1. Scope and Operational Purpose

PartnerLinks is an attribution, referral, creator commission, and operational accounting platform designed to help merchants identify referral-driven conversions, calculate creator earnings, reconcile refunds and reversals, and maintain operational attribution records.

PartnerLinks is not designed to function as a consumer advertising network, data brokerage platform, behavioral profiling platform, customer resale marketplace, or unrestricted customer analytics provider.

PartnerLinks attempts to follow a least-privilege and minimum-necessary-data operational model.

2. Information We Collect

2.1 Information Provided by Brands and Store Owners

When a brand, merchant, or store owner installs or connects PartnerLinks, we may collect business or store name, store domain, account email address, authentication and authorization metadata, creator or referral configuration settings, commission configuration settings, payout configuration metadata, support communications, billing or subscription metadata, operational preferences, and installation or session metadata.

2.2 Information Provided by Creators or Affiliates

When creators or affiliates use PartnerLinks, we may collect account email address, referral identifiers, creator usernames or handles, creator dashboard activity, payout status metadata, referral program relationships, support communications, and attribution-related operational data.

2.3 Shopify and Commerce Platform Data

When a merchant connects Shopify or another commerce platform, PartnerLinks may process operational commerce data necessary for attribution and commission accounting. This may include order identifiers, order timestamps, order status, line item metadata, product identifiers, product pricing, discount information, refund and reversal events, order subtotal and total values, referral metadata, store metadata, and limited order-associated metadata available through Shopify order records required to resolve attribution and accounting events.

PartnerLinks uses a minimum-necessary-data approach and does not intentionally request or retain unnecessary customer information.

2.4 Referral and Attribution Data

PartnerLinks processes attribution-related information such as referral clicks, attribution identifiers, referral route metadata, creator invite lineage, campaign metadata, timestamps, attribution resolution events, and referral conversion relationships.

2.5 Device, Browser, and Technical Data

We may automatically collect technical and operational information such as IP address, browser type, device type, operating system, session metadata, cookie or session identifiers, performance diagnostics, and security logs. This information is used for operational integrity, fraud prevention, security monitoring, debugging, and service reliability.

3. Why We Collect Information

PartnerLinks collects and processes information for narrowly scoped operational purposes, including creator attribution, commission calculation and accounting, refund and reversal reconciliation, platform operations, security, and fraud prevention.

We use referral and commerce event data to determine which creator or referral source generated a conversion, resolve attribution chains, prevent duplicate attribution, maintain deterministic attribution records, and support creator program relationships.

We process operational order and refund information to calculate creator commissions, calculate referral program activity, process commission reversals, reconcile attribution events, maintain accounting integrity, and support settlement workflows.

We may process technical and attribution-related data to detect fraudulent referrals, prevent abuse, monitor suspicious activity, validate webhook authenticity, enforce platform rules, and maintain platform integrity.

4. How Shopify Order Data Is Used

PartnerLinks uses Shopify order and refund data for operational attribution and commission accounting purposes. Specifically, Shopify data may be used to resolve creator attribution, determine commission eligibility, calculate creator and referral earnings, reconcile refunds and reversals, prevent duplicate conversions, support deterministic accounting, and maintain operational reporting.

• PartnerLinks does not sell Shopify customer data.
• PartnerLinks does not use Shopify order data to build unrelated advertising profiles or behavioral marketing datasets.
• PartnerLinks does not intentionally expose unnecessary customer information to creators or affiliates.
• PartnerLinks attempts to minimize retained customer-related information wherever operationally possible.

5. Cookies, Sessions, and Tracking Technologies

PartnerLinks may use cookies, local storage, session identifiers, and related technologies to maintain authentication sessions, preserve onboarding state, support referral attribution, improve reliability, prevent abuse, maintain user preferences, and support operational functionality.

Some attribution-related functionality may require cookies or session identifiers to correctly resolve referral events. Users may disable certain cookies through browser settings, although some functionality may become unavailable.

6. Data Retention

PartnerLinks retains information only as long as reasonably necessary for attribution integrity, operational reporting, commission accounting, fraud prevention, legal obligations, dispute resolution, platform security, and business operations.

Retention periods may vary depending on operational requirements, legal obligations, platform requirements, unresolved disputes, fraud investigations, and accounting requirements. When operationally appropriate, information may be deleted, anonymized, aggregated, or archived.

7. Data Deletion and User Requests

Users may request account access, data correction, data deletion, or operational information regarding stored account data. Certain information may be retained where necessary for legal compliance, fraud prevention, accounting integrity, dispute resolution, security investigations, or legitimate business operations.

Requests may be submitted using the contact information listed below.

8. Data Sharing

PartnerLinks does not sell personal information. PartnerLinks may share limited operational information with integrated commerce platforms, payment providers, infrastructure providers, analytics providers, fraud prevention providers, support providers, legal or compliance authorities when required, and operational service providers necessary to operate the platform.

Information shared is limited to what is reasonably necessary for operational functionality.

