Privacy Policy for Affilitrak

1. Introduction

Affilitrak ("we," "our," or "us") provides affiliate tracking and management software for Shopify merchants. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

This policy applies to three groups of people:

• Merchants who install the Affilitrak Shopify app.
• Affiliates who sign up to a merchant's program through the Affilitrak portal.
• Store visitors and customers whose interactions with a merchant's store are processed for affiliate attribution.

2. Information We Collect

From merchants

• Shop identifiers and store contact details.
• Information needed to access and use the Shopify APIs on your behalf.
• Your account preferences and the configuration you set in the app (program settings, branding, notification preferences, and similar).
• Materials you upload for your affiliates (such as creative assets or text content).
• Credentials and identifiers required to connect any payout method you choose to enable.

From affiliates

• Name, contact details, and login credentials used to sign in to the portal.
• Payout information needed to receive commissions.
• Any tax-related information required by the merchant or by applicable law in order to pay you. We treat this as sensitive information and use it only for payout and tax-reporting purposes.
• Responses to any custom questions the merchant includes in their application form.
• Basic activity information about your use of the portal, used for security and to keep the service running reliably.

From store visitors and customers

When a visitor reaches a merchant's Shopify store through an affiliate referral link, we collect a limited amount of information to attribute the visit and any resulting purchase to the correct affiliate. This includes the referral identifier, basic marketing and campaign parameters that may be present in the link, and general information about the device and browser used to access the store.

If a referred purchase is completed, we receive from Shopify the order details needed to credit the affiliate and process commissions and refunds. This may include customer identifiers and contact details associated with the order.

From support interactions

When you contact us for support — through our chat widget, by email, or otherwise — we receive the contents of your messages and the contact details you provide, along with basic technical information used to diagnose issues and prevent abuse.

3. How We Use Your Information

• Provide and operate the Affilitrak service, including attributing referrals and calculating and paying out commissions.
• Generate analytics and reporting for merchants and affiliates on their own performance.
• Send transactional and notification emails where enabled.
• Provide customer support.
• Meet tax, accounting, and other legal obligations.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Maintain, debug, and improve the service.

4. Use of Aggregated and Anonymized Data

We may create aggregated and anonymized data sets from the information described above — data that does not identify any individual merchant, affiliate, customer, or store — and use it to operate and improve Affilitrak, to inform our product development, and to produce marketing content such as benchmarks, case studies, and industry insights about affiliate marketing.

We will not publish data that identifies your store, your affiliates, or your customers without your permission.

5. Cookies and Tracking Technologies

When a visitor arrives at a merchant's Shopify store through an affiliate referral link, we set cookies on the visitor's device so that any resulting purchase can be credited to the correct affiliate. These cookies have a maximum lifetime of 12 months. The merchant separately configures the attribution window — the period after a referral click during which a purchase is still credited to the affiliate (default: 30 days).

We do not use these cookies for cross-site advertising or to build behavioral profiles outside the scope of affiliate attribution.

6. Data Storage and Security

We store data with reputable cloud providers using encryption in transit and at rest. Access is restricted to authorized personnel, and account passwords are stored only in hashed form. We follow industry-standard practices for access control, monitoring, and patching, but no system can be guaranteed perfectly secure.

7. Data Sharing and Third-Party Service Providers

We share information with:

• Shopify, as required for the app to function under Shopify's API terms.
• Merchants, who receive performance data and the affiliate and order information needed to verify and pay commissions for their own program.
• Affiliates, who receive their own performance data.
• Payment providers, where a merchant has connected one in order to send payouts.
• Service providers we use to operate Affilitrak — including cloud infrastructure providers and Amazon Simple Email Service (Amazon SES) for transactional email — and tools we use to provide customer support.
• Authorities, when required by law or to protect the rights, property, or safety of Affilitrak, our users, or others.

We do not sell personal information.

8. Data Retention

We retain merchant and affiliate account data for as long as the merchant's account is active, or as needed to provide the service and meet legal, accounting, or tax obligations (for example, payout records and tax forms may be retained for several years after a payment).

Referral visit data and pixel events are retained for as long as needed to support attribution windows and analytics. When a merchant uninstalls the app, we honor Shopify's mandatory data-deletion webhooks and remove or anonymize their data within the timeframe required by Shopify's Partner Program.

9. Your Rights

Depending on your jurisdiction (including the EEA, UK, and California), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information.
• Object to or restrict certain processing.
• Receive a portable copy of your information.
• Opt out of certain data collection (note that declining tracking cookies will prevent affiliate attribution).
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at the email below. If you are a store visitor or customer of a merchant using Affilitrak, please contact the merchant directly; we act as a processor on the merchant's behalf for that data and will support the merchant in fulfilling your request.

10. Children's Privacy

Affilitrak is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

11. International Data Transfers

Affilitrak is operated from, and our infrastructure is primarily located in, the United States. If you use Affilitrak from outside the United States, your information will be transferred to, stored, and processed in the United States and in other countries where our service providers operate.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date at the top of this page, and we will provide additional notice (for example, an in-app banner or email) where appropriate.

13. Contact

If you have questions about this Privacy Policy or want to exercise your rights, please contact us at:

Email: hello@affilitrak.com

14. Compliance

Affilitrak complies with Shopify's API Terms and Conditions, Shopify's Protected Customer Data requirements, and applicable data-protection laws including the GDPR and CCPA where they apply.