Privacy Policy

This Privacy Policy explains what information Affi.link ("we," "us," "our") collects, how we use it, and the choices you have — for both account holders and the visitors who click on Affi.link short links.

1. Information we collect

Account information. When you create an account, we collect your name and email address. If you sign up or sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider. If you set a password instead, we store it hashed — we never store or have access to your actual password.

Profile photo. If you upload a profile photo, it's stored with our image hosting provider, Cloudinary.

Billing information. If you subscribe to a paid plan, payment is processed by Stripe. We do not store your card number or other payment details ourselves — Stripe handles that and shares with us only what's needed to manage your subscription (such as your plan, billing history, and a masked reference to your payment method, e.g. "Visa ···· 4242").

The links you create and their destinations, along with any targeting rules, images, or custom domains you configure for them.

Click data. Each time someone clicks one of your Smart Links, we record the time, which link was clicked, the referring page (if any), and — derived at that moment from the visitor's IP address via a third-party geolocation lookup (ip-api.com) — their approximate country and region, along with their device type, browser, operating system, and language, as reported by their browser. We do not store the visitor's IP address itself — only the general location and device information derived from it at the time of the click.

Support requests. If you contact support, we receive your message, your email address, and — so we can help you faster — your current plan and account details.

2. How we use this information

• To provide the Service: creating and redirecting your Smart Links, applying your targeting rules, and showing you analytics about clicks on your links.
• To process payments and manage subscriptions, via Stripe.
• To communicate with you: account notifications (billing, usage limits, security), responses to support requests, and — if you're part of our Partner Program — commission and payout notifications.
• To detect and prevent abuse of the Service, including fraudulent or malicious use of links.

We do not sell your personal information, and we do not use your account data for advertising.

3. Cookies

We use a small number of cookies: a session cookie to keep you signed in, an optional "remember me" cookie if you choose that option at login, and — if you arrived via a Partner Program referral link — a referral-tracking cookie that lasts 90 days and simply records which partner referred you, so we can credit their commission correctly.

4. Who we share information with

We share information only as needed to operate the Service:

• Stripe — payment processing and subscription billing (and, for Partner Program participants, payouts via Stripe Connect).
• Cloudinary — hosting for profile photos and custom link images.
• Resend — delivering account and notification emails.
• Amazon Web Services (AWS) — hosting the Service's infrastructure.
• Google / Facebook — only if you choose to sign in using one of these providers.
• ip-api.com — resolving a visitor's approximate location from their IP address at the moment they click a link, as described in §1. We do not share the IP address with anyone beyond this real-time lookup, and we do not retain it afterward.

We do not sell or rent your information to third parties for their own marketing purposes.

5. Data retention and account deletion

We keep your account information for as long as your account is active. If you delete your account, here's what happens, in full:

Your account and its data are retained for 30 days as a safety margin, then permanently deleted — including your profile information, custom domains, categories, Amazon affiliate ID configuration, billing history, API logs, and Partner Program records.

Your links are the one exception. A link's short code is never reissued to a different customer, so it's kept permanently, stripped of the destination URL, images, and any other personal or account data — visitors who click it afterward simply see a notice that the link's owner has closed their account. Full details, including why we handle it this way, are in our Terms of Service.

6. Your rights

You can review and update most of your account information at any time from your account settings. You can delete your account at any time, as described above. If you'd like a copy of your data, or have any other request regarding your personal information, contact support and we'll help.

7. Children's privacy

The Service is not directed at children under 16, and we do not knowingly collect personal information from them.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

9. Contact

Questions about this Privacy Policy? Contact support.