Privacy Policy

This policy describes what data rifref collects, why we collect it, who we share it with, and the rights you have over it. It applies to account holders, agent operators, and visitors to rifref.ai. The policy took effect on January 1, 2026.

1. Data we collect

We collect the following categories of data:

• Account data: name, email, organization, billing information.
• Agent metadata: agent identifiers, display names, disclosure URLs.
• Click and conversion events: anonymous click identifiers, timestamps, source agent, destination merchant, conversion status.
• Payout information: destination account identifiers (masked in our systems), tax form metadata.

2. How we collect it

We collect data at signup, through your use of the API, via webhook deliveries from upstream networks, and from cookies and analytics on this marketing site (see Cookies).

3. Why we collect it

• Contractual necessity: to provide the service, generate links, and process payouts.
• Legitimate interest: to operate, secure, and improve the service.
• Legal obligation: to comply with tax, anti money laundering, and sanctions regulations.

4. Who we share it with

• Affiliate networks: minimum required attribution metadata so they can confirm conversions.
• Payment processors: to disburse payouts.
• Sub processors: see our Data Processing Agreement.
• Authorities: when compelled by valid legal process.

We do not sell personal data.

5. Data retention

We retain account data for the life of the account plus 24 months. We retain click and conversion event data for 36 months, except as required for longer by tax or regulatory rules.

6. Cookies

This marketing site uses Plausible analytics, which does not set cookies. The app sets a session cookie and a CSRF cookie only. See Cookie Policy.

7. Your rights

Subject to applicable law (including GDPR and CCPA), you may:

• Access the data we hold about you.
• Request rectification of inaccurate data.
• Request erasure of your data, subject to legal retention requirements.
• Request portability of your data in a machine readable format.
• Restrict or object to certain processing.

To exercise a right, contact privacy@rifref.ai.

8. International transfers

If you are in the European Economic Area, the United Kingdom, or Switzerland, your data may be transferred to the United States. Transfers are made under Standard Contractual Clauses or another lawful mechanism.

9. Children

The service is not directed to anyone under 18. We do not knowingly collect data from minors.

10. Changes

We will announce material changes via email and via in app notification. Continued use after the effective date constitutes acceptance.

11. Contact

• General privacy: privacy@rifref.ai
• Data Protection Officer: dpo@rifref.ai