Privacy Policy
This policy explains what personal information Imp Factory collects, why, who we share it with and the choices you have — on this website and on the Distribution Demon platform.
1. Who we are and what this policy covers
This Privacy Policy describes how Imp Factory (“Imp Factory”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you:
- visit this website;
- join the waitlist for Distribution Demon;
- apply for, or use, our managed distribution service; or
- use the Distribution Demon platform, including its web application and the automations it runs for you.
Together we call these the “Services”. Distribution Demon is a product of Imp Factory.
Imp Factory is the controller of the personal information described in this policy, except where we process information on behalf of a business customer — see section 5.
2. The short version
- We collect what you give us (your email, your answers, your account details), what the platform needs to do its job (the social accounts, credentials, content and settings you add), and basic technical data from your browser.
- Passwords, two-factor secrets, access tokens and other credentials you add to the platform are encrypted, and the platform never displays them back.
- We use trusted service providers to host and run the Services. We do not sell your personal information.
- This website uses cookies, including an advertising pixel that helps us measure our ads.
- You can access, correct, export or delete your information — see section 11 and section 12.
3. Information we collect
When you visit this website
- Device and usage information: browser and device type, operating system, language, approximate country, the page that referred you, the pages you view and when.
- Campaign information: the advertising or invitation link that brought you here (for example, campaign parameters in the link or a referral code), remembered for as long as your browser tab is open.
- Cookies and similar technologies, described in section 6.
Our website analytics do not use cookies and report visits in aggregate. When you submit a form, your IP address is held briefly in memory to stop abuse; it is not stored with your submission.
When you join the waitlist
- Your email address — the only thing we require.
- Optional answers you give after signing up: your role, how many accounts you manage, your niche, the platforms you use, what holds your growth back, and how you use AI today.
- Your referral code, and how many people joined through your invitation link.
- The campaign information above, and when you signed up.
By joining the waitlist you agree to receive emails about Distribution Demon’s launch and early access. Every email has an unsubscribe link.
When you apply for the managed service
The application form asks about you and your project: your name, company (optional), role, Telegram username, email (optional), preferred contact method, website and social channels (optional), product, niche, target audience, average order value, target regions, goals, the number of AI influencers you want, the materials you already have, any comments, and how you heard about us.
When you use the Distribution Demon platform
- Account information: your name, email address and password — or, if you sign in with a third-party account, the basic profile details it shares with us (typically your name, email address and profile picture).
- Workspace and team information: workspace names, the people you invite (their email addresses), and their roles and permissions.
- Social media accounts you manage: usernames, display names, profile identifiers, the profile content you set (such as bio, picture and links), and each account’s status and history in the platform.
- Account credentials: login names, passwords, two-factor authentication secrets, recovery email addresses and phone numbers, and any notes you attach. These are encrypted at rest.
- Verification mailboxes: when an automation needs a verification code — for example, while signing up to a social network — the platform signs in to the mailbox linked to that account and reads only the verification message. Mailbox credentials are encrypted; codes are used once and not stored.
- Network and device configuration: proxy details, including their credentials (encrypted), and the configuration of the devices that run your accounts, such as device model, operating system version and network type. The platform can show a live view of a device’s screen while you watch it.
- Content: files you upload for publishing, captions and other publishing settings, and AI generation requests — prompts, settings and the images or videos produced.
- Connected analytics: if you connect a social media account’s analytics through the social network’s official interface, we receive an access token (stored encrypted) and the account’s statistics — followers, reach, views, engagement and link clicks — and, for each post, its caption, link, thumbnail and performance figures.
- Activity information: the actions you and your team run, their schedules, results and errors, changes to accounts and settings, and an audit trail of who did what and when.
- Billing information: when paid plans launch, your plan, billing contact and payment history. Payments are handled by our payment processor; we do not see or store full card numbers.
- Communications: messages you send us, onboarding calls and feedback.
- Technical information: the IP address and browser of each sign-in, which our sign-in system records with your session for security, and the request logs our hosting keeps for a short time.
Social media accounts run through the platform may contain information about other people — for example, in captions or profile content. You are responsible for having the right to use it (see section 5).
4. How we use information
We use personal information only for the purposes below. If you are in the European Economic Area or the United Kingdom, the right-hand column shows the legal basis we rely on.
| Purpose | Information | Legal basis |
|---|---|---|
| Provide the platform: run automations, publish and generate content, show analytics, manage workspaces and teams | Platform information | Performance of our contract with you |
| Create and secure your account and sign-in | Account and technical information | Contract; legitimate interests (security) |
| Run the waitlist and referral programme, and send launch and early-access emails | Waitlist information | Consent, which you can withdraw at any time |
| Review applications and contact you about the managed service | Application information | Steps taken at your request before a contract; legitimate interests |
| Understand how people find our website and measure our advertising | Website information and cookies | Legitimate interests in understanding and improving our marketing |
| Keep the Services secure, prevent abuse and fraud, fix problems | Technical and activity information | Legitimate interests; legal obligation where applicable |
| Support you and tell you about changes to the Services | Account information and communications | Contract; legitimate interests |
| Improve the Services and develop new features | Usage and activity information, aggregated where possible | Legitimate interests |
| Billing, accounting and tax | Billing information | Contract; legal obligation |
| Comply with the law and protect our rights and our users’ | Any, as needed | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights, and you can object — see section 11.
