Privacy Policy

Effective Date: June 30, 2026

Introduction

NGSMEDIA LLC (collectively, "Affiliateo," "we," or "us") operates an affiliate marketing platform where businesses ("Merchants") can create and manage affiliate programs, and affiliate marketers ("Affiliates") can promote products and services in exchange for commissions. All products and services promoted through the platform are provided solely by the applicable Merchant, and Affiliateo is not responsible for the products or services sold or promoted through the platform.

In this Privacy Policy ("Policy"), we describe how we collect, use, disclose, and otherwise process the personal information described below, as well as the rights and choices you have regarding such personal information.

For additional information about the privacy choices you have regarding your personal information, please review Section 7 (Your Privacy Choices) as well as Section 15 (Additional Privacy Information for Certain Jurisdictions), which includes additional information about privacy rights for residents of certain jurisdictions, including California residents.

Your use of our Services, and any dispute over privacy, is subject to this Policy and our Terms of Service, including its applicable limitations on damages and the resolution of disputes. Our Terms of Service are incorporated by reference into this Policy.

Contents

  1. 1. Scope
  2. 2. Personal Information Collection
  3. 3. Purposes of Collection and Use
  4. 4. Disclosure of Information
  5. 5. Aggregate and Non-identifiable Information
  6. 6. Cookies, Targeting, and Analytics
  7. 7. Your Privacy Choices
  8. 8. Information About Children
  9. 9. Third-Party Sites and Services
  10. 10. International Transfers
  11. 11. Security
  12. 12. Retention
  13. 13. Changes to Our Privacy Policy
  14. 14. Contact Us
  15. 15. Additional Information for Certain Jurisdictions

1. Scope

This Privacy Policy applies to the personal information that Affiliateo processes related to:

  • •Users of our websites where this Policy is posted, including affiliateo.com ("Site"), hosted applications, and the services we provide through these and other products that display or include a link to this Policy (collectively, the "Services");
  • •Current, former, and prospective Merchants that create and manage affiliate programs on our Services;
  • •Current, former, and prospective Affiliates that promote products and services through our platform;
  • •Individuals who register for and/or participate in our contests, promotions, events, surveys, and programs;
  • •Individuals who are subscribed to receive news, information, and marketing communications from us; and
  • •Individuals that communicate with us or otherwise engage with us related to our Services.

Not In Scope. This Policy does not apply to job applicants and candidates who apply for employment, or to employees and non-employee workers, whose personal information is subject to different privacy notices.

2. Personal Information Collection

We collect information directly from you, from third parties, and by automated means as set out below.

A. Personal Information Collected Directly

Registration and Account Information

When you register for a user account, we may collect personal information such as name, username, email address, and phone number; account profile information such as connected accounts, payment information, transaction history, and other information related to your account and preferences.

Communications and Interactions

When you communicate or interact with us, whether through the Site, Services, via email, chat, or otherwise, we collect and maintain a record of your contact details, contact preferences, communications, and our responses. This includes when you request help, request information about our Services, sign up for our mailing lists, or otherwise provide us information.

Payment and Billing Information

In connection with our user accounts, we collect payment and billing information, which may include billing contact name, address, and payment information in order to provide our Services to you. Payment processing is handled securely by our Financial Partners, including Stripe. We do not store your full credit card number on our servers. We may collect payment and identification information from Affiliates in order to process commission payouts.

Identity Verification

When you activate payouts, we may ask you to provide a government-issued photo ID (front and back) and a selfie for identity verification. These images are processed in real-time to verify your identity and age, and are immediately deleted after processing. We do not store your ID photos or selfie on our servers. Only the verification result (verified or not verified) and a numerical confidence score are retained in your account record. No biometric data, ID document images, or personal information extracted from your ID is stored.

App and Program Data

We collect information related to affiliate programs, apps, promotional materials, affiliate links, tracking parameters, commission structures, and performance metrics that you create or manage through our platform.

B. Personal Information from Third-Party Sources

Vendors and Service Providers

We outsource some of our operations to service providers and vendors in order to provide and operate our Services. They may collect and provide us with IP address, unique identifiers, and other user activity information.

