Privacy, explained in operational terms.

• Brand and creator identity, contact, account, and program information.
• Approved creator codes, commercial terms, order attribution, refund adjustments, and payout records.
• Shopify store identifiers, installation state, required access scopes, and encrypted access credentials.
• Security, audit, webhook-delivery, and support records needed to operate and protect the service.
• Bank details submitted for payout review, stored in encrypted and masked form with role-restricted access.
• Original order-import CSV files uploaded by brands, including customer details present in those files.

We use this information to authenticate users, operate creator programs, synchronize discounts, attribute eligible orders, calculate and adjust commissions, record external payouts, answer support requests, prevent duplicate or abusive activity, and meet legal obligations.

Affiliate1A does not sell personal information. We do not use order or bank information for unrelated advertising profiles.

For connected stores, Affiliate1A requests only the Shopify access scopes needed for supported discount and order workflows. Order ingestion is limited to attribution and commission operations. Shopify privacy and redaction webhooks are handled separately from ordinary order processing.

Test orders are marked as test data and do not trigger ordinary transactional notifications to real recipients.

We share information only with infrastructure and service providers used to host, secure, monitor, or deliver Affiliate1A, with the connected Shopify merchant as required for its program, or when required by law. Providers receive only the access needed for their function.

We keep original order-import files privately so brand Owners and Admins and Affiliate1A support can recover or investigate an upload, including one that failed validation. Customer contact fields are not copied into normalized order records. Files containing deleted customer data are removed through Shopify privacy workflows; a shop deletion removes all saved imports for that shop.

We retain program and financial records while an account is active and for a reasonable period afterward where needed for reconciliation, security, dispute handling, or legal compliance. Shopify deletion and redaction requests are processed through dedicated workflows. Encrypted credentials and sensitive exports follow shorter operational retention where possible.

When you connect Instagram, we store your account identifiers, username, encrypted access token and its expiry, your automation settings, and delivery records. We use comment notifications to match the keywords you choose and send your requested message and share link through Meta. We do not retain the text of incoming comments or read your inbox for this feature.

Delivery records are kept for 30 days. Disconnect Instagram in your creator dashboard to remove your connection, credentials, automations and delivery history and to stop comment notifications. Remove Affiliate1A in Instagram’s Apps and Websites settings to revoke permissions. We also process Meta’s signed deauthorization and data deletion requests. Messages already sent remain in Instagram; messages already being sent may finish. Deletion confirmations expose only completion. We keep an internal hashed account reference with the confirmation for 30 days to prevent a connection already in progress from restoring deleted data.

Google Analytics helps us understand page visits and actions such as signup requests, copying a creator code, and sharing a storefront. We send fixed page labels and limited campaign information, not names, email addresses, form contents, codes, or full page URLs. We do not enable advertising features or session recording.

Analytics runs automatically on supported pages and uses Google Analytics cookies. Global Privacy Control and Do Not Track keep analytics off and remove our Google Analytics cookies. Essential account and security functions continue to work.

You may ask to access, correct, export, or delete personal information, subject to identity verification and records we must retain. Brand administrators can also pause creator codes and disconnect supported integrations through the product.

Send privacy requests to hello@affiliate1a.com. Include the relevant brand handle and the email used for Affiliate1A, but do not send passwords or full bank details.

We may update this policy as the early-access product and applicable law evolve. Material changes will be reflected on this page with a revised update date.