5. Information we process for our customers
When a business uses the platform, the information it puts into its workspace — the social accounts it manages, their credentials and content, its proxies and devices, its generated content and analytics, and any personal information about other people within them (“Customer Data”) — is processed by us on that customer’s behalf and on its instructions. For Customer Data, the customer is the controller and we act as its processor or service provider.
If your information is in a customer’s workspace, please contact that customer first. If you contact us, we will pass your request on where we can.
Customers are responsible for having a lawful basis for the Customer Data they bring — including the right to use the accounts, credentials, content and likenesses they add — and for using the platform in line with our terms and the law. Where the law requires it, we sign a data processing agreement with our customers.
8. International transfers
We and our service providers process information in several countries, which may be outside the country where you live, including outside the European Economic Area and the United Kingdom. Where the law requires it, we protect transferred information with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the United Kingdom’s addendum to them, or transfer it only to countries recognised as providing adequate protection.
9. How long we keep information
We keep personal information only as long as we need it:
| Information | How long we keep it |
|---|---|
| Platform account and workspace | While your account is active, and up to 30 days after you delete it |
| Account credentials and access tokens | While the social account is in your workspace; deleted when the account or the workspace is deleted |
| Files uploaded for publishing | Deleted automatically after 3 days |
| Generated content and analytics history | While your workspace is active; deleted with it |
| Activity logs and audit trail | Up to 12 months |
| Waitlist | Until you unsubscribe or ask us to delete it, and no longer than 12 months after the platform’s public launch unless you become a customer |
| Managed-service applications | Up to 24 months after your last contact with us, unless you become a client |
| Billing records | As long as tax and accounting law requires |
| Backups | Deleted information may remain in backups for up to 30 days |
We may keep information longer where the law requires it, or to resolve disputes and enforce our agreements.
10. How we protect information
- All traffic to and from the Services is encrypted in transit.
- Account credentials, mailbox credentials, proxy passwords and access tokens are encrypted at rest with AES-256.
- Each workspace’s data is isolated at the database level, and what a member can see and do depends on their role.
- Verification codes read from mailboxes are used once and never stored.
- Files uploaded for publishing are deleted automatically after 3 days.
- Access to production systems is limited to the people who need it, and changes are logged.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
11. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy of it;
- Correct information that is inaccurate or incomplete;
- Delete your information;
- Restrict how we use it, or object to our use of it — including, at any time, to direct marketing;
- Receive the information you gave us in a portable format;
- Withdraw consent where we rely on it, without affecting what happened before;
- not be treated differently for exercising these rights; and
- complain to a data protection authority.
To exercise a right, email contact@impfactory.ai from the address linked to your account or sign-up. We may need to verify your identity before acting. We reply within one month — longer for complex requests, in which case we will tell you — and we do not charge unless a request is clearly unfounded or excessive.
You can also act directly:
- unsubscribe from any marketing email with the link it contains;
- edit most of your account and workspace information in the platform;
- manage cookies in your browser, as described in section 6.
12. How to delete your data
- Platform account: email contact@impfactory.ai from your account’s address and ask us to delete it. We delete your account within 30 days — and, if you own a workspace, the workspace and everything in it, including its social accounts’ credentials, content and analytics.
- Waitlist: unsubscribe with the link in any of our emails, or email us to remove your record entirely.
- Managed-service application: email us and we will delete it.
We confirm by email when the deletion is done.
13. Additional information for certain regions
European Economic Area, United Kingdom and Switzerland
Imp Factory is the controller of your information, except for Customer Data (section 5). Our legal bases are listed in section 4, and international transfers are covered in section 8. You can complain to the data protection authority where you live or work, or where you believe an infringement happened — though we would welcome the chance to resolve it with you first.
United States
If you live in a US state with its own privacy law, you can use the rights in section 11 in the same way. We do not sell your personal information. The advertising pixel on our Distribution Demon pages may count as “sharing” for advertising under some state laws; to opt out, block cookies in your browser or email contact@impfactory.ai. We will not treat you differently for using your rights.
14. Children
The Services are for businesses and adults. You must be at least 18 to use them. We do not knowingly collect personal information from children; if you believe a child has given us information, contact us and we will delete it.
15. Automation and AI
The platform runs automations and monitors the health of social accounts — for example, pausing posting when an account’s reach drops sharply. These decisions concern social accounts, not you as a person. We do not make decisions about people that have legal or similarly significant effects based solely on automated processing.
Your prompts and settings are processed to produce the images and videos you request. We do not use your prompts, uploads or generated content to train AI models. You are responsible for the content you generate and publish, including having permission to depict any real person.
16. Changes to this policy
We may update this policy as the Services change. The date at the top shows when it last changed. If a change is significant, we will tell platform users by email or in the platform before it takes effect.
17. Contact us
Questions about this policy or your information, or a request to exercise your rights — write to us:
Imp Factory
contact@impfactory.ai