Social Media and Third-Party Platforms

If you choose to link your user account to or log in to our Services with a third-party account (e.g., Google), we may collect personal information about you from that third-party platform. These platforms control the information they collect and share about you. For information about how they may use and disclose your information, please consult their respective privacy policies.

C. Personal Information Collected Automatically

Device and Browsing Information

We may use cookies, pixel tags, and other tracking technologies to automatically collect personal information when you use our Site and Services. This information may include IP address and other unique identifiers, general location information, browser type, domain names, access times, page views, date/time stamps, operating system, language, device type, Internet service provider, referring and exiting URLs, and similar device and usage information.

Activities and Usage

We collect activity information related to your use of our Site and Services, such as information about links clicked, searches, features used, pages viewed, time spent, and apps managed. We also collect data used to identify the source and destination of communications, optimize and maintain performance of the Services, and monitor, investigate, prevent and detect fraud, system abuse, security incidents, and unauthorized activities.

3. Purposes of Collection and Use

The purposes for which we may process personal information will vary depending upon the circumstances.

A. Legal Bases for Processing

Certain laws, including the EU General Data Protection Regulation ("GDPR"), require that we inform you of the legal bases for our processing of your personal information. We process personal information for the following legal bases:

  • •Performance of a contract. As necessary to enter into or carry out the performance of our contract with you.
  • •Compliance with laws. For compliance with legal obligations and/or defense against legal claims.
  • •Our legitimate interests. In furtherance of our legitimate business interests, including operating our Services, fraud prevention, security, analytics, and business development.
  • •With your consent. Where we have your consent. You have the right to withdraw your consent at any time by contacting us.

B. Processing Purposes

In general, we use personal information for the following purposes:

  • •Providing Services and support. To provide and operate our Services and Site, communicate with you about your use of the Services, provide troubleshooting and technical support, respond to your inquiries and requests, process your payments, and manage commission payouts.
  • •Communicating with you. To send notices, updates, security alerts, administrative messages, and other service-related communications.
  • •Analytics and improvement. To better understand how users access and use the Services, evaluate and improve our services and business operations, develop new features, and for internal quality control and training purposes.
  • •Marketing and promotional purposes. To send you newsletters, updates, alerts, and promotional information we think may interest you, as well as to evaluate and improve our marketing.
  • •Security and protection of rights. To protect the Services and our business operations, prevent and detect fraud, misuse and unauthorized activities, and to investigate and take action regarding illegal activities or violations of our Terms of Service.
  • •General business operations. To consider and implement mergers, acquisitions, and other business transactions, and for general administration, accounting, recordkeeping, and legal functions.
  • •Complying with legal obligations. To comply with the law or legal proceedings, including responding to subpoenas, court orders, and other lawful requests by regulators and law enforcement.

4. Disclosure of Information

We may disclose the information, including personal information, that we collect to others as reasonably necessary for the purposes described above and as otherwise directed or authorized by you, which may include:

  • •Vendors and service providers. To vendors, service providers, contractors, or agents who process information on our behalf, including IT service providers, payment processors (such as Stripe), analytics providers, and cloud hosting providers.
  • •Affiliates and subsidiaries. To our affiliates or subsidiaries; however, if we do so, their use and disclosure of your personal information will be subject to this Policy.
  • •Merchants and Affiliates. To facilitate affiliate program operations, we may share relevant information between Merchants and their Affiliates, such as commission details, referral data, and account profile information necessary to operate the affiliate relationship.
  • •Protecting rights and interests. To law enforcement and others where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property and safety of others, including to prevent, detect, investigate and respond to fraud, unauthorized activities, and misuse of the Services.
  • •Legal compliance. To regulators, law enforcement, and other third parties in order to comply with applicable legal or regulatory obligations, including in response to subpoenas, warrants, court orders, or other legal process.
  • •Business transfers. We may disclose your information to another entity in connection with an acquisition or merger, sale or transfer of a business unit or assets, bankruptcy proceeding, or as part of any other similar business transfer.

