Privacy Policy

Effective Date: July 25, 2026

Introduction

NGSMEDIA LLC (collectively, "Affiliateo," "we," or "us") operates an affiliate marketing platform where businesses ("Merchants") can create and manage affiliate programs, and affiliate marketers ("Affiliates") can promote products and services in exchange for commissions. All products and services promoted through the platform are provided solely by the applicable Merchant, and Affiliateo is not responsible for the products or services sold or promoted through the platform.

In this Privacy Policy ("Policy"), we describe how we collect, use, disclose, and otherwise process the personal information described below, as well as the rights and choices you have regarding such personal information.

For additional information about the privacy choices you have regarding your personal information, please review Section 7 (Your Privacy Choices) as well as Section 15 (Additional Privacy Information for Certain Jurisdictions), which includes additional information about privacy rights for residents of certain jurisdictions, including California residents.

What this Policy does not cover. This Policy describes the information we handle for our own purposes, as a controller: your account with us, your use of affiliateo.com, and our own marketing. It does not cover the visitor data we process on behalf of a Merchant when that Merchant installs our tracking script or mobile SDK on their own website or app. For that data the Merchant is the controller and we act only on their instructions; the terms are in our Data Processing Agreement, and the companies involved are listed at Subprocessors. If you are a visitor to a Merchant's site asking what they collect about you, their privacy notice is the one that governs.

Your use of our Services, and any dispute over privacy, is subject to this Policy and our Terms of Service, including its applicable limitations on damages and the resolution of disputes. Our Terms of Service are incorporated by reference into this Policy.

Contents

  1. 1. Scope
  2. 2. Personal Information Collection
  3. 3. Purposes of Collection and Use
  4. 4. Disclosure of Information
  5. 5. Aggregate and Non-identifiable Information
  6. 6. Cookies, Targeting, and Analytics
  7. 7. Your Privacy Choices
  8. 8. Information About Children
  9. 9. Third-Party Sites and Services
  10. 10. International Transfers
  11. 11. Security
  12. 12. Retention
  13. 13. Changes to Our Privacy Policy
  14. 14. Contact Us
  15. 15. Additional Information for Certain Jurisdictions

1. Scope

This Privacy Policy applies to the personal information that Affiliateo processes related to:

  • •Users of our websites where this Policy is posted, including affiliateo.com ("Site"), hosted applications, and the services we provide through these and other products that display or include a link to this Policy (collectively, the "Services");
  • •Current, former, and prospective Merchants that create and manage affiliate programs on our Services;
  • •Current, former, and prospective Affiliates that promote products and services through our platform;
  • •Individuals who register for and/or participate in our contests, promotions, events, surveys, and programs;
  • •Individuals who are subscribed to receive news, information, and marketing communications from us; and
  • •Individuals that communicate with us or otherwise engage with us related to our Services.

Not In Scope. This Policy does not apply to job applicants and candidates who apply for employment, or to employees and non-employee workers, whose personal information is subject to different privacy notices.

2. Personal Information Collection

We collect information directly from you, from third parties, and by automated means as set out below.

A. Personal Information Collected Directly

Registration and Account Information

When you register for a user account, we may collect personal information such as name, username, email address, and phone number; account profile information such as connected accounts, payment information, transaction history, and other information related to your account and preferences.

Communications and Interactions

When you communicate or interact with us, whether through the Site, Services, via email, chat, or otherwise, we collect and maintain a record of your contact details, contact preferences, communications, and our responses. This includes when you request help, request information about our Services, sign up for our mailing lists, or otherwise provide us information.

Payment and Billing Information

In connection with our user accounts, we collect payment and billing information, which may include billing contact name, address, and payment information in order to provide our Services to you. Payment processing is handled securely by our Financial Partners, including Stripe. We do not store your full credit card number on our servers. We may collect payment and identification information from Affiliates in order to process commission payouts.

