Privacy Policy

At Afflemi, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address (via Google OAuth or magic link authentication)
• Name (from your Google account if you sign in with Google)
• Profile picture (if you sign in with Google and grant permission)
• Whether you joined as an affiliate or a brand

1.2 Payment Information

When you pay for a listing, we store only the Lemon Squeezy order ID and the amount paid, attached to that listing. We do not store credit card numbers, CVV codes, or other sensitive payment information. All payment processing is handled securely by Lemon Squeezy, our payment processor.

1.3 Listing Data

When you submit a listing, we collect what you enter about the program, network or tool: its name, website, logo, description and commercial terms (commission, cookie length, pricing and similar). Emails about the listing go to your account's email address. Once published, everything you entered about the listing is public by design; that is what a listing is. Your email address is never shown.

1.4 Affiliate Profiles

If you join as an affiliate, we collect what you enter in your profile:

• A username, and an avatar we draw from a random code (never from your email address)
• Your country, niches, tags, the kind of affiliate you are, the countries your audience is in, content formats, deal preferences, years active, and whether you're open to new programs
• Your websites, and each one's monthly visits as a range you choose
• Your name, a contact email (your sign-in email unless you give another) and the programs you already promote

What is public. While your profile is listed, your username, avatar, country, niches, tags, affiliate type, audience countries, visit ranges, content formats, deal preferences, years active and availability can be seen by anyone on the affiliate map. Your place on the map is a random point inside your country, never your real location.

What stays private. Your name, website addresses, contact email and the programs you promote are never shown publicly or to other affiliates. They are shown only to brands we have approved for Recruit, and only when a brand unlocks your profile.

Confirming your websites. To confirm you own a website, we look for your Afflemi code in a meta tag on its homepage or in a DNS TXT record for its domain. We read only that page and that record, and keep the result and the date of the check.

1.5 Recruit Applications

If you apply for Recruit as a brand, we collect your company name and website, the niches and kinds of affiliates you want, and any note you add. To review it, we compare your sign-in email's domain with your company website and may look at your website and your listings. When you unlock an affiliate's profile, we record which profile and when, to count your monthly unlocks and to look into any misuse.

1.6 Usage Data

When you use our Service, we also collect:

• Usage analytics and interaction data to improve our Service
• Browser type, device information, and IP address

2. How We Use Your Information

We use the information we collect to:

• Review, publish and maintain directory listings
• Show affiliate profiles on the map, and to approved brands, as described in section 1.4
• Confirm that affiliates own the websites they add, and review brands that apply for Recruit
• Process listing payments and manage your account
• Authenticate your identity and prevent unauthorized access
• Send you service-related notifications
• Respond to your support requests and communicate with you
• Analyze usage patterns to enhance user experience
• Comply with legal obligations and enforce our Terms of Service

3. Data Storage and Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, secure authentication protocols, and regular security audits. Row-level access controls ensure that only you and our reviewers can see a listing before it is published.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience with our Service. The cookies we use include:

• Authentication Cookies: To keep you logged in and manage your session
• Analytics Cookies: To understand how you interact with our Service and identify areas for improvement
• Preference Cookies: To remember your settings and preferences

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

5. Public Listings and the Affiliate Map

Published listings are visible to anyone, indexed by search engines, and may be shown in summaries, comparisons and related-listing sections across the directory. If you need a listing removed, email us and we will take it down; cached copies held by search engines are outside our control.

The public parts of a listed affiliate profile (section 1.4) are visible to anyone on the affiliate map. You can hide your profile from your dashboard at any time; hidden profiles are not shown on the map or to brands.

Brands approved for Recruit agree in our Terms of Service to use an affiliate's private details only to contact them about programs they run or manage, and never to scrape, sell or share them. We review every brand before approving it and revoke access from any that break these rules. Once a brand has your email address, though, we can't control what it sends you; tell us about any misuse and we will act on it.

6. Third-Party Services

We use the following third-party services to operate our platform:

• Google: For authentication (Google OAuth)
• Lemon Squeezy: For payment processing
• Supabase and Vercel: To store your data and run the site
• Resend: To send account, listing and profile emails
• Analytics Services: To track usage patterns and improve our Service

These third parties have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose. Each third-party service has its own privacy policy governing the use of your information. We do not connect to or share data with any affiliate network, and we do not sell your data to any third party. An affiliate's private details are shared only with brands approved for Recruit, as described in section 1.4.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account information is retained until you delete your account
• Listings you submit are retained while they are live or under review; drafts can be deleted by you at any time
• Affiliate profiles and website checks are retained until you delete your profile or your account; hidden profiles are kept but not shown
• Payment records for listings are retained for accounting and legal compliance purposes (typically 7 years)
• Analytics data may be retained in anonymized form indefinitely for service improvement

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or security purposes.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you
• Correction: You can update or correct your account, listings and affiliate profile at any time within the Service
• Hiding: Affiliates can hide their profile from the map and from brands at any time
• Deletion: You can request deletion of your account and associated data
• Opt-out: You can opt out of marketing communications (though we may still send service-related emails)
• Data Portability: You can request your data in a structured, machine-readable format

To exercise any of these rights, please contact us at the email address provided in the Contact section below.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to these locations.

10. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal information, please contact us at:

Email: hello@afflemi.com