Legal
Platform data & API use
Effective 31 October 2026 · Applies to Credible Arena (OPC) Private Limited
In plain words
01The principle
A permission is only requested if a screen in the product would be wrong without it. We do not collect data speculatively. Influj writes to a platform in three ways only: a reply from the creator’s inbox — to a message somebody sent them, or to a comment somebody left on their post; on Instagram, hiding a comment the creator asked to hide, by tapping Hide or by switching on automatic hiding for one kind of comment (a hidden comment can be shown again); and on Telegram, a post the creator planned and asked our bot to post, at the time they chose. Influj never publishes a post on Instagram, Threads, Facebook or YouTube — it does not request permission to — and it never starts a conversation or deletes a comment on any platform, and never hides a comment on Facebook or YouTube.
02What we request, permission by permission
- instagram_business_basic
- Identify the account, show its handle, profile picture and follower count on the creator's own profile and to brands they work with.
- instagram_business_manage_insights
- Read reach, views, likes, comments, shares and saves for the creator's own posts, and aggregated audience age, gender and city bands.
- instagram_business_manage_messages
- For the creator's inbox: read the direct messages people send the account, and send replies — ones the creator writes, or an auto-reply from a rule the creator set up. Only in a conversation the other person started, and only inside the 24-hour window Instagram allows a reply in.
- instagram_business_manage_comments
- For the creator's inbox: read the comments people leave on the account's own posts, and publish replies — the creator's own, or a rule's they set up. The comment shield also uses it to hide a comment, only when the creator taps Hide or has switched on automatic hiding for one kind of comment (it starts with accounts pretending to be the creator). A hidden comment can be shown again at any time. This permission would also let an app delete comments; Influj never deletes a comment.
Threads
- threads_basic
- Identify the profile and show its handle, name and picture on the creator's own profile and to brands they work with.
- threads_manage_insights
- Read views, likes, replies, reposts and quotes for the creator's own threads, the follower count, and aggregated audience age, gender, city and country bands.
Facebook Pages
- pages_show_list
- List the Pages you administer so you can choose which to connect.
- pages_read_engagement
- Read the connected Page's own follower count and its own posts with their share counts (the Content tab).
- read_insights
- Read the Page's own post insights — video views, clicks and reactions.
- pages_messaging
- For the creator's inbox: read the Messenger conversations people start with the Page, and send replies — ones the creator writes, or an auto-reply from a rule the creator set up. Only in a conversation the other person started, and only inside the 24-hour window Messenger allows a reply in.
- pages_read_user_content
- For the creator's inbox: read the comments people leave on the Page's posts, including who wrote each one, so the creator can read them and answer the person privately by message. We do not read posts visitors publish on the Page, posts the Page is tagged in, or ratings. Never used to count, score or analyse anything, and never shown to brands. This permission would also let an app delete comments; Influj never does, and it never hides a comment on Facebook either.
- pages_manage_metadata
- Subscribe the Page to our webhook, which is how a new message or comment reaches the inbox at all. It carries no data of its own.
YouTube
- youtube.readonly
- Identify the channel and read its public statistics: subscribers, video views, likes and comments.
- yt-analytics.readonly
- Read the channel's own analytics — watch time, average view duration and retention — for videos delivered under a campaign.
TikTok
- user.info.basic
- Identify the connected account — its open id, display name and profile picture.
- user.info.profile
- Read the @username, bio and verified badge, so the profile card shows the account as TikTok does and a link placed in the bio can be checked.
- user.info.stats
- Read the follower count, following count, total likes and video count — the follower count is the number brands hire on.
- video.list
- Read the account's own public videos with their view, like, comment and share counts (the Content tab, and the report on a video delivered under a campaign). TikTok returns no audience demographics to any app, so we show none.
Snapchat
- snapchat-profile-api
- The one scope of Snap's Public Profile API: read the connected Public Profile's own metadata (name, username, picture, bio, website, tier), its subscriber count, its Spotlights and Saved Stories, per-Spotlight views, unique viewers, favourites, shares and watch time, and — with the creator's authorisation — an aggregated breakdown of viewers by age, gender and country. Never the ads or conversions scopes; Influj cannot post to, promote or advertise on Snapchat.