Identity Verification

When you activate payouts, we may ask you to provide a government-issued photo ID (front and back) and a selfie for identity verification. These images are processed in real-time to verify your identity and age, and are immediately deleted after processing. We do not store your ID photos or selfie on our servers. Only the verification result (verified or not verified) and a numerical confidence score are retained in your account record. No biometric data, ID document images, or personal information extracted from your ID is stored.

App and Program Data

We collect information related to affiliate programs, apps, promotional materials, affiliate links, tracking parameters, commission structures, and performance metrics that you create or manage through our platform.

B. Personal Information from Third-Party Sources

Vendors and Service Providers

We outsource some of our operations to service providers and vendors in order to provide and operate our Services. They may collect and provide us with IP address, unique identifiers, and other user activity information.

Social Media and Third-Party Platforms

If you choose to link your user account to or log in to our Services with a third-party account (e.g., Google), we may collect personal information about you from that third-party platform. These platforms control the information they collect and share about you. For information about how they may use and disclose your information, please consult their respective privacy policies.

Merchants Who Enroll You as an Affiliate

A Merchant may use our Services, including our developer API and embedded components, to enroll you as an Affiliate in their program from within their own app or website. When they do, the Merchant provides us with information such as your email address and name so that we can create and operate your Affiliate account. We then process that information as an independent controller of your Affiliate relationship with us, under this Policy, in order to pay you, verify your identity, and hold your earnings. The Merchant is responsible for obtaining any consent required before submitting your information to us. You confirm your account, and the direct relationship with us it creates, when you first sign in.

C. Personal Information Collected Automatically

Device and Browsing Information

We may use cookies, pixel tags, and other tracking technologies to automatically collect personal information when you use our Site and Services. This information may include IP address and other unique identifiers, general location information, browser type, domain names, access times, page views, date/time stamps, operating system, language, device type, Internet service provider, referring and exiting URLs, and similar device and usage information.

Activities and Usage

We collect activity information related to your use of our Site and Services, such as information about links clicked, searches, features used, pages viewed, time spent, and apps managed. We also collect data used to identify the source and destination of communications, optimize and maintain performance of the Services, and monitor, investigate, prevent and detect fraud, system abuse, security incidents, and unauthorized activities.

3. Purposes of Collection and Use

The purposes for which we may process personal information will vary depending upon the circumstances.

A. Legal Bases for Processing

Certain laws, including the EU General Data Protection Regulation ("GDPR"), require that we inform you of the legal bases for our processing of your personal information. We process personal information for the following legal bases:

  • •Performance of a contract. As necessary to enter into or carry out the performance of our contract with you.
  • •Compliance with laws. For compliance with legal obligations and/or defense against legal claims.
  • •Our legitimate interests. In furtherance of our legitimate business interests, including operating our Services, fraud prevention, security, analytics, and business development.
  • •With your consent. Where we have your consent. You have the right to withdraw your consent at any time by contacting us.
  • •Your explicit consent, for special category data. Optional identity verification involves a facial comparison, which is biometric data under Article 9 GDPR. We process it only where you give explicit consent under Article 9(2)(a), separately from your acceptance of our Terms. See Section 3.C below.

C. Identity Verification and Biometric Data

Identity verification is optional. You are never required to complete it to use the Services, and you can withdraw at any time before submitting. If you choose to verify, you upload a photograph of a government-issued identity document and a live selfie. We then:

  • •read the document using Amazon Textract to confirm it is a valid identity document; and
  • •run a one-to-one facial comparison between the document photograph and your selfie using Amazon Rekognition, to confirm they are the same person. This comparison creates biometric data within the meaning of Article 4(14) GDPR, and we rely on your explicit consent under Article 9(2)(a) to perform it.

We do not keep the images or the document details. The photographs are held in memory only for the duration of the check, are overwritten immediately afterwards, and are never written to our database or file storage. We do not store your identity document number, the name printed on the document, or any facial template. The only things we retain are a flag recording that you were verified, the date, and the numeric similarity score the comparison returned. If the check fails, we retain no biometric data at all. Verification is entirely optional and is never started for you: it is needed only if you want to receive payouts. You give your consent by choosing to begin the check after the verification screen has told you that we compare your selfie with your ID photo, and then taking and submitting each photograph yourself. You can stop at any point simply by not continuing. Withdrawing consent after a successful check removes your verified status; contact us using the details in Section 14.

