Privacy Policy

1. Introduction

All-in-one Affiliate ("we", "us", or "our") operates the website at allinoneaffiliate.com and the affiliate-management platform available at app.allinoneaffiliate.com (collectively, the "Service"). We are headquartered in Las Vegas, Nevada, United States.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

2. Information we collect

Information you provide

• Account data — name, email, password, and organization or affiliate profile details you provide when you sign up.
• Program data — campaigns, offers, commission rates, tracking links, and other content merchants and affiliates create in the Service.
• Payout data — bank account or card details, tax information, and verification documents you submit through our payments provider (Stripe). We never see or store your full payment credentials.
• Communications — messages you send us through email, support tickets, or contact forms.

Information collected automatically

• Usage data — pages viewed, actions taken in the dashboard, timestamps, and similar event data.
• Device data — IP address, browser type, operating system, device identifiers, and approximate location derived from your IP.
• Tracking data — when a visitor clicks an affiliate link, we record the click, the referring page, and the resulting conversion (if any) to attribute the sale.

Information from third parties

• Connected platforms — when a merchant connects Eventbrite, Luma, Shopify, or another supported platform, we receive store, order, and customer data necessary to attribute conversions and calculate commissions.
• Identity provider — we use Keycloak for authentication. When you sign in, we receive your user identifier and basic profile details.
• Stripe — we receive transaction status, payout status, and limited account-verification metadata.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Attribute clicks and conversions to the correct affiliate;
• Calculate, approve, and pay commissions;
• Authenticate users and protect accounts from fraud and abuse;
• Communicate with you about your account, transactions, and product updates;
• Improve the Service, troubleshoot issues, and develop new features;
• Comply with legal obligations, including tax and anti-money-laundering requirements.

4. How we share information

We do not sell your personal information. We share it only as follows:

• Between platform participants — merchants can see the affiliates that joined their program and the conversions attributed to them; affiliates can see the offers they promote and their own earnings.
• Service providers — cloud hosting (AWS), authentication (Keycloak), payments (Stripe), analytics, and email providers that process data on our behalf under written contracts.
• Connected platforms — we exchange order and tracking data with the platforms you connect (Eventbrite, Luma, Shopify, etc.) to make attribution work.
• Legal compliance — when required by law, subpoena, or to protect the rights, property, or safety of users or the public.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies & tracking

We use cookies and similar technologies (local storage, session storage, URL parameters) to keep you signed in, remember your preferences, and attribute affiliate clicks to the correct partner. Where third-party cookies are unavailable, we fall back to first-party identifiers passed through URL parameters and stored briefly to complete the attribution.

You can control cookies through your browser settings. Blocking essential cookies may break parts of the Service.

6. Payments & Stripe

All payment processing and payouts run on Stripe, including Stripe Connect for affiliate payouts. Stripe is an independent controller of payment data and operates under its own Privacy Policy. We receive only the metadata we need to display transaction status and reconcile payouts.

7. Data retention

We keep account and program data for as long as your account is active and for a reasonable period after closure to comply with legal, tax, and accounting obligations. Conversion and payout records are retained for at least seven (7) years to satisfy U.S. tax requirements. Aggregated, de-identified data may be kept indefinitely.

8. Security

We use industry-standard safeguards — encryption in transit (TLS), encryption at rest for sensitive fields, role-based access controls, audit logging, and regular security reviews — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your information (subject to legal retention obligations);
• Object to or restrict certain processing;
• Receive a portable copy of your information;
• Opt out of marketing communications at any time.

California residents. Under the CCPA/CPRA, you have additional rights including the right to know, the right to delete, the right to correct, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

EEA / UK residents. Where the GDPR or UK GDPR applies, our legal bases for processing include contract performance, legitimate interests (running and improving the Service), consent (where required, e.g. marketing), and legal obligation.

To exercise any of these rights, email us at admin@allinoneaffiliate.com. We will respond within the timeframes required by applicable law.

10. Children

The Service is not directed to children under 16 and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. International users

We are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date above. Material changes will be communicated to account holders by email or in-app notice.

13. Contact us

If you have questions or concerns about this Privacy Policy, please contact our privacy team: