Privacy Policy

Affiliate Manager is a service for running affiliate programs, available at affiliatemanager.us and as an iOS app. It is operated by Andria Labs LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA (“we”, “us”). Our full details are in our Imprint.

We are the controller for personal data about our own customers and their team members, visitors to our website, and users of our app. When a customer uses Affiliate Manager to manage its affiliates, prospects and order data, the customer is the controller and we process that data on its behalf as a processor, under our Data Processing Addendum. If you are an affiliate of one of our customers, that customer’s own privacy notice also applies to you.

Contact us about privacy at privacy@affiliatemanager.us.

Information you give us:

• Account information: name, email address, organization name, and password (stored only as a hash) or sign-in provider
• Sign-in providers: if you sign in with Google, GitHub, Whop, or Sign in with Apple, we receive your email address and, where the provider shares it, your name. If you use Apple’s “Hide My Email”, we store the relay address Apple gives us
• Platform credentials: API keys and tokens for the platforms you connect (such as Stripe, PayPal, Shopify or Gumroad), encrypted before storage
• Affiliate data: your affiliates’ names, contact details, referral codes, commission terms, notes, earnings and payouts
• Tax documents: W-9 / W-8 forms a program owner uploads for its affiliates. These may contain a Social Security number or EIN
• Transaction data: sales synced from your connected platforms, including the order amount and, where the platform provides it, the buyer’s email address
• Billing: your plan and subscription status. Card details are collected and held by Stripe (web) or Apple (App Store), never by us
• Support messages you send us

Information we collect automatically, including from visitors who are not our customers:

• Referral clicks: when someone follows an affiliate tracking link, we record the click with a keyed (HMAC) hash of the visitor’s IP address (not the address itself), used only to detect duplicate and fraudulent clicks, plus the browser user-agent, the referring page and the time. This is what makes commission attribution and click-fraud detection possible.
• Attribution cookie: only when you follow a referral link to Affiliate Manager’s own affiliate program, we set a cookie named aff_tracking for 30 days so the referring affiliate can be credited if you subscribe. It holds the affiliate code, the link id, a session id and the click time, is cryptographically signed so it cannot be forged, and is httpOnly. Tracking links that lead to other businesses’ sites pass attribution in the link address and set no cookie.
• Website analytics and diagnostics: error reports (scrubbed of email addresses) for every visitor, and, only if you accept cookies, page analytics and session recordings (PostHog and Sentry) with all page text and everything you type masked. On signed-in pages, the text of what you click is not sent either. No analytics run on affiliate portal pages. See section 12.
• iOS app analytics: which screens you open and which app events happen (for example, adding an affiliate), linked to your account id, never your name or email. You can turn this off at any time in the app’s Settings; in the EU, UK and Switzerland the app asks for your consent first. With the same switch on, the app also records your sessions (PostHog session replay) to help us find usability problems: every text, text field and image is hidden, so a recording shows the layout of each screen and where you tapped, not names, emails or amounts. Demo accounts are never recorded. App analytics do not collect your location, not even an approximate location derived from your IP address.
• Device information (iOS app): a push-notification token for each device where you turn on notifications
• Account milestones: our server records events such as signing up, connecting a platform, adding an affiliate or link, and starting or ending a subscription, against your account id

Customers on plans that include the AI Affiliate Recruiter can use it to find and contact people who might want to promote their products. If you received a recruiting email sent through Affiliate Manager, this section explains what is held about you and your choices.

• Who is responsible: the business that contacted you (named and signed in the email) decides whom to research and contact. It is the controller, and we process your information on its behalf. The email is sent through our email infrastructure.
• Where your information came from: public sources, such as your public profiles and web search results about creators in the business’s niche (we use Perplexity for this search); lists the business imported or typed in; or, if you bought from that business, the email address from your purchase, when it chose to invite its existing buyers.
• What is held: your name, email address, a public profile URL, the channel you publish on, an audience-size description, topic tags, a fit score with a short reason, the emails sent to you, and whether you replied or opted out. We do not store the text of your replies.
• Why, and the legal basis: to assess whether you might be a good fit for the business’s affiliate program and to invite you to join it. The basis is the business’s legitimate interest in finding partners for its program. The fit score is calculated on our servers; drafts of the email and up to two follow-ups are written with AI (Anthropic) and sent with Resend. No decision with legal or similarly significant effects is made about you automatically.
• How long: if you never respond, your details are deleted 12 months after the last contact. If you opt out, we keep only your email address on a suppression list so that you are not contacted again.
• Opting out and objecting: reply “STOP” (or “unsubscribe”) to any recruiting email, or use the one-click link at the bottom of it. We then block recruiting email to your address from every customer on Affiliate Manager, not only the one who contacted you. You have the right to object to this processing, including to the fit scoring, at any time. To object, see what is held about you, or have it deleted, email privacy@affiliatemanager.us and we will pass your request to the business and act on it.

