Privacy Policy

1.1 Information You Provide

We collect information you voluntarily provide when using our Services:

• Account Information: Name, email address, password, company name, and contact details when you register
• Profile Information: Business information, payment details, tax identification numbers, and preferences
• Payment Information: Billing address, bank account details, and payment method information for processing commissions and subscriptions
• Communications: Messages, support requests, and feedback you send to us
• Content: Any content you upload, including promotional materials, logos, and creative assets

1.2 Information Collected Automatically

When you access our Services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers, and hardware settings
• Usage Data: Pages visited, features used, click patterns, time spent on pages, and navigation paths
• Tracking Data: Referral sources, affiliate link clicks, conversions, and attribution data
• Log Data: Access times, error logs, and server response information
• Location Data: General geographic location based on IP address

1.3 Information from Third Parties

We may receive information from:

• Integration Partners: Data from e-commerce platforms, payment processors, and other integrated services
• Social Login Providers: Basic profile information when you sign in using Google, GitHub, or other social accounts
• Analytics Providers: Aggregated usage and performance data
• Fraud Prevention Services: Risk scores and fraud indicators

We use the collected information for the following purposes:

2.1 Service Delivery

• Create and manage your account
• Process affiliate tracking, conversions, and commission calculations
• Facilitate payments and payouts
• Provide customer support and respond to inquiries
• Enable integrations with third-party platforms

2.2 Service Improvement

• Analyze usage patterns to improve features and user experience
• Develop new products and services
• Conduct research and analytics
• Test and optimize platform performance

2.3 Security and Fraud Prevention

• Detect and prevent fraudulent activities and abuse
• Verify user identity and prevent unauthorized access
• Monitor for security threats and vulnerabilities
• Enforce our Terms of Use and policies

2.4 Communications

• Send transactional emails (account confirmations, payment notifications, etc.)
• Provide product updates and announcements
• Send marketing communications (with your consent)
• Respond to your requests and inquiries

2.5 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Protect our legal rights and interests
• Fulfill tax reporting obligations

We may share your information in the following circumstances:

3.1 With Your Consent

We share information when you explicitly authorize us to do so.

3.2 Service Providers

We engage trusted third-party service providers who assist us in operating our Services:

• Cloud hosting and infrastructure providers
• Payment processors and financial institutions
• Email and communication service providers
• Analytics and monitoring services
• Customer support tools

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.3 Between Merchants and Affiliates

To facilitate affiliate relationships, we share necessary information between Merchants and Affiliates, such as referral performance data, commission information, and contact details as needed for program participation.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and your options regarding your information.

3.5 Legal Requirements

We may disclose information when required by law or in response to:

• Court orders, subpoenas, or legal process
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

3.6 Aggregated Data

We may share aggregated, anonymized data that cannot identify you individually for research, analytics, or marketing purposes.

4.1 Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly, including authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with our Services
• Tracking Cookies: Enable affiliate link tracking and conversion attribution

4.2 Third-Party Tracking

Our affiliate tracking system uses cookies and similar technologies to accurately attribute referrals and conversions. These tracking mechanisms are essential to the core functionality of our affiliate marketing platform.

4.3 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Services, particularly affiliate tracking features. For more details, please see our Cookie Policy.

We implement comprehensive security measures to protect your information:

5.1 Technical Safeguards

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms including two-factor authentication
• Regular security assessments and penetration testing
• Firewalls and intrusion detection systems
• Automated threat monitoring and alerting

5.2 Device Security

When you access our Services from your device, we implement the following security measures:

• Secure session management with automatic timeout
• Device fingerprinting for fraud prevention (with your consent)
• Secure cookie handling with HttpOnly and Secure flags
• Protection against cross-site scripting (XSS) and cross-site request forgery (CSRF)
• Regular security updates and vulnerability patching

5.3 Organizational Measures

• Access controls and role-based permissions
• Employee security training and awareness programs
• Incident response procedures
• Regular security audits and compliance reviews

5.4 Data Breach Response

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, and take immediate steps to mitigate any harm.

We retain your information for as long as necessary to:

• Provide our Services and maintain your account
• Comply with legal obligations (e.g., tax records, financial reporting)
• Resolve disputes and enforce our agreements
• Maintain business records for legitimate purposes

Specific retention periods:

• Account Data: Retained while your account is active and for 3 years after closure
• Transaction Records: Retained for 7 years for tax and legal compliance
• Analytics Data: Aggregated and anonymized after 2 years
• Support Communications: Retained for 2 years after resolution

Upon account deletion, we will remove or anonymize your personal information within 90 days, except where retention is required by law.

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can request a copy of your personal information in a structured, machine-readable format.

7.2 Correction

You can update or correct inaccurate information through your account settings or by contacting us.

7.3 Deletion

You can request deletion of your personal information, subject to legal retention requirements.

7.4 Restriction and Objection

You can request that we limit processing of your information or object to certain processing activities.

7.5 Marketing Opt-Out

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or updating your preferences in account settings.

7.6 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@afflyin.com. We will respond to your request within 30 days.

Afflyin operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer data internationally, we ensure appropriate safeguards:

• Standard Contractual Clauses approved by relevant authorities
• Data processing agreements with service providers
• Compliance with applicable data transfer frameworks
• Encryption and security measures during transfer

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

If you believe a child has provided us with personal information, please contact us at privacy@afflyin.com.

10.1 European Economic Area (GDPR)

If you are in the EEA, you have additional rights under GDPR:

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time
• Right to data portability
• Right to object to automated decision-making

Our legal bases for processing include: contract performance, legitimate interests, legal compliance, and consent where applicable.

10.2 California (CCPA/CPRA)

California residents have the right to:

• Know what personal information is collected and how it's used
• Delete personal information
• Opt-out of the sale or sharing of personal information
• Non-discrimination for exercising privacy rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

We do not sell personal information. To exercise your rights, contact us at privacy@afflyin.com.

10.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate. If you have questions about your specific rights, please contact us.

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

We are not responsible for the privacy practices or content of third-party services, including those of Merchants or Affiliates using our platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you via email or through our platform
• We may require you to acknowledge the updated policy

Your continued use of our Services after the effective date of the updated policy constitutes your acceptance of the changes.