B. Processing Purposes

In general, we use personal information for the following purposes:

  • •Providing Services and support. To provide and operate our Services and Site, communicate with you about your use of the Services, provide troubleshooting and technical support, respond to your inquiries and requests, process your payments, and manage commission payouts.
  • •Communicating with you. To send notices, updates, security alerts, administrative messages, and other service-related communications.
  • •Analytics and improvement. To better understand how users access and use the Services, evaluate and improve our services and business operations, develop new features, and for internal quality control and training purposes.
  • •Marketing and promotional purposes. To send you newsletters, updates, alerts, and promotional information we think may interest you, as well as to evaluate and improve our marketing.
  • •Security and protection of rights. To protect the Services and our business operations, prevent and detect fraud, misuse and unauthorized activities, and to investigate and take action regarding illegal activities or violations of our Terms of Service.
  • •General business operations. To consider and implement mergers, acquisitions, and other business transactions, and for general administration, accounting, recordkeeping, and legal functions.
  • •Complying with legal obligations. To comply with the law or legal proceedings, including responding to subpoenas, court orders, and other lawful requests by regulators and law enforcement.

4. Disclosure of Information

We may disclose the information, including personal information, that we collect to others as reasonably necessary for the purposes described above and as otherwise directed or authorized by you, which may include:

  • •Vendors and service providers. To vendors, service providers, contractors, or agents who process information on our behalf under contract, including our database and authentication provider (Supabase), our hosting, storage, security, and email provider (Cloudflare), our payment and payout processor (Stripe), our identity-verification provider (Amazon Web Services), and the commerce providers a Merchant chooses to connect. The complete list is in Section 6 under "Subprocessors."
  • •Advertising platforms, for conversion measurement. To Meta Platforms, TikTok, Google, and Apple, so that we can measure our own advertising and so that Merchants who connect an ad account can measure theirs. These platforms act as independent controllers of what they receive. We do not send them your email address, name, phone number, or postal address, and we do not upload customer lists to them. Section 6 sets out exactly what each receives.
  • •Affiliates and subsidiaries. To our affiliates or subsidiaries; however, if we do so, their use and disclosure of your personal information will be subject to this Policy.
  • •Merchants and Affiliates. To facilitate affiliate program operations, we may share relevant information between Merchants and their Affiliates, such as commission details, referral data, and account profile information necessary to operate the affiliate relationship.
  • •Protecting rights and interests. To law enforcement and others where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property and safety of others, including to prevent, detect, investigate and respond to fraud, unauthorized activities, and misuse of the Services.
  • •Legal compliance. To regulators, law enforcement, and other third parties in order to comply with applicable legal or regulatory obligations, including in response to subpoenas, warrants, court orders, or other legal process.
  • •Business transfers. We may disclose your information to another entity in connection with an acquisition or merger, sale or transfer of a business unit or assets, bankruptcy proceeding, or as part of any other similar business transfer.

5. Aggregate and Non-identifiable Information

We may collect, use, disclose, and otherwise process aggregate, anonymous, and other non-identifiable information related to our business and Services for quality control, analytics, marketing, research, development, compliance, or other purposes. Where we use, disclose, or process data that has been de-identified, we will maintain and use the information in de-identified form and not attempt to re-identify the information, except pursuant to applicable privacy laws.

6. Cookies, Targeting, and Analytics

We and our third-party service providers use cookies, pixels, JavaScript, and other mechanisms to automatically collect information about browsing, activity, device, and similar information within our Services. We use this information to analyze and understand how users access and use the Services, identify and resolve bugs and errors, and to assess, protect, optimize, and improve the performance of our Services.

Cookies

Cookies are alphanumeric identifiers that we transfer to your device through the Services for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others allow us to track your activities, support the security and performance of the Services, or allow us to track activity and usage data. Most web browsers automatically accept cookies, but you can edit your browser options to block them in the future.