We sometimes email businesses that run, or look likely to run, an affiliate or referral program, and writers who review affiliate software, to tell them about Affiliate Manager. If you received one of these emails, this section explains what we hold and your choices.

• Who is responsible: we are, as described in section 1.
• Where your information came from: your company’s website or other public business sources (such as a published article, a directory listing or a public profile), or a business-contact data provider. We only use business contact details.
• What we hold: your name, business email address, company, role and website, a note on why we thought Affiliate Manager might be relevant (for example, a public affiliate page or a software roundup you wrote), the emails we sent, and whether you replied or opted out.
• Why, and the legal basis: to introduce our product to businesses it may help. The basis is our legitimate interest in business-to-business marketing. We send a short introduction and at most two follow-ups, then stop.
• Who helps us: our email providers (Namecheap Private Email for our own mailboxes, and Instantly for outreach campaigns), which send the emails and record replies and opt-outs on our behalf.
• How long: if you never respond, we delete your details 12 months after our last email. If you opt out, we keep only your email address on a suppression list so we don’t contact you again.
• Opting out and objecting: reply “STOP” or “unsubscribe”, or use the unsubscribe link in the email, and we stop. You can object to this processing at any time. To see what we hold or have it deleted, email privacy@affiliatemanager.us.

We use personal data only for the purposes below. Where the GDPR, UK GDPR or a similar law applies, each purpose relies on the legal basis shown.

We do not use personal data for automated decisions that have legal or similarly significant effects on you.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share it only with:

• Platforms you connect: we call their APIs with your credentials to sync your data
• Service providers who process data for us under contract. The main ones:
  • Supabase: our entire database, and private storage for W-9 / W-8 tax forms, hosted in the United States
  • Vercel: application hosting and page-performance measurement
  • Stripe: web subscription billing, and affiliate payouts through Stripe Connect (Stripe receives an affiliate’s email address to set up their payout account)
  • Apple: App Store in-app purchase billing, Sign in with Apple, and push notification delivery
  • RevenueCat: App Store subscription status and purchase history, linked to your account id
  • Expo: relaying push notifications to the iOS app (notifications include the sale or payout amount and the affiliate’s name)
  • Resend: sending transactional, account and recruiting email, and receiving replies to recruiting email
  • Anthropic: AI enrichment of prospect profiles and drafting recruiting emails (receives a prospect’s name, email, profile URL and notes)
  • Perplexity: AI web search for affiliate discovery (receives the customer’s niche and product description)
  • Upstash: rate limiting and caching
  • Sentry: error diagnostics for all visitors (reports are scrubbed of email addresses); masked session replay only with your consent
  • PostHog: product analytics and masked session recordings on the web (only with consent) and in the iOS app (can be turned off in Settings), plus server-side account milestones; linked to your account id, never your name or email
  • Google Analytics: website analytics, only with consent
  • DataFast: website analytics, only with consent; while you are signed in, linked to your account id, never your name or email. It also receives a record when a known AI crawler (such as ChatGPT or Claude fetching a page for a user) requests one of our public pages: the page path, the crawler’s user agent and IP address, no cookie
  • Google, GitHub and Whop: sign-in, if you choose that provider; Whop also supplies commerce data if you connect a Whop account
  The complete, current list with locations is on our Subprocessors page.
• Legal and safety reasons: where the law requires it, or where needed to protect the rights, safety or property of our users, the public or us
• Business transfers: if we are involved in a merger, acquisition or sale of assets, personal data may transfer to the new owner, who must keep honoring this policy

Our servers and most of our service providers are in the United States. If you are elsewhere, your data is transferred to and stored in the United States.

• From the EU, EEA, UK and Switzerland: we rely on the EU-U.S. Data Privacy Framework (and its UK Extension and the Swiss-U.S. framework) where the recipient is certified, and otherwise on the European Commission’s Standard Contractual Clauses, with the UK Addendum and the Swiss amendments.
• From Brazil: we rely on the standard contractual clauses approved by the ANPD (Resolution CD/ANPD No. 19/2024), or on the transfer being necessary to perform our contract with you.
• From Japan: your personal data is provided to recipients in the United States. The United States has no comprehensive federal privacy law equivalent to Japan’s Act on the Protection of Personal Information; some states, such as California, have their own privacy laws. Our recipients are bound by contract to protect the data with measures equivalent to those the APPI requires of us.
• From South Korea (overseas transfer under PIPA): the data in section 2 is transferred to the United States, over the network, when you use the service. The recipients and their purposes are listed on our Subprocessors page, and they keep it for the periods in section 7. The transfer is needed to provide the service; if you do not want your data transferred, you can decline by not using the service or by deleting your account.

