Privacy policy

DRAFT – not yet reviewed. Fill in every [BRACKETED] item, check it against how you really operate, have a qualified lawyer review it, then delete this notice.

Privacy policy

This policy explains what personal data [BUSINESS / OWNER NAME], [ADDRESS] ("we") collect through [WEBSITE NAME] and why. Contact for privacy questions and complaints: [GRIEVANCE / PRIVACY CONTACT NAME AND EMAIL].

What we collect

• Account details if you register: your name, email address and a one-way hash of your password (we cannot read your password).
• Messages you send through the contact form or support requests: your name, email and message.
• Click records when you use a link that leaves this site to a merchant or provider: a random click ID, the offer, merchant and affiliate network, the time, any campaign tags in the link, the website you came from (if this option is enabled), and your account ID only if you were logged in.
• Coupon interactions: anonymous counts of "copy", "worked" and "did not work" taps. No personal data is attached.
• Cashback records if you use cashback: amounts, status, withdrawal requests and the payout details (such as a UPI ID) you give us. We never ask for card numbers, CVV, PINs, OTPs or banking passwords.
• Security data: to limit abuse we keep a keyed hash of your network address for up to two days. We do not store your raw IP address in our database. Our web host may keep standard server logs.

Cookies

We use a session cookie to keep you logged in and protect forms, and a language-choice cookie. We do not use advertising or analytics cookies in this software [UPDATE IF YOU ADD ANALYTICS OR ADS]. Merchant and network sites you visit may set their own cookies, including to track the affiliate referral.

How we use it

To run your account, answer you, prevent fraud and abuse, measure which offers are used, report to affiliate networks, and calculate and pay any cashback you earn.

Who we share it with

Affiliate networks and merchants (the click ID so they can credit a referral), our hosting provider, and our email provider [NAME]. We do not sell personal data. We may disclose data where the law requires. [ADD ANY OTHER PROCESSORS]

How long we keep it

[RETENTION PERIODS, e.g. click records for X months; account data until you ask us to delete your account, except records we must keep for accounting or legal reasons.]

Your choices

You can ask to access, correct or delete your data, or withdraw consent, by writing to [CONTACT EMAIL]. [ADD RIGHTS AND TIMELINES REQUIRED BY APPLICABLE INDIAN LAW.]

Last updated: [DATE]