Privacy Policy
This Privacy Policy explains how AffClix collects, processes, and protects personal data across our affiliate tracking platform, including analytics, fraud prevention, and performance marketing attribution systems.
Contents
1. Who We Are
AffClix, Inc. is a Delaware corporation with its principal office at 350 Fifth Avenue, Suite 4100, New York, NY 10118, USA. For users in the European Economic Area, the United Kingdom, and Switzerland, AffClix, Inc. acts as the data controller for personal data collected through our website and platform. For data processed through our affiliate tracking infrastructure on behalf of network operators, AffClix acts as a data processor under the instructions of the relevant network operator (the data controller).
Our EU/UK representative can be reached at: [email protected]
2. Data We Collect
2.1 Information You Provide Directly
- Account registration: Name, email address, company name, phone number, billing details, and payment information when you create an AffClix account.
- Contact forms: Name, email, company, role, message content, and any other information you include when you contact us.
- Publisher applications: Identity documents, business registration, tax identification, banking details, and traffic source information when you apply as a publisher.
- Communications: Content of emails, support tickets, and chat messages you send to us.
2.2 Information Collected Automatically
AffClix uses privacy-conscious tracking technologies such as click IDs and server-to-server (S2S) postbacks instead of relying solely on browser cookies. Learn more in our click fraud prevention guide. fraud prevention system .
- Usage data: Pages visited, features used, clicks, session duration, and navigation paths within our platform.
- Device & browser data: IP address, browser type and version, operating system, screen resolution, language settings, timezone, and referring URL.
- Tracking data: When end-users click affiliate links tracked through our infrastructure, we collect click metadata including IP address, user agent, timestamp, referrer, geo-location (country/region/city), device type, and a click identifier. We do not intentionally collect personally identifiable information beyond what is strictly required for affiliate tracking, attribution, and fraud prevention.
- Cookies and similar technologies: See our Cookie Policy for full details.
2.3 Information from Third Parties
- Business contact information from data enrichment providers for enterprise sales prospecting.
- Fraud signals and IP reputation data from third-party fraud intelligence databases.
- Payment verification data from our payment processor (Stripe).
3. How We Use Your Data
Google API Services & AI/ML Training
AffClix’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use, retain, or transfer user data obtained through Google Workspace APIs to develop, improve, or train generalized Artificial Intelligence (AI) and/or Machine Learning (ML) models.
| Purpose | Data Used |
|---|---|
| Providing and operating the AffClix platform | Account data, usage data, tracking events |
| Processing payments and managing subscriptions | Billing data, payment method details |
| Fraud prevention and traffic quality assurance | IP address, device fingerprint, click metadata |
| Sending product updates, invoices, and security alerts | Email address, account data |
| Responding to support requests and communications | Contact information, message content |
| Analytics to improve platform performance | Aggregated usage data, error logs |
| Marketing communications (with consent) | Email address, usage profile |
| Legal compliance and dispute resolution | All relevant data as required by law |
4. Legal Basis for Processing (GDPR)
For users in the EEA, UK, and Switzerland, we process personal data on the following legal bases:
- Contract performance (Art. 6(1)(b)): Processing necessary to provide our platform services, process transactions, and fulfil our contractual obligations.
- Legitimate interests (Art. 6(1)(f)): Fraud prevention, platform security, analytics, and improving our services — where our interests are not overridden by your rights.
- Legal obligation (Art. 6(1)(c)): Compliance with applicable laws, tax obligations, and regulatory requirements.
- Consent (Art. 6(1)(a)): Marketing emails, certain cookies, and any processing where we have explicitly requested and received your consent.
5. Data Sharing & Disclosure
We do not sell your personal data. We share data only in the following circumstances:
- Service providers: Trusted third-party vendors who process data on our behalf under Data Processing Agreements — including cloud hosting (AWS), payment processing (Stripe), email delivery (SendGrid), analytics (internal), and customer support tooling.
- Network operators: When AffClix processes tracking data on behalf of a network operator, that operator may receive click and conversion data as part of the service. Their use of such data is governed by their own privacy policies.
- Legal requirements: When required by law, court order, or government authority; to protect the rights, property, or safety of AffClix, our users, or the public; or in connection with fraud investigations.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as a business asset. We will notify you before your data is subject to a materially different privacy policy.
- With your consent: For any other purpose with your explicit consent.
6. Cookies & Tracking Technologies
We use cookies and similar tracking technologies on our website and platform. For a full breakdown of every cookie we set, its purpose, duration, and how to manage your preferences, please see our dedicated Cookie Policy. (Cookie Policy).
In summary, we use strictly necessary cookies (essential for the platform to function), functional cookies (remembering your preferences), analytics cookies (understanding usage patterns), and marketing cookies (with your consent only).
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of account + 30 days after closure |
| Billing and transaction records | 7 years (legal/tax obligation) |
| Affiliate click and conversion logs | 24 months from collection |
| Fraud detection data | 36 months (security interest) |
| Support and communication records | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn + 12 months |
| Server and access logs | 90 days rolling |
| Anonymised analytics data | Indefinitely (no personal data) |
8. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data. To exercise any right, contact [email protected]. We will respond within 30 days (EEA/UK) or 45 days (California).
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your data, subject to legal retention requirements.
Right to Restrict Processing
Ask us to pause processing your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is consent-based.
Right to Complain
Lodge a complaint with your supervisory authority (EEA/UK users).
9. International Data Transfers
AffClix is headquartered in the United States. If you are located in the EEA, UK, or Switzerland, your personal data may be transferred to and processed in the US, which may not provide the same level of data protection as your home jurisdiction.
When we transfer personal data from the EEA/UK to third countries, we rely on appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- The EU-U.S. Data Privacy Framework (where applicable)
- UK International Data Transfer Agreements (IDTAs)
- Binding Corporate Rules for intra-group transfers
A copy of applicable transfer mechanisms is available on request at [email protected].
10. Data Security
We implement industry-standard technical and organisational measures to protect your personal data, including:
- AES-256 encryption at rest and TLS 1.3 in transit for all data
- Role-based access controls and principle of least privilege
- Regular penetration testing by accredited third parties
- 24/7 security monitoring and automated anomaly detection
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
11. Children's Privacy
The AffClix platform is intended for business use and is not directed at children under the age of 16 (or 13 in the US). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact [email protected] and we will delete it promptly.
12. Contact & Complaints
Postal Address
350 Fifth Ave, Suite 4100, New York, NY 10118, USA
Attn: Legal / Privacy Team
