Affiliate Manager — privacy notice
Affiliate Manager is a standalone Stripe-native affiliate program tool, hosted at affilut.com. For this product, sico is the data controller for direct customer accounts; you (the operator running an affiliate program) are the controller for your own affiliates' data once they sign up to your program.
1. Account data we hold
| Role | Data |
|---|---|
| Operator (you, our customer) | email, name, hashed password, billing details, Stripe Connect account ID |
| Affiliate partner | email, display name, payout email, Stripe Connect account ID, attributed clicks and conversions |
| Click + conversion logs | partner ID, link slug, hashed IP, user-agent hash, referrer, country code, charge ID, commission amount |
2. Cookies
The short-link redirect at go.affilut.com/<slug> sets a single first-party attribution cookie scoped to the program domain, with a window configurable by the operator (default 30 days). No third-party tracking is set by Affiliate Manager.
3. Third-party processors used by this app
| Processor | Why | What flows out |
|---|---|---|
| Stripe (Connect + Billing) | operator billing; partner payouts via Transfers | customer + bank/payout details (held by Stripe directly) |
| Resend | transactional email (signup, payout receipts, dispute notifications) | recipient email + email subject/body |
4. Rights and contact
Affiliate partners may request access, correction, or deletion of their data via the operator's program contact, or directly with sico at privacy@sico.software. We will coordinate with the operator (controller of partner data) to fulfil requests within the statutory 30-day window.
5. Account closure
You can close an Affiliate Manager account from the settings page. We retain financial records (payouts, conversions, refunds) for 10 years from last activity to comply with tax law; everything else is deleted within 30 days, and a JSON + CSV export is generated automatically at closure and made available for 30 days.