Last updated 29 June 2026
Account data you provide: name, work email, company, and billing details processed by our payment provider.
Program data you create: campaigns, partners, referrals, commissions, and payouts.
Tracking data from your integration: referral tokens, click events, and the sale events your backend reports. We do not receive your end users' payment card details.
To operate the service: attribute referrals, calculate commissions, process payouts, and detect fraud.
To communicate with you about your account, security, and product changes.
To improve the product. We do not sell your data.
With processors that run the service on our behalf, such as our payment provider and infrastructure hosts, under contract.
When required by law, or to protect the rights and safety of users and the public.
API keys and secrets are stored hashed. Access is restricted and audit-logged.
We retain data for as long as your account is active and as needed to meet legal obligations, then delete or anonymise it.
You can access, correct, export, or delete your data. Email privacy@refliqai.com and we will respond within the timelines required by applicable law.
Questions about this policy: privacy@refliqai.com.