5. Aggregate and Non-identifiable Information

We may collect, use, disclose, and otherwise process aggregate, anonymous, and other non-identifiable information related to our business and Services for quality control, analytics, marketing, research, development, compliance, or other purposes. Where we use, disclose, or process data that has been de-identified, we will maintain and use the information in de-identified form and not attempt to re-identify the information, except pursuant to applicable privacy laws.

6. Cookies, Targeting, and Analytics

We and our third-party service providers use cookies, pixels, JavaScript, and other mechanisms to automatically collect information about browsing, activity, device, and similar information within our Services. We use this information to analyze and understand how users access and use the Services, identify and resolve bugs and errors, and to assess, protect, optimize, and improve the performance of our Services.

Cookies

Cookies are alphanumeric identifiers that we transfer to your device through the Services for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others allow us to track your activities, support the security and performance of the Services, or allow us to track activity and usage data. Most web browsers automatically accept cookies, but you can edit your browser options to block them in the future.

Pixel Tags

Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier. We may use these in connection with our Services to track activities, help manage content, compile statistics about usage, and track email response rates.

Third-Party Analytics

We may use non-affiliated analytics companies, such as Google Analytics, to evaluate use of our Services. These tools help us understand use of, and to improve, our Services, performance, and user experiences. These entities may use cookies and other tracking technologies to perform their services.

Advertising and Conversion Measurement

We use advertising and conversion-measurement tools from Meta Platforms, Inc.(Facebook and Instagram) — specifically the Meta Pixel in your browser and the Meta Conversions API on our servers — to measure the performance of our own advertising, understand which ads lead people to sign up, and reach similar audiences. When you use affiliateo.com we may share event information with Meta, such as the pages you view and whether you create an account, together with your IP address, browser user agent, and Meta cookie identifiers. When you create an account, our server additionally sends Meta a hashed (irreversibly encoded) version of your email address so that Meta can measure the sign-up; we do not send Meta your email address in plain text. You can control how Meta uses your information for ads in your Facebook or Instagram ad settings, and you can opt out of interest-based advertising using the industry tools linked at the end of this section.

Affiliate Tracking SDK

When you visit a Merchant's site or mobile app that uses Affiliateo for affiliate attribution, the Affiliateo tracking script (or mobile SDK) writes persistent identifiers to your browser's localStorage(or, on mobile apps, equivalent on-device storage). These identifiers include a randomly generated visitor ID, the referring affiliate code, and the app ID, and they persist across browser sessions so that we can attribute a later purchase back to the affiliate who referred you. We also receive your IP address, user agent, approximate geolocation derived from your IP (city level, with latitude/longitude rounded to roughly 1km), referrer URL, and the pages you view on the Merchant's site. Where required by law, the Merchant is responsible for obtaining your consent before this script loads.

Cross-Session Attribution

To credit the correct affiliate when a referred visitor later makes a purchase, we retain pseudonymous click and visit records that can be linked to a real customer at the moment of conversion (when the Merchant sends us payment metadata that includes the affiliate reference). Mobile-app installs may be attributed to a prior web click using a fingerprint match based on IP address, user agent, operating system, country, and timing, within a 7-day lookback window.

Subprocessors

We use the following third parties to operate the Services: Supabase (database and authentication), Cloudflare (hosting, CDN, security, R2 object storage, email sending), Stripe (payments and merchant payouts), Apple App Store and Google Play (in-app purchase processing for mobile apps), RevenueCat (mobile in-app purchase webhook relay, used only for mobile apps), Meta Platforms (advertising and conversion measurement for our own marketing), Paddle, Polar, and Shopify (alternative web payment providers and commerce integrations, used only when a Merchant connects one of these providers to an app), and Amazon Web Services (identity verification via Amazon Rekognition and Amazon Textract; ID photos and selfies are processed in real time for the verification check and are not retained by Affiliateo after the verification result is returned). Each subprocessor processes personal information on our behalf under contractual data-protection commitments.

