Your privacy.
Your control.
Our commitment.
At Partneralytics, safeguarding your personal information isn't simply a legal requirement, it's a strong promise to the publishers, advertisers, and partners who depend on us to manage their data responsibly.
Jump to the section you need.
Information We Collect
We gather information to operate the Partneralytics platform and deliver partnership management services. We are thoughtful about what we collect - if we don't need something to run our service, we don't collect it.
We collect account details when you sign up, technical data to track conversions, usage data to improve the platform, and payment information to process commissions. We do not collect sensitive personal categories (health, political views, biometrics) unless you explicitly provide them for a specific business purpose.
Information you submit directly
| Data Type | Examples | Purpose | Basis |
|---|---|---|---|
| Account identity | Name, email, company, role | Account creation and authentication | Contract |
| Publisher profile | Website URLs, audience demographics, content categories | Partner matching and program eligibility | Contract |
| Advertiser details | Business name, industry, product catalogue, brand assets | Program setup and publisher discovery | Contract |
| Payment information | Bank details, PayPal, tax ID (W-8/W-9), billing address | Commission processing and tax compliance | Legal obligation |
| Support communications | Messages, attachments, tickets | Customer support and dispute resolution | Legitimate interest |
| Verification documents | Government ID, business registration (where required) | Identity verification for high-value payouts | Legal obligation |
Data gathered automatically
When you use Partneralytics, we automatically collect technical data required to deliver the service - particularly the tracking and attribution infrastructure that is the core of what we do.
| Data Type | Details | Why We Need It |
|---|---|---|
| Tracking events | Clicks, conversions, referral source, device type, browser | Accurate attribution and commission calculation |
| Log data | IP address (truncated), timestamp, page visited, actions taken | Security monitoring, fraud detection, and debugging |
| Platform usage | Dashboard features used, reports generated, partner actions | Product improvement and account health monitoring |
| Device identifiers | Device fingerprint, screen resolution, installed fonts (hashed) | Fraud detection — we do not use this for advertising |
We truncate the last octet of IPv4 addresses (and the last 80 bits of IPv6 addresses) before storage. Full IP addresses are held in memory for fraud detection processing only - they are never written to persistent storage in full.
How We Use Your Data
Every use of your data maps to a defined purpose and a lawful basis under applicable data protection law. We do not use your data for purposes beyond what is listed below without seeking fresh consent or establishing a new lawful basis.
Providing the Platform
Operating tracking infrastructure, attribution systems, payout processing, fraud detection, and all core partnership management features. Lawful basis: Contract performance.
Analytics & Development
Understanding how features are used so we can fix problems and build better tools. Data is aggregated and anonymised before analysis. Lawful basis: Legitimate interests.
Fraud Protection
Detecting and blocking invalid clicks, fake conversions, and abuse patterns that harm both advertisers and publishers on the network. Lawful basis: Legitimate interests.
Legal Requirements
Meeting tax reporting obligations, responding to lawful requests, and maintaining records required by applicable financial regulation. Lawful basis: Legal obligation.
Platform Communications
Sending payout notifications, program updates, security alerts, and platform announcements. Lawful basis: Contract performance / legitimate interests.
Marketing (with consent)
Sending newsletters, product updates, and partnership insights — only to users who have explicitly opted in. You can withdraw consent at any time. Lawful basis: Consent.
We will never sell your personal data, use it to build advertising profiles for third-party platforms, share it with data brokers, or process it for purposes unrelated to operating the Partneralytics platform and the partnership programs you are part of.
Data Lifecycle
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. After the applicable retention period, data is securely deleted or irreversibly anonymised.
When you close your Partneralytics account, we begin deletion of personal data within 30 days. Financial transaction records and tax documentation are retained for the statutory period required in your jurisdiction (typically 7 years). Anonymised, aggregated performance data that cannot identify you may be retained indefinitely for platform benchmarking.
Your Data Rights
Based on where you live, you have several rights concerning your personal data. We respect these rights regardless of jurisdiction - we apply the most comprehensive set to all users, not the minimum required in each country.
Access Your Data
Ask for a copy of all personal data we keep about you, including how it's used, who it's shared with, and how long it will be kept. Fulfilled within 30 days.
Right to Data Correction
Ask us to correct inaccurate personal data. You can update most account data directly via your dashboard settings without contacting us.
Right to Deletion
Request deletion of personal data where we no longer have a lawful basis for processing. Financial and legal records may be exempt from erasure during their statutory retention period.
Right to Limit Processing
Ask us to pause processing of your data while a dispute is resolved, rather than deleting it immediately.
Right to Data Portability
Receive your personal data in a structured, machine-readable format (JSON or CSV) so you can transfer it to another service.
Right to Object
Object to processing based on legitimate interests, including direct marketing. We will cease processing unless we can demonstrate compelling grounds that override your interests.
Submit a request via your account dashboard under Settings → Privacy, or email privacy@partneralytics.com. We respond to all requests within 30 days. For complex or high-volume requests, we may extend this by up to two additional months - we will notify you within the initial 30-day window if this applies.
California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know about the categories of personal information sold or disclosed (we do not sell personal information), the right to opt out of sale (not applicable - we do not sell), and the right to non-discrimination for exercising your CCPA rights.
Cookies & Tracking
Partneralytics uses cookies and similar tracking technologies to operate the platform, power conversion attribution, detect fraud, and (with your consent) improve the product. Our use of tracking technology is central to what the platform does - without cookies and pixels, we cannot attribute partner-driven conversions.
Security Controls
We invest significantly in keeping your data fully secure. Our security programme is independently audited and verified - not self-reported.
Encryption
AES-256 encryption at rest for all stored data. TLS 1.3 for all data in transit. Encryption keys managed by AWS KMS with automated rotation.
SOC 2 Type II
Annual audit by an independent third party covering security, availability, and confidentiality. Reports available to enterprise customers under NDA.
Access Security
Role-based access with least-privilege principles. All internal access to production data is logged, reviewed monthly, and requires multi-factor authentication.
Security Testing
Annual third-party penetration tests by certified security firms. Critical findings must be remediated within 72 hours; high findings within 14 days.
Incident Notification
In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware — as required by GDPR Article 33.
Vulnerability Disclosure
We operate a responsible disclosure programme. Security researchers who find vulnerabilities can report them at security@partneralytics.com. We do not pursue legal action against good-faith researchers.
Privacy Contacts & Data Officer
If you have any questions about this policy, want to exercise a privacy right, or need to report a data protection concern, the right contacts are below. We aim to acknowledge all privacy enquiries within one business day.
Data Protection Officer
Our DPO is available for all GDPR-related enquiries, right exercises, and supervisory authority communications.
dpo@Partneralytics.comPrivacy Team
General privacy questions, data requests, and complaints about how we handle your personal information.
privacy@partneralytics.comRegistered Address
Partneralytics Inc.
150 Partnership Drive, Suite 800
San Francisco, CA 94107
United States
If you are an EEA resident and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection supervisory authority. For users in the Republic of Ireland (our EU establishment), the lead supervisory authority is the Data Protection Commission (dataprotection.ie).