Last updated: 2 August 2026
When you create an account we collect your email address and any profile details you provide (such as your name, timezone and affiliate IDs). When you connect a third-party account — Facebook/Instagram, TikTok, an email provider such as Resend, SendGrid, Mailgun or your own SMTP server, or an affiliate network — we store the account identifier and the credentials needed to act on your behalf. Those credentials are stored in encrypted secret storage and are never shown back to you in plaintext. We also record usage data such as jobs run, content generated, emails sent, and posts or ad campaigns published, for billing and support purposes.
We use your data to operate the Service: authenticate you, generate campaign content, publish to your connected accounts when you request it, send the emails you schedule, launch ad campaigns you explicitly activate, serve your funnel and blog pages, process payments, and provide support. We do not sell your personal data.
Your funnel pages collect contact details from your own visitors (name, email, plus any custom fields you add, along with the IP address and user agent of the submission). We store that data on your behalf so you can view, tag, export and email it — we do not use it for our own purposes, and we do not sell or share it. You are the controller of that data: obtaining consent, honouring deletion requests, and complying with GDPR, CCPA, CAN-SPAM, CASL and any other law that applies to your audience is your responsibility, not ours. Every email sent through the Service carries an unsubscribe link that cannot be removed, and unsubscribing suppresses that contact across all of your sequences.
We share the minimum data necessary with the following processors: Stripe (payment processing), Supabase (database, authentication and file storage), Vercel (application and page hosting, including your custom domains), Anthropic (content generation — product and sales-page text is sent to generate your campaign kits), kie.ai and Google (Gemini) for AI image and video generation, and — only for accounts you choose to connect — Meta/Facebook, TikTok, and your chosen email provider (Resend, SendGrid, Mailgun or your own SMTP server). [Add or remove processors to match your actual infrastructure before publishing.]
We retain account, campaign and contact data for as long as your account is active. When you disconnect a third-party account, the stored credentials for that connection are deleted. You may request deletion of your account and associated data at any time by contacting us.
Access tokens and other sensitive credentials are stored using encrypted secret storage, not plaintext database columns, and are only ever retrieved by trusted server-side code to perform the action you requested (e.g. publishing a post).
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at support@affiliateoffersecrets.com. We delete a contact record, and redact the address from our send logs, on request.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Privacy Policy can be sent to support@affiliateoffersecrets.com.