Pixel Tags

Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier. We may use these in connection with our Services to track activities, help manage content, compile statistics about usage, and track email response rates.

Third-Party Analytics

We do not use third-party product-analytics services. We do not run Google Analytics, and we do not use session-replay, heat-mapping, or error-tracking services that record your activity on the Site. The usage statistics we rely on are generated by our own systems from our own database. The only third party that receives behavioral information about your use of affiliateo.com is Meta, as described immediately below.

Advertising and Conversion Measurement

We use advertising and conversion-measurement tools from Meta Platforms, Inc. (Facebook and Instagram) — specifically the Meta Pixel in your browser and the Meta Conversions API on our servers — to measure the performance of our own advertising, understand which ads lead people to sign up, and reach similar audiences. When you use affiliateo.com we may share event information with Meta, such as the pages you view and whether you create an account, together with your IP address, browser user agent, and Meta cookie identifiers. When you create an account, our server additionally sends Meta a hashed (irreversibly encoded) version of your email address so that Meta can measure the sign-up; we do not send Meta your email address in plain text. You can control how Meta uses your information for ads in your Facebook or Instagram ad settings, and you can opt out of interest-based advertising using the industry tools linked at the end of this section.

Affiliate Tracking SDK

When you visit a Merchant's site or mobile app that uses Affiliateo for affiliate attribution, the Affiliateo tracking script (or mobile SDK) writes persistent identifiers to your browser's localStorage (or, on mobile apps, equivalent on-device storage). These identifiers include a randomly generated visitor ID, the referring affiliate code, and the app ID, and they persist across browser sessions so that we can attribute a later purchase back to the affiliate who referred you. We also receive your IP address, user agent, approximate geolocation derived from your IP (city level, with latitude/longitude rounded to roughly 1km), referrer URL, and the pages you view on the Merchant's site. Where required by law, the Merchant is responsible for obtaining your consent before this script loads.

Cross-Session Attribution

To credit the correct affiliate when a referred visitor later makes a purchase, we retain pseudonymous click and visit records that can be linked to a real customer at the moment of conversion (when the Merchant sends us payment metadata that includes the affiliate reference). Mobile-app installs may be attributed to a prior web click using a fingerprint match based on IP address, user agent, operating system, country, and timing, within a 7-day lookback window.

Conversion Reporting to Ad Networks

When a Merchant connects an advertising account to Affiliateo, we report that Merchant's sales back to the relevant ad network from our servers so the Merchant can measure their advertising. If you purchase from such a Merchant, we may send Meta Platforms, TikTok, and Google an event containing the purchase amount and currency, the product name, your randomly generated Affiliateo visitor ID, your browser user agent, and the ad-click identifier that the ad network itself placed in the landing-page URL when you clicked the ad (fbclid, ttclid, or gclid). For Meta we also send a one-way hashed form of your country, region, and city.

We do not send these ad networks your email address, name, phone number, postal address, or IP address, and we do not upload customer lists or contact records to any advertising platform. The ad networks act as independent controllers of the information they receive and use it under their own terms. Where consent is required for this reporting, the Merchant is responsible for obtaining it as described in our Data Processing Addendum.

Subprocessors

We use the following third parties to operate the Services: Supabase (database and authentication), Cloudflare (hosting, CDN, security, R2 object storage, email sending), Stripe (payments and merchant payouts), Apple App Store and Google Play (in-app purchase processing for mobile apps), RevenueCat (mobile in-app purchase webhook relay, used only for mobile apps), Paddle, Polar, Shopify, Whop, and WooCommerce (alternative web payment providers and commerce integrations, used only when a Merchant connects one of these providers to an app), and Amazon Web Services (identity verification via Amazon Rekognition and Amazon Textract; ID photos and selfies are processed in real time for the verification check and are not retained by Affiliateo after the verification result is returned). Each subprocessor processes personal information on our behalf under contractual data-protection commitments.

