Privacy and private creator data
Influencer Collaboration stores operational creator information that must be handled as private business data.
Private data examples
- creator profile and contact details;
- social account records;
- analytics screenshots and evidence;
- merchant notes and tags;
- application proposals and negotiation history;
- shipping addresses and fulfillment details;
- submitted content files;
- agreement, Final Terms and rights records.
Access model
Creators may access only their own permitted profile, applications, offers, Collaborations and content. Merchant permissions separate viewing from management actions. Suspended/Blocked Influencer Program status does not remove the user’s normal WooCommerce account or order access.
Operational guidance
- Give staff only the capabilities required for their role.
- Keep private evidence out of public Media Library pages and product documentation.
- Do not paste shipping, tax or identity data into public notes.
- Use the protected download controls for private files and contract documents.
- Review the plugin’s data/privacy settings before uninstalling. Purge behavior is an explicit configuration choice.
Social-provider boundary
Manual social records do not require provider OAuth. Where provider connections are later validated, access/refresh tokens are stored through the Pro secret boundary and must not be exposed in screenshots or support messages.
Verification
Test with separate merchant and creator accounts. A creator must not see merchant notes or another creator’s records; a logged-out visitor must not retrieve private evidence.
Related documentation
See Configure creator enrollment and profiles, Social accounts and analytics evidence, and Troubleshooting Influencer Collaboration.