Privacy policy

Versión 2026-09-10 · Actualizado el 10 de septiembre de 2026

1. Scope of this policy

This policy covers the Partners website, accounts, teams, contacts and referral management. Recommended products, Google and external AI services may have their own policies. Partners adding contacts for their activity also have responsibilities for that data's origin, purpose and lawfulness.

2. Data we use and its sources

You provide your name, email, introduction, country, website, optional avatar and account preferences. The partner identifier links activity and supports enquiries. If you choose Google, we receive the account identifier, name, email and photo supplied by that provider. We do not request Gmail, Drive or Google contacts permissions through sign-in. Passwords are handled by the authentication system and are not shown to the team.

We also process contacts and notes you upload or import; ecosystems, products, campaigns and links; members and invitations; tasks, comments, statuses and permissions; notification preferences and history. An owner or authorized person may provide another member's or contact's data. If an invitation is unexpected, you may decline and request review or deletion.

Products and payment providers communicate identifiers needed to verify registrations, purchases, subscriptions, refunds and disputes. Partners records attribution, dates, currency, eligible amounts, commissions and withdrawal status. Payout data may include account holder, account, wallet address, token and network. Partners does not need a complete card number or security code.

To deliver and protect the service, technical device data, requests, errors, timestamps and security logs may be processed. Referral click records use a pseudonymized identifier; raw IP addresses are not stored there. Infrastructure may process connection data to provide the service and prevent abuse.

3. Purposes and legal bases

We use account, shared work, referral and payout data to perform the program relationship and handle pre-contractual requests (GDPR Article 6(1)(b)). Data strictly necessary for accounting, tax or legal requirements is processed under legal obligation (6(1)(c)).

Security, fraud investigation, spam prevention, reconciliation and defense of claims serve legitimate interests (6(1)(f)), taking necessity and individual rights into account. Optional analytics relies on consent (6(1)(a)), which you can withdraw. Accepting the terms is not consent to optional analytics or advertising.

Without basic identification data we cannot create or manage an account. You can explore or recommend without initially completing a payout method, but we will need the information required to execute and document a withdrawal. Introductions, avatars, contacts and content tools are optional.

4. What is shared and with whom

Your published name, introduction, avatar and product selection may be visible on public ecosystem pages. Review this before sharing a link. Payout details, contacts and notes are not made public there.

Team members can access information allowed by their role and granted permissions: tasks, shared links and authorized contacts. Task descriptions and comments are restricted by task permissions. Worker sales notifications exclude amounts and the owner's payout data. A worker role does not grant permission to change payout methods.

New ecosystems are shared with the team by default. You can disable this access. This controls internal access; it does not delete links or copies others already received. Owners must review members and access when responsibilities change.

5. Providers and transfers

We use Vercel for hosting, Neon for data and authentication, Resend for invitation emails and Hostinger for applicable email services. Product payment providers, including Stripe where used, verify sales, adjustments and subscriptions. Google is involved if you choose it for authentication.

Integrated referred registration for Task it All and PassportBase uses the product's Supabase authentication: credentials are sent to that system and Partners verifies the session and email. Other products manage registration in their own services. You do not need to put passwords in the CRM or give them to support.

Providers may process data or provide support from countries outside the European Economic Area. Transfers must have the appropriate legal mechanism, such as an adequacy decision or applicable contractual safeguards. You may request information about recipients and safeguards relevant to your case. We do not claim all processing remains exclusively in Germany.

Authorized personnel and support providers access data needed for their tasks. Data may also be disclosed to authorities under a valid obligation or where necessary to exercise or defend rights. CRM contacts are not automatically added to other partners' campaigns.

6. Referrals, storage and analytics

Links connect clicks, products, campaigns and subsequent verified registrations or purchases. The referral window for new registrations is 30 days after the click. This does not mean commission records requiring reconciliation are deleted after 30 days. The destination app manages storage and preferences for its environment.

The browser stores information needed for sessions and preferences such as theme, language or selected workspace. Google Analytics loads only after you accept optional analytics. You can decline or change your choice using the Analytics privacy control. We do not send names, emails, notes, payout data or account identifiers to analytics. Technical information processed by that provider is also subject to its configuration and terms.

7. Notifications, emails and AI help

Member, task, sales and reminder notifications are stored with history. You can choose the categories to receive; changes affect new notifications and do not automatically delete history. Team invitations and necessary security, verification or account management communications are handled separately from those preferences.

Help copies general app usage text. It does not automatically include personal account, contact or payout data. Copying does not send it to an AI provider. If you paste it or add information in another service, you decide what to transmit and that service's terms apply. Review content before sharing.

8. Retention and deletion

We retain account and work data as needed to provide the service and manage the relationship. Contacts can be exported or deleted from the dashboard. You can request closure and review of data to be erased. Deletion may be restricted for records needed for tax obligations, reconciliation, security or pending claims.

The specific period depends on document category, applicable obligations and outstanding issues. Records needed to justify payments are not deleted simply by leaving a team. Provider backups and logs may follow their retention cycles. You may ask what information is retained in your case and why; we do not promise instant deletion of all copies.

9. Your rights

Where applicable, you may request access, rectification, erasure, restriction, portability and objection, and withdraw consent without affecting the lawfulness of earlier processing. You may object to legitimate-interest uses based on your situation and to direct marketing. We may request proportionate identity verification to avoid disclosing information to someone else.

We handle requests within statutory deadlines. You may complain to the competent data protection authority, including the Saxon authority, or that of your habitual residence or workplace where applicable. You need not exhaust an internal complaint first.

Attribution rules, limits and commission calculations use automated processes. If you dispute a result, you may request an explanation and human review through support with the ID and specific transaction. This policy does not exclude legally applicable rights concerning automated decisions.

10. Responsible use and changes

The program is not intended for minors. Do not include sensitive data, private keys, passwords or unnecessary information in contacts, comments or attachments. Protect access and report incidents affecting team data.

We will update this policy when processing or requirements change. The date and version appear above. Significant changes will be communicated appropriately and new consent requested when necessary.

Contact us about privacy · Program terms