Separately, the following advertising platforms receive information from us as independent controllers rather than as subprocessors, because they process what they receive for their own purposes under their own terms: Meta Platforms (our own advertising measurement, and Merchant conversion reporting), TikTok and Google (Merchant conversion reporting), and Apple (Apple Search Ads attribution for Merchant mobile apps). What each receives is described under "Conversion Reporting to Ad Networks" and "Advertising and Conversion Measurement" above.

Do-Not-Track and Global Privacy Control

Global Privacy Control (GPC). We honor it. If your browser or extension sends a GPC signal, our advertising pixel is not loaded on that visit and no advertising identifier is shared from that page. Some browsers send this signal by default; others expose it as a setting. No action beyond enabling it is required, and you do not need to be signed in or to contact us. Because the signal is sent by the browser rather than stored against your account, it applies per browser and per device.

Do Not Track (DNT). We do not respond to the older "Do Not Track" header. We state that plainly rather than implying otherwise: DNT was never given an agreed meaning that a site can act on consistently, and it has been superseded by GPC.

Visitors in the EEA and the UK are asked for consent before any advertising cookie is set, which is a stricter standard than GPC. Where both apply, the consent banner governs and nothing non-essential loads until you choose. You can revisit that choice at any time from the cookie settings button in the corner of the page, and you can exercise the rights described in Section 7 by contacting us directly.

Managing Preferences. You can manage your preferences for cookies by adjusting your browser settings. You can also opt out of targeted advertising from participating third-party ad networks at aboutads.info/choices (U.S.) or youronlinechoices.eu (EU). Please note that opting out does not mean you will no longer see ads. You may continue to receive generic or contextual ads.

7. Your Privacy Choices

Users have several choices regarding their personal information and privacy preferences:

Marketing Communications

We may send periodic promotional emails to you. You may opt out by following the unsubscribe instructions in the email or by emailing us at support@affiliateo.com. Please note that it may take up to ten (10) business days to process opt-out requests. If you opt out of promotional emails, we may still send you emails about your account or any Services you have requested.

Cookie and Targeted Advertising

You can manage your preferences for cookies on our Site and Services by adjusting your browser settings or other preferences as described in Section 6 above.

Accessing and Updating Your Account Information

If you register for an account with us, you can access and update certain information we have relating to your account within your account profile settings. Please note that we may maintain copies of information that you have updated, modified, or deleted, as permitted, in our business records and in the normal course of our business operations.

Residents of certain jurisdictions may have additional rights, as described in Section 15 below. For more information about our privacy practices and your privacy choices, you may contact us as set forth in the "Contact Us" section below.

8. Information About Children

Our Services are not intended for minors under the age of 18. We do not knowingly or specifically collect information about minors under the age of 18. If you believe we have unintentionally collected such information, please notify us at support@affiliateo.com and we will take action as necessary to securely delete such information.

9. Third-Party Sites and Services

Our Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

10. International Transfers

Affiliateo is headquartered in the United States and has service providers in the United States and throughout the world. As such, we and our service providers may transfer your personal information to, or access it in, jurisdictions (including the United States) that may not provide equivalent levels of data protection as your home jurisdiction. We will take steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through appropriate written data processing terms and/or data transfer agreements.

If you are in the European Economic Area, and we process your personal information in a jurisdiction that the European Commission has deemed to not provide an adequate level of data protection, we will implement measures to adequately protect your personal information, such as putting in place standard contractual clauses approved by the European Commission. You may request details of these mechanisms by contacting us.

11. Security

We have implemented safeguards and technical measures to protect the personal information that we have under our control from unauthorized access, use, or disclosure. However, no data security measures can guarantee 100% security. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared device.

12. Retention

As a general rule, we retain your personal information for as long as necessary to fulfill the purposes for which it was collected and is used by us, as stated in this Policy. Further, to the extent permitted by applicable law, we will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records, and enforce our agreements.

App and Program Data

Retained as long as your account is active or as needed to provide services.