Telegram
- Bot administrator on your channel
- There is no OAuth for Telegram channels. You add our bot as an administrator, and that act is the proof of ownership. The bot reads member counts and reactions on channel posts. It cannot read view counts — no bot can. If you keep its "Post messages" right and choose "Post it for me" on a post you planned, the bot posts exactly that post, at the time you chose — nothing else, and never on its own.
WhatsApp Channels
- Ownership verification only
- No API exists that reports WhatsApp Channel metrics — not to us and not to anyone. We verify you control the Channel using a one-time code, and then report nothing about its performance, because there is nothing truthful to report.
03What we deliberately do not request
- Any permission to publish, schedule or delete posts on Instagram, Threads, Facebook or YouTube. (On Telegram the bot posts only a post you planned and asked it to, as above.)
- Any use of a permission to delete a comment. Some inbox permissions would allow it; Influj contains no code that does it. On Instagram, Influj hides a comment only when you tap Hide or switch on automatic hiding for one kind of comment, and you can show it again at any time. On Facebook and YouTube it does neither. We never remove what somebody else wrote.
- Any permission to start a conversation. We only ever reply to a person who messaged or commented first, inside the window the platform allows a reply in.
- The identity of your individual followers — we only ever receive aggregate bands. We see one person’s name and picture only when they message you or comment on your post, because your reply could not otherwise reach them.
- Advertising or ad-account access. Our numbers are organic post insights, not ad performance.
04Google and YouTube specifically
Influj uses YouTube API Services. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely, that means data from Google APIs is used only to provide and improve the features you connected the channel for; it is not transferred to others except as needed to provide those features, to comply with law, or as part of a merger where the same restrictions carry over; it is never used for advertising; and no human reads it except with your explicit permission, for security, or where the law requires it.
You can revoke Influj’s access at myaccount.google.com/permissions. You are also bound by the YouTube Terms of Service, and Google’s Privacy Policy governs data Google holds.
05Meta specifically
Influj never publishes on Meta platforms. Creators publish on their own accounts and share the link; we read the post’s own fields and its insights using the access the creator granted, so the brand who paid for it can see how it performed. We write two things: a reply from the creator’s inbox, to a message or comment someone sent them, and — on Instagram, only when the creator asks — a hide on a comment, which the creator can undo. We never delete a comment.
Removing Influj from your Instagram or Facebook settings revokes our access. Meta notifies us, and we mark the channel disconnected, stop refreshing it, and delete the messages and comments its inbox held — you do not have to tell us separately.
06Honest limits
Some platforms report far less than the others, and the product says so rather than filling the gap with an estimate:
- Telegram tells bots about reactions, not views. The view count in the Telegram app comes from an interface bots cannot use, so we show no view count at all.
- WhatsApp Channels have no metrics API. We can prove you own the Channel and nothing more.
- TikTok and Facebook Pages report no audience demographics to connected apps — the creator sees them inside TikTok Studio and Meta Business Suite, but no API returns them. Those channels show an empty Audience tab that says so, and never appear in a brand’s age, gender or city filters.
- Instagram Stories and live streams disappear, so a delivery cannot be verified as live after the fact the way a Reel or a feed post can.
A metric a platform does not publish is shown as absent, never as a zero. A zero is a real and terrible number; absent is the truth.
07Retention and deletion
Platform data is refreshed while a channel is connected and stops the moment it is disconnected. Metrics already attached to a completed campaign stay with that campaign’s record because both parties relied on them. Full detail is on the delete your data page.
08Trademarks
Instagram, Threads and Facebook are trademarks of Meta Platforms, Inc. YouTube and Google are trademarks of Google LLC. TikTok is a trademark of TikTok Ltd. Snapchat is a trademark of Snap Inc. WhatsApp is a trademark of WhatsApp LLC. Telegram is a trademark of Telegram FZ-LLC. Influj is not affiliated with, endorsed by or sponsored by any of them. Questions: legal@influj.com.
Questions about this document? Write to legal@influj.com.