Privacy Policy

This template covers the essentials of a SaaS privacy policy but is not legal advice — have it reviewed by counsel familiar with your jurisdiction (GDPR, CCPA, etc.) before relying on it in production.

1. Who we are

SmoothProfit ("we", "us") operates a multi-tenant affiliate and referral marketing platform used by agencies ("Agencies") to run affiliate programs ("Programs") for their own brands, and by the partners who join those programs ("Affiliates").

2. Information we collect

• Account data: name, email, and password (hashed) when an Agency staff member or Affiliate signs up.
• Program & commission data: program configuration, affiliate applications, referral codes, coupon codes, and commission records.
• Tracking data: click telemetry (visitor ID, referrer, UTM parameters, IP-derived country, device type) collected via the smoothprofit.js tracking script or the click/conversion APIs, used solely to attribute sales to the correct Affiliate.
• Payout & tax data: information needed to disburse commissions (e.g. a connected Stripe account), handled primarily by our payment processor rather than stored directly by us.
• Usage data: standard server logs (IP address, user agent, timestamps) for security and abuse prevention.

3. How we use information

• To operate the affiliate tracking, approval, and payout functionality you sign up for.
• To detect and prevent fraud (e.g. self-referrals, click/IP velocity abuse).
• To send transactional notifications (application approved, new sale, payout sent).
• To comply with legal and tax obligations.

4. Cookies

We use a small number of first-party cookies for authentication and referral attribution. See our Cookie Policy for details.

5. Third-party processors

We share the minimum data necessary with the following processors to operate the service:

• Supabase — database, authentication, and file storage.
• Stripe — affiliate payout processing (Stripe Connect) and, where applicable, SaaS billing. We never see or store full card or bank account numbers.
• Resend — transactional email delivery.

6. Data retention

We retain account and commission data for as long as your account is active, and for a reasonable period afterward to satisfy tax, accounting, and dispute-resolution obligations.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. Contact us using the details below to exercise these rights.

8. Children's privacy

SmoothProfit is not directed at, and does not knowingly collect data from, children under 16.

9. Changes to this policy

We'll update the "Last updated" date above whenever this policy changes materially.

10. Contact

Questions about this policy: privacy@smoothprofit.app