Privacy Policy

1. Scope & Applicability

This Privacy Policy applies to personal data collected through our websites, partner dashboards, landing pages, and other online services ("Services"). It covers data about affiliates, advertisers, publishers, partners, and visitors. Depending on your jurisdiction, additional rights may apply (for example, under GDPR for EU residents or CCPA for California residents).

2. Categories of Personal Data We Collect

• Contact & Account Data: name, email, company, billing details, payment preferences (e.g., PayPal, bank details for payouts).
• Authentication Data: username, hashed password, login timestamps, IP addresses used for login and account security.
• Traffic & Performance Data: click events, conversions, device type, user agent, geolocation (city/country level), referrer, campaign identifiers.
• Billing & Payment Data: payout history, taxation information where required.
• Support & Communications: messages, tickets, and email correspondence with our support team.
• Cookies & Tracking: analytics cookies, tracking pixels, advertising identifiers used to optimize and attribute campaigns.

3. How We Use Personal Data

We process personal data for purposes including but not limited to:

• Operating and improving the platform, campaign routing and Smartlink optimizations.
• Processing payouts, invoicing, and preventing fraud or abuse.
• Providing customer support and account management.
• Legal compliance, security, and detecting/preventing malicious activity.
• Sending service-related notices and occasional marketing communications where permitted.

4. Legal Basis for Processing (EU / GDPR)

For European users, our legal bases include:

• Performance of a contract: processing necessary to provide the Services and fulfill our agreements with you.
• Legitimate interests: to operate the platform securely, prevent fraud, and improve services (we balance these interests against your rights).
• Consent: where required (for example, certain cookies or marketing communications), we will obtain your consent before processing.

5. Data Sharing & Third Parties

We may share data with:

• Payment processors (to send payouts).
• Verified advertisers and partners for attribution and offer fulfillment.
• Analytics providers for aggregated performance reporting.
• Legal authorities when required by law or to protect rights.

We require third parties to maintain appropriate security and limit use to the purposes we authorize.

6. Cookies & Tracking

We use cookies, pixels, and similar technologies for:

• Essential site functionality (session management).
• Analytics and product improvement.
• Attribution and campaign optimization (Smartlink routing).
• Advertising and retargeting where permitted by law.

When required, we ask for consent before setting non-essential cookies. You can change cookie settings using your browser or any cookie-control banner on our site.

7. International Data Transfers

Aff2Offer is an international service. Data may be transferred and processed outside your country for the purposes described above. When transfers occur from the European Economic Area (EEA), we rely on appropriate safeguards such as Standard Contractual Clauses, where required. If you have questions, contact us (details below).

8. Security

We implement technical and organizational measures to safeguard personal data from unauthorized access, loss or disclosure. Examples include encryption in transit (TLS), secure password storage, access controls, and regular security reviews. However, no system is completely risk-free — please exercise caution when sharing sensitive information.

9. Data Retention

We retain personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type (for example, billing records are retained longer for tax and accounting compliance).

10. Your Privacy Rights

Depending on your jurisdiction, you may have rights including:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Deletion — ask us to delete your personal data (subject to legal exceptions).
• Restriction or objection — limit or object to certain processing.
• Data portability — receive your data in a machine-readable format.
• If you are an EU/EEA resident, you may lodge a complaint with your local data protection authority.

To exercise rights, contact us at the address below. We will verify requests to protect privacy and security.

11. California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the CCPA/CPRA, such as the right to know, delete, and opt-out of sale/sharing of personal information. Aff2Offer does not "sell" personal information for monetary consideration. Where "sharing" occurs for cross-context behavioral advertising, you may opt-out following the methods described below or via the Global Privacy Control (GPC) or relevant opt-out links.

12. Children

Our Services are not directed to children under 18. We do not knowingly collect personal data from children under 18. If you believe we have collected such data, please contact us to request deletion.

13. Changes to this Privacy Policy

We may update this policy periodically. We will post the "Last updated" date at the top and, if changes are material, we will provide more prominent notice (via email or site announcement).

14. Contact & Data Requests

For privacy inquiries, data access requests, or to exercise your rights, please contact our Data Protection team:

Email: privacy@aff2offer.com
Mail: Aff2Offer — Data Protection, 123 Compliance Ave, City, Country.

Please include your account details and the nature of your request. We may require identity verification before fulfilling certain requests.

15. Additional Notices

• Automated decisions: some of our platform optimizations use automated processing (for example Smartlink routing). These optimizations aim to improve performance and do not replace human oversight.
• Third-party links: our Services may include links to third-party sites. We are not responsible for third-party privacy practices.

---

This Privacy Policy is intended to be clear and accessible for an international audience. It does not constitute legal advice — if you need legal guidance specific to your business or jurisdiction, please consult qualified counsel.