At Partneralytics, safeguarding your personal information isn't simply a legal requirement, it's a strong promise to the publishers, advertisers, and partners who depend on us to manage their data responsibly.
We gather information to operate the Partneralytics platform and deliver partnership management services. We are thoughtful about what we collect - if we don't need something to run our service, we don't collect it.
We collect account details when you sign up, technical data to track conversions, usage data to improve the platform, and payment information to process commissions. We do not collect sensitive personal categories (health, political views, biometrics) unless you explicitly provide them for a specific business purpose.
| Data Type | Examples | Purpose | Basis |
|---|---|---|---|
| Account identity | Name, email, company, role | Account creation and authentication | Contract |
| Publisher profile | Website URLs, audience demographics, content categories | Partner matching and program eligibility | Contract |
| Advertiser details | Business name, industry, product catalogue, brand assets | Program setup and publisher discovery | Contract |
| Payment information | Bank details, PayPal, tax ID (W-8/W-9), billing address | Commission processing and tax compliance | Legal obligation |
| Support communications | Messages, attachments, tickets | Customer support and dispute resolution | Legitimate interest |
| Verification documents | Government ID, business registration (where required) | Identity verification for high-value payouts | Legal obligation |
When you use Partneralytics, we automatically collect technical data required to deliver the service - particularly the tracking and attribution infrastructure that is the core of what we do.
| Data Type | Details | Why We Need It |
|---|---|---|
| Tracking events | Clicks, conversions, referral source, device type, browser | Accurate attribution and commission calculation |
| Log data | IP address (truncated), timestamp, page visited, actions taken | Security monitoring, fraud detection, and debugging |
| Platform usage | Dashboard features used, reports generated, partner actions | Product improvement and account health monitoring |
| Device identifiers | Device fingerprint, screen resolution, installed fonts (hashed) | Fraud detection — we do not use this for advertising |
We truncate the last octet of IPv4 addresses (and the last 80 bits of IPv6 addresses) before storage. Full IP addresses are held in memory for fraud detection processing only - they are never written to persistent storage in full.
Every use of your data maps to a defined purpose and a lawful basis under applicable data protection law. We do not use your data for purposes beyond what is listed below without seeking fresh consent or establishing a new lawful basis.
Operating tracking infrastructure, attribution systems, payout processing, fraud detection, and all core partnership management features. Lawful basis: Contract performance.
Understanding how features are used so we can fix problems and build better tools. Data is aggregated and anonymised before analysis. Lawful basis: Legitimate interests.
Detecting and blocking invalid clicks, fake conversions, and abuse patterns that harm both advertisers and publishers on the network. Lawful basis: Legitimate interests.
Meeting tax reporting obligations, responding to lawful requests, and maintaining records required by applicable financial regulation. Lawful basis: Legal obligation.
Sending payout notifications, program updates, security alerts, and platform announcements. Lawful basis: Contract performance / legitimate interests.
Sending newsletters, product updates, and partnership insights — only to users who have explicitly opted in. You can withdraw consent at any time. Lawful basis: Consent.
We will never sell your personal data, use it to build advertising profiles for third-party platforms, share it with data brokers, or process it for purposes unrelated to operating the Partneralytics platform and the partnership programs you are part of.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. After the applicable retention period, data is securely deleted or irreversibly anonymised.
When you close your Partneralytics account, we begin deletion of personal data within 30 days. Financial transaction records and tax documentation are retained for the statutory period required in your jurisdiction (typically 7 years). Anonymised, aggregated performance data that cannot identify you may be retained indefinitely for platform benchmarking.
Based on where you live, you have several rights concerning your personal data. We respect these rights regardless of jurisdiction - we apply the most comprehensive set to all users, not the minimum required in each country.
Ask for a copy of all personal data we keep about you, including how it's used, who it's shared with, and how long it will be kept. Fulfilled within 30 days.
Ask us to correct inaccurate personal data. You can update most account data directly via your dashboard settings without contacting us.
Request deletion of personal data where we no longer have a lawful basis for processing. Financial and legal records may be exempt from erasure during their statutory retention period.
Ask us to pause processing of your data while a dispute is resolved, rather than deleting it immediately.
Receive your personal data in a structured, machine-readable format (JSON or CSV) so you can transfer it to another service.
Object to processing based on legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling grounds that override your interests.
Submit a request via your account dashboard under Settings → Privacy, or email privacy@partneralytics.com. We respond to all requests within 30 days. For complex or high-volume requests, we may extend this by up to two additional months - we will notify you within the initial 30-day window if this applies.
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know about the categories of personal information sold or disclosed (we do not sell personal information), the right to opt out of sale (not applicable - we do not sell), and the right to non-discrimination for exercising your CCPA rights.
Partneralytics uses cookies and similar tracking technologies to operate the platform, power conversion attribution, detect fraud, and (with your consent) improve the product. Our use of tracking technology is central to what the platform does - without cookies and pixels, we cannot attribute partner-driven conversions.
We invest significantly in keeping your data fully secure. Our security programme is independently audited and verified - not self-reported.
AES-256 encryption at rest for all stored data. TLS 1.3 for all data in transit. Encryption keys managed by AWS KMS with automated rotation.
Annual audit by an independent third party covering security, availability, and confidentiality. Reports available to enterprise customers under NDA.
Role-based access with least-privilege principles. All internal access to production data is logged, reviewed monthly, and requires multi-factor authentication.
Annual third-party penetration tests by certified security firms. Critical findings must be remediated within 72 hours; high findings within 14 days.
In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware — as required by GDPR Article 33.
We operate a responsible disclosure programme. Security researchers who find vulnerabilities can report them at security@partneralytics.com. We do not pursue legal action against good-faith researchers.
If you have any questions about this policy, want to exercise a privacy right, or need to report a data protection concern, the right contacts are below. We aim to acknowledge all privacy enquiries within one business day.
Our DPO is available for all GDPR-related enquiries, right exercises, and supervisory authority communications.
dpo@Partneralytics.comGeneral privacy questions, data requests, and complaints about how we handle your personal information.
privacy@partneralytics.comPartneralytics Inc.
150 Partnership Drive, Suite 800
San Francisco, CA 94107
United States
If you are an EEA resident and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection supervisory authority. For users in the Republic of Ireland (our EU establishment), the lead supervisory authority is the Data Protection Commission (dataprotection.ie).