Privacy Policy

Last updated: 2026-08-25

This Policy explains what personal data Referally processes and why. It covers our own account holders (merchants and partners) and end users whose referral events flow through the platform.

Data we process

• Account data: name, email, organization, authentication and security data (hashed passwords, 2FA, sessions).

• Attribution data: clicks, referral tokens, coupon codes, hashed email identifiers, and conversion events used to credit partners.

• Financial data: commission ledgers, payout profiles, and tax form data submitted by partners.

• Usage and device data: IP address, request metadata, and logs used for security, fraud prevention, and reliability.

Why we process it

To provide the Service (attribution, payouts), secure it (fraud, rate limiting), meet legal obligations (tax, anti-fraud), and improve reliability. For end-user attribution data, merchants are the controller and Referally is a processor acting on their instructions; see our Data Processing Addendum.

Sharing

We share data with sub-processors that power the Service — payment/payout providers, email delivery, cloud hosting — under contractual data-protection terms, and only as needed. We do not sell personal data.

Retention

We keep data for as long as your account is active and as required for legal, tax, and dispute purposes. Financial ledgers are append-only and retained for statutory periods.

Your rights

Subject to law, you may access, correct, export, or delete your personal data. The platform supports data-subject export and erasure; erasure pseudonymizes identity while preserving the immutable financial ledger. Contact privacy@referally.example or, for end-user data, the relevant merchant.

International transfers & security

Where data crosses borders we rely on appropriate safeguards. We apply encryption in transit, least-privilege access, tenant isolation, and audit logging. No method is perfectly secure, but we work to protect your data and to notify you of material breaches as required.

Contact

privacy@referally.example

This document is a template provided for completeness. Have it reviewed by qualified counsel for your jurisdiction before relying on it.