Privacy Policy

Our role: processor and controller

When you connect a store, Justify acts as a processor for that merchant's customer data. The merchant remains the controller of their own customer relationships, and their instructions (the connection / data-processing agreement) are the operative authority for what we ingest. Justify acts as a controller only for the derived influencer-attribution analytics it produces on top of that data.

What customer data we collect

The core privacy guarantee is on email: raw customer email is never stored. We persist only a keyed, one-way hash (emailHash), used solely for de-duplicating customers and matching customers to influencers. Because the hash is keyed and irreversible, it is pseudonymised data, not cleartext personal data. This is the only privacy claim we make unqualified. Other personal data below is retained.

From a connected store we also collect, under the lawful bases shown:

We never persist a personal-data field we cannot name a use for. Aggregated summaries and line items must not carry names or addresses by design.

Retention and deletion on disconnect

We hold connected-store customer and order data for the life of the store connection. When a store is disconnected or the app is uninstalled, we purge that store's customer and order personal data within 30 days. We do not claim instantaneous deletion: the short, bounded window covers Shopify's mandatory data-request and redaction webhooks plus a safety margin. This 30-day rule is enforced by a scheduled purge job, not merely documented.

Speaking to Justify Intelligence

You can ask Justify Intelligence questions out loud. The first time you use the microphone we ask for your consent, and we record that you gave it and the version of this notice you agreed to. If you do not consent, typing works exactly as before.

When you speak, your audio is streamed to Google, which turns it into text and answers it. Google processes this audio in the European Union, under its data processing terms with us, and does not use it to train its models.

We do not store your audio. It is discarded once it has been turned into text, and no recording of your voice is kept.

The written transcript of what you said, and of the answer, is saved in your conversation in the same way as a typed message, and is kept for 24 hours. Anything Justify Intelligence remembers from a conversation is kept until you ask us to forget it.

We process your voice on the basis of your consent. You can withdraw it at any time by contacting us in-app, and the microphone will ask for your consent again before it is next used.

Our Chrome extension

Our Chrome extension, called Justify, shows you what your Justify account knows about an influencer while you look at their Instagram, TikTok or YouTube profile. It only does this when you are signed in to Justify.

On Instagram, TikTok and YouTube, the extension looks only at the address of the page, to work out which influencer's profile you are on. It does not read anything on the page, such as posts, comments or messages. It does not run on any other website, and it does not look at your browsing history.

While you are signed in and the panel is open, the extension sends the influencer's username, and which of the three sites they are on, to your Justify account. That is how it finds what Justify knows about them. If you save an influencer, add them to a campaign, write a team note or ask for a risk report, that is kept in your Justify account, just as it is when you do it in the app. If you ask the extension to find and save an influencer you have not saved before, that search is kept in your account's search history.

Your sign-in is kept inside the extension on your computer, and only the extension can read it. The extension also remembers which influencer each tab is showing until you close the tab, and which parts of the panel you left open. Signing out deletes your sign-in. Removing the extension from Chrome deletes everything it kept on your computer.

Each time the extension asks Justify for something, our servers write a short record of which feature was used, by which account, when, and whether it worked. The record does not include the influencer's username. We keep these records for 365 days, to keep Justify safe and to fix problems, and then delete them. Our technical logs can include an influencer's username, and we keep those for up to 30 days.

Signing in is handled by the company that runs sign-in for Justify. It is in the list of companies that help us, below.

We only use what the extension collects to make the extension work. We do not sell it. We do not use it for adverts, and we do not use it to decide whether anyone can borrow money. People at Justify do not look at it unless you ask us to, we need to keep Justify safe, or the law says we must. Our use of information we get from the extension follows the Chrome Web Store User Data Policy, including its Limited Use rules.

Influencers whose public profiles we hold

This part is for influencers who have not signed up to Justify. Brands and agencies use Justify to find influencers to work with, so Justify Ltd holds information from public Instagram, TikTok and YouTube profiles, which may include yours. You did not give it to us yourself, so the law asks us to tell you what we hold, where it came from and why. Justify Ltd is responsible for it as the controller.

We hold what your public profile shows, such as your username, name, profile picture and bio, your follower count and whether you are verified, the kind of content you make, the language you post in and the place your profile names. We also hold some of your recent public posts with their likes, comments and views, your follower count over time, the brands you mention, and any business email address or phone number you have published on your profile. From these we work out figures such as your average engagement, and our social data provider estimates the ages, genders and countries of your followers.

All of it comes from your public profiles and posts on Instagram, TikTok and YouTube. We get it through our social data provider, which is in the list of companies that help us, below. We do not get your private messages or anything else you have not made public.

We use it to show brands and agencies on Justify your profile and how your posts perform, to help them compare influencers and plan campaigns, to prepare a report on what you have posted publicly when a brand asks for one, and to let them contact you about working together using the business contact details you have published. These tools help people decide. No decision about you is made by a computer alone.

Our lawful basis is legitimate interests: ours, and those of the brands and agencies on Justify, in finding influencers to work with. We use only what you have chosen to make public, and you can object at any time.

Brands and agencies with a Justify account can see what we hold about you, and they can keep their own notes about you in their account. The companies in the list below help us run Justify and handle it for us. Some are in the United States, where we rely on Standard Contractual Clauses or the UK-US Data Bridge.

We keep a profile while it is available to brands on Justify. We update it from your public profile when it is looked at again, so it follows what you publish.

You can ask us for a copy of what we hold about you, ask us to correct it or delete it, or object to our using it. Write to us through the contact form at justify.app/contact, giving your username, and we will reply within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Sub-processors

We use the following third-party sub-processors. We notify customers at least 30 days before a new sub-processor begins processing personal data.

How to request deletion

Shopify merchants and their customers can exercise deletion rights through Shopify's mandatory privacy webhooks, which we implement: a customer-data request, a customer redaction (customers/redact), and a shop redaction (shop/redact) each trigger real deletion of the corresponding records. You may also contact us in-app to request deletion. Disconnecting or uninstalling the app starts the automatic purge described above.