Do-Not-Track

Currently, our systems do not recognize browser "do-not-track" requests. You may, however, disable certain tracking as discussed in this section (e.g., by disabling cookies).

Managing Preferences. You can manage your preferences for cookies by adjusting your browser settings. You can also opt out of targeted advertising from participating third-party ad networks at aboutads.info/choices (U.S.) or youronlinechoices.eu (EU). Please note that opting out does not mean you will no longer see ads. You may continue to receive generic or contextual ads.

7. Your Privacy Choices

Users have several choices regarding their personal information and privacy preferences:

Marketing Communications

We may send periodic promotional emails to you. You may opt out by following the unsubscribe instructions in the email or by emailing us at support@affiliateo.com. Please note that it may take up to ten (10) business days to process opt-out requests. If you opt out of promotional emails, we may still send you emails about your account or any Services you have requested.

Cookie and Targeted Advertising

You can manage your preferences for cookies on our Site and Services by adjusting your browser settings or other preferences as described in Section 6 above.

Accessing and Updating Your Account Information

If you register for an account with us, you can access and update certain information we have relating to your account within your account profile settings. Please note that we may maintain copies of information that you have updated, modified, or deleted, as permitted, in our business records and in the normal course of our business operations.

Residents of certain jurisdictions may have additional rights, as described in Section 15 below. For more information about our privacy practices and your privacy choices, you may contact us as set forth in the "Contact Us" section below.

8. Information About Children

Our Services are not intended for minors under the age of 18. We do not knowingly or specifically collect information about minors under the age of 18. If you believe we have unintentionally collected such information, please notify us at support@affiliateo.com and we will take action as necessary to securely delete such information.

9. Third-Party Sites and Services

Our Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

10. International Transfers

Affiliateo is headquartered in the United States and has service providers in the United States and throughout the world. As such, we and our service providers may transfer your personal information to, or access it in, jurisdictions (including the United States) that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through appropriate written data processing terms and/or data transfer agreements.

If you are in the European Economic Area, and we process your personal information in a jurisdiction that the European Commission has deemed to not provide an adequate level of data protection, we will implement measures to adequately protect your personal information, such as putting in place standard contractual clauses approved by the European Commission. You may request details of these mechanisms by contacting us.

11. Security

We have implemented safeguards and technical measures to protect the personal information that we have under our control from unauthorized access, use, or disclosure. However, no data security measures can guarantee 100% security. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared device.

12. Retention

As a general rule, we retain your personal information for as long as necessary to fulfill the purposes for which it was collected and is used by us, as stated in this Policy. Further, to the extent permitted by applicable law, we will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements.

App and Program Data

Retained as long as your account is active or as needed to provide services.

Account Data

Retained until you delete your account or request deletion.

Usage Logs

May be retained for up to 90 days for analytics, troubleshooting, and security purposes.

Visitor Tracking Data

Affiliate click records (including IP address and user agent) are retained for 90 days. Pageview and session events are retained for 90 days. Web visitor profiles are retained for 180 days to support the affiliate attribution window. Mobile app visitor records that were never matched to an affiliate click are deleted after 90 days. Matched mobile visitor records are retained for the life of the app so that future renewal or refund events can still be attributed correctly.

Transaction Records

Retained as required by tax and accounting regulations (typically 7 years).

13. Changes to Our Privacy Policy

This Policy is current as of the Effective Date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Site. If we make any changes that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavor to provide you with notice in advance of such change, such as via email or prominent notice on the Site.

14. Contact Us

If you have questions or concerns regarding the way in which your personal information is being processed or this Policy, please contact us:

NGSMEDIA LLC

312 W 2nd St 4192
Casper, WY 82601

Email: support@affiliateo.com
Website: affiliateo.com

15. Additional Information for Certain Jurisdictions

Residents of certain jurisdictions have additional rights under applicable privacy laws, as described in this section.