Account Data

Retained while your account is open. When you delete your account through the Site, we immediately remove your profile from public view: your display name, biography, avatar, and cover image stop being shown, and your username is replaced. We currently keep a copy of those profile fields, and your login record and email address, so that the account can be restored if you ask us to. If you want your account and that residual copy erased outright rather than deactivated, contact us using the details in Section 14 and we will carry out a full erasure, subject only to records we must keep by law (see "Transaction Records").

Usage Logs

May be retained for up to 90 days for analytics, troubleshooting, and security purposes.

Visitor Tracking Data

Affiliate click records are retained for 90 days. The IP address on those records is erased after 7 days, which is the end of the window in which it is used to attribute a visit; the rest of the record (referrer, user agent, country, timing) is kept for the remaining 90-day reporting period. Pageview and session events are retained for 90 days. Web visitor profiles are retained for 180 days to support the affiliate attribution window. These windows are enforced automatically by a job that runs every day.

Mobile app visitor records are deleted after 90 days unless the record has been matched to an affiliate click or carries an advertising source. Records in either of those two categories are retained for the life of the app, so that a later renewal, refund, or advertising conversion can still be attributed correctly. Checkout view records and advertising conversion records are also retained for the life of the app for the same reason. Aggregate daily click totals, which contain no device or network identifiers, are kept indefinitely for reporting.

Transaction Records

Retained as required by tax and accounting regulations (typically 7 years).

13. Changes to Our Privacy Policy

This Policy is current as of the Effective Date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Site. If we make any changes that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavor to provide you with notice in advance of such change, such as via email or prominent notice on the Site.

14. Contact Us

If you have questions or concerns regarding the way in which your personal information is being processed or this Policy, please contact us:

NGSMEDIA LLC

312 W 2nd St 4192
Casper, WY 82601

Email: support@affiliateo.com
Website: affiliateo.com

15. Additional Information for Certain Jurisdictions

Residents of certain jurisdictions have additional rights under applicable privacy laws, as described in this section.

A. European Union/EEA and UK Residents

Subject to the conditions set out in applicable law, data subjects in the EU/EEA and UK have the following rights with regards to our processing of their personal information:

  • •Right of access. To confirm whether we are processing your personal information and to receive a copy of that personal information.
  • •Right to correction. To request that we correct any personal information we hold about you that is inaccurate or incomplete.
  • •Right of erasure. To request that we delete your personal information under certain circumstances, such as where we no longer need it or if you withdraw your consent.
  • •Right of restriction. To request that we restrict the processing of your personal information under certain circumstances.
  • •Right to data portability. To receive a copy of personal information in a structured, commonly used, and machine-readable format.
  • •Right to object. To object to our processing of your personal information on the basis of our legitimate interests.
  • •Right to object to marketing. To request that we stop processing your personal information for marketing purposes.
  • •Right to withdraw consent. Where you have consented, to withdraw your consent to our processing of your personal information, without affecting the lawfulness of our processing prior to the withdrawal.
  • •Right to lodge a complaint. To lodge a complaint with a supervisory authority if you believe our processing infringes the law.

Please contact us as set out in the Contact Us section to exercise one of these rights.

B. U.S. Residents

Residents of certain U.S. states (including Virginia, Colorado, Connecticut, and Utah) have additional privacy rights under applicable privacy laws, subject to certain limitations, including:

  • •Right to correction. To correct inaccurate personal information.
  • •Right to deletion. To delete personal information provided to or obtained by us.
  • •Right of access. To confirm whether we are processing personal information and to obtain a copy in a portable format.
  • •Rights to opt-out. To opt out of the sale of personal information, targeted advertising, and processing for purposes of decisions that produce legal or similarly significant effects.
  • •Right to appeal. To appeal our denial of your privacy request by contacting us at support@affiliateo.com.

You may submit a request to exercise your privacy rights by contacting us at support@affiliateo.com. We will take steps to verify your request by matching the information provided with the information we have in our records.

C. CCPA Privacy Notice for California Residents

Below, we provide information modelled on California privacy law, including the California Consumer Privacy Act and its implementing regulations, each as amended ("CCPA").

