This Privacy Policy describes how Affinitor LTD (“Affinitor,” “we,” “us,” or “our”) collects, uses, and shares information in connection with the Affinitor website at https://affinitor.com and the Affinitor affiliate monitoring and compliance platform (together, the “Service”). We respect your privacy. This policy is written to be readable, not to dodge anything. If something is unclear, write to us at the address at the end.

1. Who This Policy Applies To

This policy applies to:

• Website visitors browsing affinitor.com.
• Prospects who request a demo or contact us.
• Customers and users who create an account and use the platform.
• Subjects of monitoring data – people and businesses whose public affiliate activity (ads, coupon listings, landing pages) is observed by the Service on behalf of our customers.

For monitoring data collected on behalf of a customer, the customer is the data controller and Affinitor acts as a data processor. For website visitors, prospects, and customer account information, Affinitor is the data controller.

2. Information We Collect

a. Information you give us

• Demo and contact forms: name, job title, business email, phone, company website.
• Account information: name, email, password (hashed), company, billing details.
• Configuration data: brands, domains, targeted countries, affiliate program details you ask us to monitor.
• Communications: messages you send to support or sales.

b. Information collected automatically

• Usage data: pages viewed, features used, session duration, clicks.
• Device and log data: IP address, browser type, operating system, referrer URLs, timestamps.
• Cookies and similar technologies: see Section 7.

c. Public data collected by the platform

To deliver the Service, we scan publicly available signals on the open web, including:

• Search engine advertisements, including ad copy, advertiser identifiers, and landing pages.
• Coupon and discount sites, including listed codes and promotional claims.
• Publisher websites, screenshots, and links.

This data is collected from public sources, not from private accounts or protected systems.

d. Information from third parties

• Payment processors (transaction confirmations, not full card numbers).
• Service providers used for analytics, fraud prevention, and security.
• Enrichment providers for business contact information (e.g., to verify a business email).

3. How We Use Information

We use information to:

• Provide, operate, and improve the Service.
• Detect, report, and document affiliate violations for our customers.
• Authenticate users and secure accounts.
• Process payments and manage subscriptions.
• Respond to demo requests, support inquiries, and customer communications.
• Send service updates and, with consent where required, marketing communications.
• Comply with legal obligations and enforce our Terms.
• Analyze usage to improve product performance and detection accuracy.

We do not sell personal data.

4. Legal Bases (EEA / UK Users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract: to provide the Service to customers.
• Legitimate interests: to secure the Service, prevent fraud, monitor public affiliate activity for our customers, improve products, and conduct business communications.
• Consent: for optional marketing or cookies that require it. You may withdraw consent at any time.
• Legal obligation: to comply with applicable laws.

5. How We Share Information

We share information only as described below:

• With customers: monitoring data and reports are shared with the customer whose program is being monitored.
• Service providers: hosting, analytics, email delivery, payment processing, customer support tools, security and anti-fraud providers, acting under contract on our behalf.
• Professional advisors: lawyers, accountants, auditors, where necessary.
• Legal compliance: to comply with law, court orders, or lawful requests, or to protect rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality.

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

6. International Transfers

Affinitor operates globally. Data may be processed in countries other than the one where you are located, including outside the EEA, UK, or your home country. Where required, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Agreement / Addendum, or equivalent mechanisms.

7. Cookies and Analytics

We use cookies and similar technologies to operate the website, remember preferences, measure usage, and improve the Service. Categories include:

• Strictly necessary: required for the site and the platform to function.
• Analytics: to understand how the Service is used.
• Functional: to remember preferences.
• Marketing: only where you consent.

You can manage cookies in your browser settings. Disabling some cookies may affect functionality.

8. Data Retention

We retain personal information for as long as needed to provide the Service and for legitimate business and legal purposes. General defaults:

• Account data: for the life of your account, plus a reasonable period afterward.
• Billing records: as required by tax and accounting law (typically up to 7 years).
• Monitoring data and reports: for the term of the customer’s subscription or as configured by the customer.
• Support communications: typically up to 3 years after the last interaction.
• Marketing data: until you unsubscribe or object.

When data is no longer needed, we delete or anonymize it.

9. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, hashed passwords, logging, and least-privilege access. No system is perfectly secure; we cannot guarantee absolute security but we work hard to keep your data safe.

10. Your Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete personal information.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us using the details in Section 14. We will verify your request and respond within the time required by law.

Subjects of monitoring data: if your information appears in Affinitor reports because of your public affiliate activity, please contact us and we will route the request to the relevant customer (data controller) or handle it directly where appropriate.

11. California Residents

If you are a California resident, you have rights under the CCPA/CPRA including the right to know, delete, correct, and opt out of “sale” or “sharing” of personal information. Affinitor does not sell personal information and does not share it for cross-context behavioral advertising. To exercise your rights, contact us using the details below.

12. Children

The Service is intended for businesses. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the latest change. Material changes will be communicated by email or in-product notice. Continued use after the effective date means you accept the updated policy.

14. Contact

For questions or to exercise your rights, contact:
Affinitor LTD Email: [email protected]