9. Security, Access Controls, and Operational Safeguards

PartnerLinks uses operational, administrative, and technical safeguards designed to protect platform integrity, customer information, account security, attribution accuracy, and operational reliability.

These safeguards and controls may include HTTPS/TLS encrypted transport, authentication and session controls, Shopify webhook HMAC verification, scoped operational and administrative access, audit logging and operational traceability, replay and idempotency protections, environment isolation, infrastructure monitoring and alerting, credential and secret-management controls, operational change controls, and least-privilege infrastructure access.

No internet-based system can guarantee absolute security. However, PartnerLinks attempts to follow industry-standard operational security practices reasonably designed for attribution infrastructure, creator commission accounting systems, and commerce platform integrations.

10. Data Minimization and Customer Privacy Commitments

PartnerLinks is designed around a minimum-necessary-data operational model. PartnerLinks attempts to limit access, processing, retention, and exposure of customer-related information to only what is reasonably necessary to resolve attribution events, calculate creator commissions, reconcile refunds and reversals, prevent fraud and abuse, maintain accounting integrity, and support operational troubleshooting and reconciliation.

• PartnerLinks does not intentionally sell customer personal information.
• PartnerLinks does not build unrelated behavioral advertising profiles.
• PartnerLinks does not expose unnecessary customer data to creators or affiliates.
• PartnerLinks does not store full payment card information or Shopify customer passwords.
• Creators and affiliates are not provided unrestricted access to Shopify customer records.

11. Third-Party Services

PartnerLinks may integrate with third-party services and infrastructure providers including Shopify, Stripe, Supabase, Railway, authentication providers, infrastructure providers, analytics providers, and communication providers.

Use of third-party platforms may also be governed by those providers' own privacy policies and terms. PartnerLinks is not responsible for the independent privacy practices of third-party platforms.

12. Operational Integrity and Financial Controls

PartnerLinks processes attribution and commission-related events using deterministic operational workflows designed to reduce duplicate attribution, replay inconsistencies, and accounting errors.

Operational controls may include idempotent event processing, attribution replay protections, deterministic commission propagation, refund and reversal reconciliation, audit-oriented operator tooling, settlement verification workflows, controlled operational mutation paths, and environment-scoped testing and sandbox tooling.

Sandbox, replay, or testing systems are not treated as production payout authorization systems. PartnerLinks may delay, restrict, reverse, investigate, or prevent creator earnings, attribution events, referral propagation, settlement eligibility, or payout-related actions where fraud, abuse, operational inconsistency, refund activity, suspicious attribution behavior, or platform policy violations are suspected.

13. Merchant and Creator Visibility Controls

PartnerLinks attempts to limit visibility of operational data based on account role and operational necessity. Creators and affiliates are not intended to receive unrestricted access to Shopify customer records, full customer order histories, payment credentials, administrative merchant controls, or sensitive operational infrastructure data.

Operational visibility may be restricted based on account ownership, merchant authorization, platform role, attribution relationship, fraud prevention requirements, and operational security requirements.

14. Children's Privacy

PartnerLinks is not directed toward children under the age of 13. We do not knowingly collect personal information from children. If we become aware that information was collected from a child in violation of applicable law, we may take steps to delete the information.

15. International Users

PartnerLinks may process information in jurisdictions different from a user's home jurisdiction. By using PartnerLinks, users acknowledge that information may be transferred, processed, and stored in jurisdictions where data protection laws may differ.

16. Changes to This Privacy Policy

PartnerLinks may update this Privacy Policy from time to time. When material changes are made, we may update the effective date and take reasonable steps to notify users where appropriate. Continued use of the platform after updates may constitute acceptance of the revised Privacy Policy.

17. Merchant Uninstall and Data Handling

When a merchant uninstalls PartnerLinks from Shopify or disconnects a commerce platform integration, PartnerLinks may begin operational offboarding procedures and platform disconnect workflows.

PartnerLinks may continue processing limited operational events reasonably necessary to reconcile refunds and reversals, prevent duplicate payouts, complete operational accounting workflows, investigate fraud or abuse, satisfy legal or platform obligations, and maintain attribution integrity.

Depending on operational, accounting, fraud prevention, dispute resolution, and legal requirements, certain attribution, commission, settlement, refund, audit, or reconciliation records may be retained for a limited period of time. Where operationally appropriate, data may be deleted, anonymized, aggregated, or archived.

18. Compliance and Platform Obligations

PartnerLinks is intended to operate in compliance with applicable platform requirements, operational security standards, data handling obligations, and commerce-platform integration requirements.

PartnerLinks may maintain policies, procedures, and operational controls related to Shopify platform requirements, data minimization, attribution integrity, operational auditability, fraud prevention, webhook authenticity verification, replay and idempotency protections, account and session security, refund and reversal reconciliation, and operational access controls.

PartnerLinks attempts to follow a least-privilege operational model and only requests access reasonably necessary to provide attribution, referral tracking, commission accounting, refund reconciliation, fraud prevention, operational auditing, and related commerce-platform services.