Privacy policy

What we collect

If you only browse, we hold nothing that identifies you. If you create an account, we hold your email address and whatever profile details your sign-in provider passes us.

If you list a program, we hold what you typed into the listing form, plus the figures we read from the services you connected: revenue and subscription counts from Stripe, visitor counts from Google Analytics, and click, impression and query data from Google Search Console.

Credentials

Stripe restricted keys and Google refresh tokens are encrypted with AES-256-GCM before they are written to our database, and are decrypted only in memory at the moment a sync runs. Nobody at AffiliateMRR reads them. Disconnecting an integration deletes the stored credential outright.

We ask for read-only Stripe keys and read-only Google scopes. We cannot move your money or change anything in your accounts, by design rather than by promise.

What is public

Once you publish a listing, everything on it is public: the description and terms you wrote, and the verified figures we read. That is the point of the site. Until you publish, your listing and its figures are visible only to you.

Raw credentials, customer records, individual transactions and anything else we read from a connected account are never published. Only the aggregate figures shown on your listing leave our database.

Who we share it with

Our processors: Neon (database and authentication), Stripe (payments), Google (analytics APIs you chose to connect) and our hosting provider. We do not sell data and we do not share it with advertisers.

Retention

Listings and their data live until you delete them. Deleting a program removes the listing, its stored credentials and its keyword history. Payment records are kept as long as accounting rules require.

Your rights

You can export, correct or delete your data — mostly from the dashboard, and otherwise by emailing us. If you are in the UK or EU, you have the usual GDPR rights, including the right to complain to your data protection authority.

Contact

Anything about your data: d@devkonic.com.