A. European Union/EEA and UK Residents

Subject to the conditions set out in applicable law, data subjects in the EU/EEA and UK have the following rights with regards to our processing of their personal information:

  • •Right of access. To confirm whether we are processing your personal information and to receive a copy of that personal information.
  • •Right to correction. To request that we correct any personal information we hold about you that is inaccurate or incomplete.
  • •Right of erasure. To request that we delete your personal information under certain circumstances, such as where we no longer need it or if you withdraw your consent.
  • •Right of restriction. To request that we restrict the processing of your personal information under certain circumstances.
  • •Right to data portability. To receive a copy of personal information in a structured, commonly used, and machine-readable format.
  • •Right to object. To object to our processing of your personal information on the basis of our legitimate interests.
  • •Right to object to marketing. To request that we stop processing your personal information for marketing purposes.
  • •Right to withdraw consent. Where you have consented, to withdraw your consent to our processing of your personal information, without affecting the lawfulness of our processing prior to the withdrawal.
  • •Right to lodge a complaint. To lodge a complaint with a supervisory authority if you believe our processing infringes the law.

Please contact us as set out in the Contact Us section to exercise one of these rights.

B. U.S. Residents

Residents of certain U.S. states (including Virginia, Colorado, Connecticut, and Utah) have additional privacy rights under applicable privacy laws, subject to certain limitations, including:

  • •Right to correction. To correct inaccurate personal information.
  • •Right to deletion. To delete personal information provided to or obtained by us.
  • •Right of access. To confirm whether we are processing personal information and to obtain a copy in a portable format.
  • •Rights to opt-out. To opt out of the sale of personal information, targeted advertising, and processing for purposes of decisions that produce legal or similarly significant effects.
  • •Right to appeal. To appeal our denial of your privacy request by contacting us at support@affiliateo.com.

You may submit a request to exercise your privacy rights by contacting us at support@affiliateo.com. We will take steps to verify your request by matching the information provided with the information we have in our records.

C. CCPA Privacy Notice for California Residents

Below, we provide information as required under California privacy laws, including the California Consumer Privacy Act and its implementing regulations, each as amended ("CCPA").

Categories of Personal Information We Collect

Our collection, use, and disclosure of personal information about a California resident will vary depending upon the circumstances. Generally, we may collect the following categories of personal information as defined by the CCPA:

Identifiers: Name, username, email address, phone number, IP address, device ID, and other unique identifiers.

Customer Records: Account and profile information, billing and payment information, contact information, and communications preferences.

Commercial Information: Records of products or services purchased, obtained, or considered, purchasing histories, and affiliate program activity.

Usage Data: Browsing history, clickstream data, search history, access logs, interactions with our Services and marketing emails, and other usage data.

Location Data: General location information about a particular individual or device.

Inferences: Inferences drawn from other personal information to create a profile reflecting your preferences, characteristics, and behavior related to our Services.

Sales and Sharing

While we do not disclose personal information to third parties in exchange for monetary compensation, we may "sell" or "share" (as defined by the CCPA) certain categories of information such as Identifiers, Customer Records, Commercial Information, and Usage Data to third-party analytics providers and advertising partners (such as Meta Platforms). We do not sell or share sensitive personal information, nor do we sell or share any personal information about individuals who we know are under sixteen (16) years old.

California Residents' Rights

California residents have the following rights under the CCPA (subject to certain limitations):

  • •Opt-out of sales and sharing. The right to opt-out of our sale and sharing of personal information.
  • •Delete. The right to request deletion of personal information we have collected.
  • •Know/access. The right to request and receive a copy of the specific pieces of personal information we have collected, and information about how we have handled your personal information.
  • •Correct. The right to request correction of inaccurate personal information.
  • •Non-discrimination. Not to be subject to discriminatory treatment for exercising your CCPA rights.

Submitting CCPA Requests

California residents may submit a verifiable request to exercise their CCPA rights by emailing support@affiliateo.com or by writing to NGSMEDIA LLC, 312 W 2nd St 4192, Casper, WY 82601. When you submit a request, we will take steps to verify your request by matching the information you provide with the information we have in our records. Authorized agents may initiate a request on behalf of another individual by contacting us in writing and providing proof of their authorization.