is provided by Ultimate Quantum LLC. Please read it fully; it explains what Ultimate Influencer collects, why, who processes it, and the choices you have.
1. Who we are
Ultimate Influencer (ultimateinfluencer.ai) is operated by Ultimate Quantum LLC ("Ultimate Quantum", "we", "us"), a Wyoming limited liability company. We are the controller of the personal data described here. Contact us through the Ultimate Quantum contact page.
2. What we collect
- Account data. Your email address, name if you provide one, password hash, role, and the sign-in and password-setup tokens we issue.
- Organization and influencer data. The workspace's name, members and their roles; influencer names, niches, topics, audiences, personas, languages, visual identities, reference-channel links, content pillars and official source domains; brand, presenter and sponsor settings; schedules, budgets and publishing controls; and connected publishing accounts (platform, account identifier and credentials needed to publish on your behalf).
- Uploads. Logos, fictional presenter portraits, backgrounds, sponsor logos, illustrations, footage, diagrams, music and other media you upload, together with credits, license information and rights attestations.
- Job settings and run outputs. Job schedules, research results and their sources, verification results, storyboards and scripts, your approve/reject decisions, generated audio and video, captions, post copy, publishing results, quality-check results and the public edition page for each run.
- Campaign and attribution data. Campaign names, offer kinds, target URLs, disclosures, currencies, active dates and terms confirmations; frozen per-run campaign records and attribution links; and aggregate redirect counts for those links. Revenue and refund entries submitted by administrators or signed integrations contain a campaign identifier, optional link identifier, external event identifier, amount, currency and event time. Redirect counts do not identify unique visitors; ordinary request logs may still contain IP addresses and request metadata. Do not submit customer names, emails or other unnecessary personal data in event identifiers or URLs.
- Performance data. Published-post identifiers, delivery status, platform-reported audience and engagement metrics and their observation times. These support reporting and, when enabled, selection among your approved content pillars; they do not establish revenue or identify individual viewers.
- Usage and billing data. Credit reservations and consumption per run, plan and subscription status, Stripe customer and subscription identifiers, and invoice and payment events sent to us by Stripe. We do not receive or store full card numbers.
- Audit logs. A record of significant actions in the Service (for example sign-ups, sign-ins, approvals, billing changes, member changes) with the acting user, organization, action and time.
- Security data. IP addresses and request metadata used to throttle sign-up, sign-in, password-reset and contact requests and to detect abuse; server logs of requests and errors.
- Custom package requests. The name, email, organization, volume, platforms and message you send through the Custom Packages form.
- Notifications. If you configure alert email or SMS destinations, those addresses and numbers and the messages we send.
3. Why we use it
- To provide the Service: maintain original influencer profiles; research, verify, produce, check and publish editions; host edition pages and campaign redirects; report performance and recorded campaign revenue; bill you; send transactional email and alerts.
- To keep the Service secure: authenticate you, throttle abusive traffic, investigate incidents and keep audit records.
- To improve the Service: aggregate calibration and quality metrics from review outcomes and QA results. We do not sell personal data and do not use your data to advertise to you.
- To respond to your requests, including Custom Package enquiries and support.
- To meet legal obligations, including tax and accounting records.
Where the GDPR or similar law applies, our legal bases are performance of a contract (providing the Service), legitimate interests (security, improvement, business communications), legal obligation, and consent where we ask for it.
4. Processors and other recipients
We use the following providers to run the Service. Each receives only what its function requires.
| Provider | Purpose | Data involved |
|---|---|---|
| Stripe | Payments, subscriptions, customer portal | Email, organization name, billing details, payment method (held by Stripe), invoices |
| OpenAI | Hosted web search research, verification, script and copy generation, transcription for QA, text-to-speech | Influencer and topic settings, source material, research text, scripts, generated audio/video for checking |
| Pexels | Stock footage and images, where used | Topic-derived media search terms |
| Protoface | Fictional AI presenter video synthesis | Authorized fictional portrait, narration audio and presenter settings |
| PostPeer | Publishing to connected platforms, delivery status and audience metrics | Connected-account identifiers and credentials, finished video, captions, post copy and platform-reported metrics |
| Google Cloud | Hosting, storage and databases | All Service data |
| Resend | Transactional email (setup links, alerts, receipts) | Email addresses and message content |
| SignalWire | SMS alerts, if configured | Phone numbers and message content |
Publishing platforms you connect (for example YouTube, TikTok, Instagram, Facebook, X, LinkedIn) receive the editions and copy you publish under their own privacy policies. We may also disclose data to professional advisers, to a successor in a merger or sale, or where required by law or to protect rights and safety. Some providers process data in the United States and other countries; where required we rely on standard contractual clauses or equivalent safeguards.
Campaign links redirect visitors to the offer destination selected for that run. The destination operator receives the resulting visit and any information in the target URL under its own privacy policy. Administrators and authorized integrations submit conversion records to us; the Service does not itself collect a buyer's payment for these offers.
5. Public content
Editions you publish and their public edition pages (title, narration, topic explanations, sources, media credits, AI and commercial disclosures, campaign links and links to published posts) are public by design. Do not include personal data in influencer profiles, presets, brand names, media credits or campaign material that you do not intend to publish.
6. Cookies
The Service sets one cookie: a session cookie that keeps you signed in to the app. It is marked HttpOnly and, in production, Secure and SameSite. We do not use advertising or third-party analytics cookies on ultimateinfluencer.ai. Campaign redirect counts do not require a tracking cookie. The legal pages load fonts from Google Fonts, which may log the request to its servers under Google's privacy policy.
7. Retention
- Account and organization data: for as long as the account exists, then deleted within 90 days of account deletion, except as noted below.
- Run outputs, uploads, influencer profiles, campaign and attribution records, performance data and edition pages: while the account exists, subject to the billing and audit-record exceptions below. Deleting a run or an account removes its stored media and edition page; copies already published to platforms remain under your control there.
- Billing records and audit logs: up to seven years where required for tax, accounting and dispute purposes.
- Security logs and IP addresses used for throttling: up to 90 days.
- Custom package requests: until the enquiry is closed and for up to two years afterwards for follow-up.
8. Security
We protect data with encryption in transit (HTTPS), hashed passwords, expiring sign-in and setup tokens, per-organization access checks, request throttling, restricted administrative access and audit logging. Connected-account credentials are stored only as needed to publish on your behalf. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.
9. Your rights and requests
Depending on where you live, you may have rights to access, correct, export, restrict or delete your personal data, to object to certain processing, and to withdraw consent. Administrators can update account and organization data in the app and can cancel subscriptions through the billing page. For other requests, including account deletion or a copy of your data, use the Ultimate Quantum contact page and provide the email address on your account. We will respond within 30 days. You may also complain to your local data-protection authority.
We do not sell or share personal data for cross-context behavioural advertising, and we do not discriminate against you for exercising your rights.
10. Children
The Service is for adults. You must be 18 or older to create an account. We do not knowingly collect personal data from anyone under 18; if you believe we have, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy. For material changes we will notify administrators by email or in the Service at least 14 days before they take effect. The effective date at the top shows the current version.
12. Contact
Ultimate Quantum LLC · ultimatequantum.ai · Contact Ultimate Quantum