Privacy Policy

We collect information that you provide directly to us, including:

• Account Information: Email address, organization name, and authentication credentials
• Platform Credentials: API keys and credentials for connected platforms (5 verified integrations plus dozens more in beta including Stripe, PayPal, Shopify, Gumroad, and more)
• Affiliate Data: Information about your affiliates, including contact details and commission rates
• Transaction Data: Sales and payout information synced from your connected platforms

We also collect some information automatically, including from visitors who are not our customers:

• Referral click data: When someone follows an affiliate tracking link, we record the click along with a one-way hash of their IP address (we do not store the address itself), their browser user-agent, and the referring page. This is what makes commission attribution and click-fraud detection possible.
• Attribution cookie: Following a tracking link sets a cookie named aff_tracking for 30 days. It holds the affiliate code, the link id, a session id and the click time, and it is cryptographically signed so it cannot be forged. It is httpOnly, so page scripts cannot read it, and it is not used for advertising.
• Diagnostics and analytics: Error reports, performance measurements, and a sampled recording of browsing sessions. See section 4 for who processes these and section 6 for how consent applies.

We use the information we collect to:

• Provide, maintain, and improve our affiliate management services
• Sync data from your connected payment platforms
• Calculate commissions and manage affiliate payouts
• Send you technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities

We take the security of your data seriously:

• Encryption: All sensitive data is encrypted at rest and in transit using industry-standard protocols
• Secure Storage: Platform credentials are stored securely using encrypted database fields
• Access Controls: We implement strict access controls to limit who can access your data

We do not sell your personal information. We only share data with:

• Connected Platforms: We connect to dozens of platform APIs (including Stripe, PayPal, Shopify, Gumroad, and more) using your credentials to sync data
• Service Providers: We use the following processors to run the service:
  • Vercel — application hosting
  • Stripe — subscription billing and payouts
  • Supabase — private storage for tax forms you upload (W-9/W-8). These contain your SSN or EIN, are held in a private bucket, and are served only through short-lived signed links
  • Resend — transactional and notification email
  • Anthropic — the AI features, when you use them
  • Perplexity — AI web search, used by the affiliate-discovery feature when you run it
  • Sentry — crash and error diagnostics, including a recorded replay of a sample of sessions and of any session where an error occurs
  • Upstash — rate limiting and caching
  • Whop — sign-in and commerce data, if you connect a Whop account
  • Google Analytics — website analytics. Loads for all visitors with storage consent denied by default (Consent Mode v2), and is upgraded only if you accept cookies
  • Mixpanel — product analytics and session recording. Loads only if you accept cookies
  • DataFast — website analytics. Loads only if you accept cookies
  • Vercel Speed Insights — page performance measurement
• Legal Requirements: We may disclose information if required by law or to protect our rights

We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting support.

You have the right to:

• Access, update, or delete your personal information
• Request deletion of your account and data
• Opt out of marketing communications
• Request information about how we process your data
• Withdraw consent for data processing (where applicable)

We use cookies and similar tracking technologies to maintain your session and improve your experience. You can control cookies through your browser settings.

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, please contact us at:

support@affiliatemanager.us