We may keep specific data longer when the law requires it or to establish, exercise or defend a legal claim, and only for that purpose.

You can delete your account yourself in Settings on the web and in the iOS app, or ask us to do it. Deletion:

• if you are the only member of your organization, deletes the organization’s data, including sales, payout and commission history, and any stored tax documents. Export any records you need for tax or accounting first. If other people belong to your organization, only your own user account is deleted
• asks our processors to delete what they hold about you, including your PostHog analytics profile and your Stripe customer record (Stripe keeps invoice and payment records it is legally required to keep)
• cancels a web subscription billed by Stripe
• does not cancel an App Store subscription. Cancel that in your Apple ID settings (Settings → your name → Subscriptions on iPhone), or Apple will keep billing you
• removes your devices’ push-notification tokens and, for an account created with Sign in with Apple, revokes our access with Apple

• Data is encrypted in transit (TLS) and at rest by our hosting and database providers
• Credentials for connected platforms are additionally encrypted by our application (AES-256-GCM) before they are stored
• Passwords are stored only as bcrypt hashes
• Tax documents are kept in a private storage bucket and served only through signed links that expire after five minutes
• Access to production data is limited to the people who operate the service

No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires. More detail is on our Security page.

Depending on where you live, you have the right to:

• Access the personal data we hold about you and get a copy
• Rectify data that is wrong or incomplete
• Erase your data (see section 8 for deleting your account)
• Restrict how we use your data while a concern is resolved
• Port data you gave us to another service in a machine-readable format
• Object to processing based on legitimate interests, including the recruiting research and fit scoring described in section 3, and to direct marketing at any time
• Withdraw consent at any time, for example with “Cookie settings” in the site footer or the analytics switch in the iOS app’s Settings. This does not affect processing before you withdrew it
• Unsubscribe from marketing email with the link in every one (account and billing notices still apply)

To use these rights, email privacy@affiliatemanager.us. We may need to confirm your identity first. We respond within 30 days; if a request is complex we may extend this where the law allows and will tell you why. If your data is held for one of our customers (for example, you are its affiliate or were contacted by it), we will pass your request to that customer and help it respond.

You can also complain to a data protection authority: in the EU or EEA, the authority in the country where you live or work; in the UK, the Information Commissioner’s Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in Brazil, the Autoridade Nacional de Proteção de Dados (ANPD); in Japan, the Personal Information Protection Commission (PPC); in South Korea, the Personal Information Protection Commission (PIPC). We would appreciate the chance to address your concern first.

Children. Affiliate Manager is for businesses and adults. It is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

California residents. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. In the last 12 months we collected these categories, for the purposes and from the sources described above: identifiers (name, email address, account id, a keyed hash of IP address); customer records (billing status, organization name); commercial information (subscriptions and purchases); internet or other electronic network activity (pages and screens viewed and app events, subject to your choices); professional information (the business you represent); and account log-in credentials. Tax forms that a customer uploads, which may contain a Social Security number, are processed only for that customer, as its service provider. You have the right to know, delete and correct your personal information, and we will not discriminate against you for using these rights. You can make a request, or have an authorized agent make one for you, at privacy@affiliatemanager.us.

We use cookies and similar technologies to keep you signed in, to remember your language, and, only if you agree in our cookie banner, for analytics, session recording and measuring which campaigns bring visitors to us. Google Analytics, PostHog, DataFast and Sentry session replay load only after you consent; before that, nothing is sent to them. Two of them record sessions, both with all page text and everything you type masked: PostHog, and Sentry (a sample of sessions, plus sessions in which an error occurs). No analytics or recording run on affiliate portal pages. We remember your choice in a cookie named cookie_consent for one year. You can change your choice at any time with the Cookie settings link in the footer of every page, or by clearing cookies in your browser. Our Cookie Policy lists each cookie and provider.

We may update this policy. We will post the new version here and change the “Last updated” date. If a change materially affects how we use personal data we already hold, we will also tell account holders by email before it takes effect.

• Privacy questions and requests: privacy@affiliatemanager.us
• Everything else: support@affiliatemanager.us