Privacy Policy

Who is responsible for your data

INFLOW Network LLC, 112 Capitol Trail, Suite A, Newark, Delaware 19711, USA (EIN 37-2020907), is the controller of the personal data collected through inflow.club. In this policy “we” and “us” mean INFLOW Network LLC.

This policy explains what we collect when you use the site, send an application or write to us, why we collect it, who sees it, how long we keep it and what rights you have. For visitors in Türkiye, our notice under the Law on the Protection of Personal Data (the KVKK notice) is part of this policy.

What we collect

Information you give us. Every application form asks for your name and e-mail address. Then, depending on who you are: as a creator, your TikTok username and phone or WhatsApp number and, if you wish, your country, content category, follower range and a referral code; as a brand or seller, your company and, if you wish, your website, the marketplaces you sell on, product category, phone number and a referral code; as a partner, your company and partner type and, if you wish, a referral code. We save the details of the first step of a form as soon as you continue from it, even if you do not finish the second step. We also keep what you write to us by e-mail.

Your choices. With each application we store which version of the Consent text you accepted, the language, the time, and which boxes you ticked: the required box for your explicit consent, and the optional boxes for updates by e-mail and by WhatsApp (the partner form, which asks for no phone number, has the e-mail box only).

Collected automatically. If you arrive through a link with a partner’s referral code or campaign tags (utm_source, utm_medium, utm_campaign, utm_content), we keep that code and those tags, the page you landed on (without any search part of the address), the page that sent you and the time of your first visit, so that we know who brought you. They are kept for your visit in your browser’s session storage and, only if you accept it, in a first-party cookie for 90 days. Google Analytics also records page views and events such as starting or sending a form, never what you typed in it: with its cookies if you accept analytics, and otherwise without cookies, as signals that carry no identifier stored in your browser. If you accept marketing, Google also uses your visits for our advertising (Google Ads): to measure our ads and to show you our ads on other sites and apps. The spam check on our forms (Cloudflare Turnstile) reads technical signals from your browser to tell people from bots. Our hosting provider’s server logs record technical data such as your IP address and browser type.

The forms do not ask for sensitive personal data, and we ask you not to put any in free-text boxes or e-mails.

Why we use it

We use your data to answer your application or message and decide whether and how we can work together; to run the creator network and the brand programs, for example to match creators and brands; to contact you about your application and, only if you agreed, to send you updates by e-mail or WhatsApp; to credit the partner who brought you; to keep the site secure and stop spam; to understand how the site is used, only if you accept analytics; and to meet our legal obligations.

We rely on the legal grounds that the law of your country provides: your consent (the explicit consent you give with the required box in the application form, as set out in the Consent text, and your separate consent to updates, to analytics cookies and to marketing), steps needed to enter into or carry out a contract with you, our legitimate interest in running, measuring and securing our business where it does not override your rights, and legal obligations.

We do not make decisions about you that have legal or similarly significant effects by automated means alone.

Who we share it with

We do not sell your personal data. We share it only as far as needed: with service providers that help us run the site and the business, under their agreements with us (hosting, Railway; spam protection, Cloudflare Turnstile; analytics, Google Analytics, with its cookies only after you accept them; advertising, Google Ads, only after you accept marketing; the tool where we keep applications, Inflow CRM, our own system; and e-mail or messaging tools, Google Workspace (Gmail) and WhatsApp Business (Meta)); with brands, creators or partners we work with, where this is needed for the program you applied to join, for example to introduce a creator to a brand; with professional advisers such as lawyers and accountants; with authorities, courts or other parties when the law requires it; and with a buyer or partner if the business is sold or reorganized, under the protections of this policy.

International transfers

INFLOW Network LLC and some of our service providers are outside your country, so your data may be processed in other countries, including Türkiye, the Netherlands and the United States. The applications you send are kept in Inflow CRM, our own system, hosted in the Netherlands. Where the law requires it, we use safeguards such as standard contractual clauses with our providers and, only where the law allows it for an occasional transfer, your explicit consent, which we ask for in the application form, as set out in the Consent text.

How long we keep it

We keep personal data only as long as we need it for the purposes above. Applications that do not lead to a working relationship: 3 years from the application. Records of a working relationship and of related payments: for the term of the agreement and, after it, as long as the law requires. Consent records: 10 years after our relationship with you ends. The referral cookie lasts 90 days, if you accept it. Analytics data is kept for the period set in our analytics settings, 14 months.

