Privacy

This page says what data the product handles, and why. It covers three groups of people: founders who use the product, their partners, and visitors to a founder's site.

Who is responsible

[to be filled in by the owner]. Address: [to be filled in by the owner]. Contact: [to be filled in by the owner].

Founders

• Your account: your email address and a password, which is stored as a hash. Signing in sets a session cookie.
• Your Stripe key: a restricted, read-only key. It is stored encrypted, and only its last four characters are shown back to you. You can disconnect it in Settings, Stripe, and you can delete it in Stripe at any time.
• Your program: its name, commission rule, partners, links, clicks, conversions and the commission ledger.
• Messages you send to support, with your email address.

What is read from Stripe

With your read-only key the product reads new events from your Stripe account every five minutes: paid invoices, refunds, cancellations, and the checkout sessions, subscriptions and customers needed to tie a sale to a partner. It cannot change anything in your account.

For each referred customer it stores the Stripe customer id, the invoice and subscription ids, the amounts and currency, the times, and a masked form of the customer's email, such as a•••@northwind.example. The full email address is not kept. Partners never see even the masked one.

Partners

• A partner's email address, name, payout note and referral codes.
• A partner sees only their own clicks, paid conversions and commission. They see no customer names or emails.
• The founder directs what the partner is paid and how. The founder can see the partner's details and payout note.

Visitors to a founder's site

The snippet a founder pastes into their site stores two first-party cookies in the visitor's browser:

• aft_ref: the code of the partner whose link brought the visitor. It lasts for the click window the founder set.
• aft_vid: a random visitor id. It is not tied to a name or an email address.

When a visitor arrives through a partner's link, the product records the click: the time, the page the visitor landed on (the path only), and the host of the page that referred them. It does not store the full address or the visitor's IP address. A one-way fingerprint of the IP address is used to limit abuse.

Money

The product moves no money. Payments for the plan are taken by Stripe. Card details never reach the product.

Export and deletion

• Founders can export their program as a file, and delete their account, in Settings, Account. An active plan has to be cancelled first, on Billing. Deleting removes the program and the data in it, including the partners' data.
• Partners can export their data and delete their account in their settings. Their conversions stay with the program but lose the link to the person.

Who else handles data

Hosting, database, email delivery and payment providers: [to be filled in by the owner].

How long data is kept

[to be filled in by the owner].

Your rights and complaints

[to be filled in by the owner].