Whether the CCPA applies to us

The CCPA applies to a company only if it meets at least one statutory threshold: annual gross revenue above the inflation-adjusted figure in Section 1798.140(d), or buying, selling, or sharing the personal information of 100,000 or more California residents or households per year, or deriving 50% or more of its revenue from selling or sharing personal information. Affiliateo does not currently meet any of these thresholds, and we are therefore not currently a "business" as the CCPA defines it. We describe the rights below and honor them anyway, as a matter of policy rather than because we are compelled to. If we later cross a threshold, we will update this Policy and put the mechanisms the statute requires in place, including a "Do Not Sell or Share My Personal Information" link and recognition of opt-out preference signals.

Categories of Personal Information We Collect

Our collection, use, and disclosure of personal information about a California resident will vary depending upon the circumstances. Generally, we may collect the following categories of personal information as defined by the CCPA:

Identifiers: Name, username, email address, phone number, IP address, device ID, and other unique identifiers.

Customer Records: Account and profile information, billing and payment information, contact information, and communications preferences.

Commercial Information: Records of products or services purchased, obtained, or considered, purchasing histories, and affiliate program activity.

Usage Data: Browsing history, clickstream data, search history, access logs, interactions with our Services and marketing emails, and other usage data.

Location Data: General location information about a particular individual or device.

Inferences: Inferences drawn from other personal information to create a profile reflecting your preferences, characteristics, and behavior related to our Services.

Biometric Information: If, and only if, you choose to complete optional identity verification: a photograph of your face and of your identity document, used for a one-to-one facial comparison. These images are processed transiently and are not retained. See Section 3.C.

Sensitive Personal Information: Government identifiers and account access credentials, collected only where needed to verify your identity, to onboard you for payouts, or to secure your account. We use sensitive personal information solely for those purposes, which are among the uses exempted under Section 1798.121 and 11 CCR Section 7027, and never to infer characteristics about you.

Sales and Sharing

We have never sold personal information, in the ordinary sense or as the CCPA defines it. We do not disclose personal information to anyone in exchange for money or other valuable consideration, and we do not upload customer lists, email addresses, or contact records to any advertising platform.

We do, however, engage in what the CCPA calls "sharing", meaning disclosure to a third party for cross-context behavioral advertising, even though no money changes hands. Specifically: our own Meta Pixel and Meta Conversions API report your activity on affiliateo.com to Meta Platforms so we can measure our advertising, and, where a Merchant has connected an advertising account, we report that Merchant's sales to Meta, TikTok, or Google. The categories involved are Identifiers (a randomly generated visitor ID, ad-click identifiers, and, for account signups, a hashed email address), Commercial Information (purchase amount, currency, and product name), and Usage Data (pages viewed and browser user agent). Section 6 describes exactly what each platform receives.

We do not sell or share Sensitive Personal Information or Biometric Information, and we do not sell or share any personal information about individuals we know to be under sixteen (16) years old. To opt out of the sharing described above, email support@affiliateo.com with the subject line "Do Not Share" and we will suppress it for your account. As noted above, we do not currently detect the Global Privacy Control signal, so please use the email route.

California Residents' Rights

California residents have the following rights under the CCPA (subject to certain limitations):

  • •Opt-out of sales and sharing. The right to opt-out of our sale and sharing of personal information.
  • •Delete. The right to request deletion of personal information we have collected.
  • •Know/access. The right to request and receive a copy of the specific pieces of personal information we have collected, and information about how we have handled your personal information.
  • •Correct. The right to request correction of inaccurate personal information.
  • •Non-discrimination. Not to be subject to discriminatory treatment for exercising your CCPA rights.

Submitting CCPA Requests

California residents may submit a verifiable request to exercise their CCPA rights by emailing support@affiliateo.com or by writing to NGSMEDIA LLC, 312 W 2nd St 4192, Casper, WY 82601. When you submit a request, we will take steps to verify your request by matching the information you provide with the information we have in our records. Authorized agents may initiate a request on behalf of another individual by contacting us in writing and providing proof of their authorization.