Cookies and similar technologies

The site uses as few cookies as it can. The details are in the Cookie Policy. In short: the referral code and campaign tags stay in your browser’s session storage while you visit; a first-party cookie keeps them for 90 days only if you accept it; Google Analytics uses its cookies only if you accept analytics, and otherwise counts visits without cookies; Google’s advertising cookies are used only if you accept marketing; and the spam check on forms is provided by Cloudflare. You can change your choice at any time.

Security

We use reasonable technical and organizational measures to protect personal data, such as limiting access to the people who need it. No method of transmission or storage is completely secure, so we cannot promise absolute security.

Your rights

Depending on the law that applies to you, you may have the right to ask whether we process your data and to get information about it; to get a copy; to have inaccurate or incomplete data corrected; to ask us to delete your data; to object to, or ask us to restrict, certain processing; to withdraw your consent at any time, without affecting what was done before; and to complain to the data protection authority in your country. Under the Turkish KVKK these rights are set out in Article 11.

To use a right, write to info@inflownetwork.com and tell us what you ask for. We may ask you to prove who you are. We answer within the time the law sets, and in any case within 30 days. You can also stop updates at any time with the link in each message, or by telling us.

Saudi Arabia

If you are in the Kingdom of Saudi Arabia, the Personal Data Protection Law (PDPL) and its implementing regulations apply to how we process your personal data, in addition to the rest of this policy. This policy is available to you before you send any data, through the link next to each form.

Legal grounds. We process the data you send in an application form with the explicit consent you give in that form, as set out in the Consent text, and we send updates only with your separate consent. Where the law allows it, we also rely on other grounds it sets out, such as steps needed to enter into or carry out an agreement with you, a legal obligation, or our legitimate interest in keeping the site secure.

Transfers outside the Kingdom. Your data is processed outside Saudi Arabia, in Türkiye, the Netherlands and the United States, including in the tool where we keep applications, Inflow CRM, our own system hosted on Railway in the Netherlands. We transfer it only as the PDPL and its rules on transfers outside the Kingdom allow, with standard contractual clauses with our providers and, only where the law allows it for an occasional transfer, your explicit consent.

Your rights. Under the PDPL you have the right to be told how your data is collected and used; to see your data and get a copy of it in a readable format; to have it corrected, completed or updated; to have it destroyed when we no longer need it; and to withdraw your consent at any time. To use a right, write to info@inflownetwork.com. We answer within the time the law sets.

The authority. You can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), which supervises the PDPL.

United Arab Emirates

If you are in the United Arab Emirates, Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) and its implementing regulations apply to how we process your personal data, in addition to the rest of this policy. Some free zones have their own data protection laws, such as the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM); those laws do not apply to us, because INFLOW is not established in the DIFC or the ADGM. This policy is available to you before you send any data, through the link next to each form.

Legal grounds. We process the data you send in an application form with the explicit consent you give in that form, as set out in the Consent text, and we send updates only with your separate consent. Where the law allows it, we also rely on other grounds it sets out, such as steps needed to enter into or carry out an agreement with you, or a legal obligation.

Transfers outside the UAE. Your data is processed outside the UAE, in Türkiye, the Netherlands and the United States, including in the tool where we keep applications, Inflow CRM, our own system hosted on Railway in the Netherlands. We transfer it only as the UAE PDPL allows, with standard contractual clauses with our providers and, only where the law allows it for an occasional transfer, your explicit consent.

Your rights. Under the UAE PDPL you have the right to get information about the data we hold and how we use it; to receive your data and have it sent to another controller where this is technically possible; to have inaccurate data corrected and to have your data erased; to ask us to restrict or stop certain processing; to object to decisions based only on automated processing that have legal effects on you; and to withdraw your consent at any time. To use a right, write to info@inflownetwork.com. We answer within the time the law sets.

The authority. You can complain to the UAE Data Office.

Children

The site and our services are for businesses and for adults. They are not directed at children and we do not knowingly collect their data. If you think a child has sent us data, tell us and we will delete it.

Links and other websites

The site links to other websites and platforms, such as TikTok. Their privacy practices are their own, so please read their policies. INFLOW is not affiliated with TikTok.

Changes to this policy

We may change this policy. The latest version is always on this page with its date, and we will tell you about important changes in a suitable way.

How to contact us

INFLOW Network LLC, 112 Capitol Trail, Suite A, Newark, Delaware 19711, USA. E-mail: info@inflownetwork.com.

Last updated: 15 October 2026.