Privacy Policy

1. What we collect

We collect your email address and name when you sign up, and we store the campaigns you generate (product URLs and AI-generated copy). This data is collected directly from you. We do not collect biometric, health, financial, or payment card data — payment processing is handled entirely by Stripe.

2. Legal basis & whether it's required

We process your personal data based on your consent, given when you create an account, and as necessary to provide the Service. Providing your email is required to create an account; without it you cannot use the Service. Other data (such as product URLs) is provided voluntarily as you use the Service.

3. How we use your data

Your data is used solely to operate the Affiliateler service: delivering campaign generation, saving your campaign history, and processing your campaign-credit pack purchases. We send only transactional emails (such as payment receipts); we do not send marketing emails.

4. Data processors

We use the following third-party processors, all of which may process your data outside Malaysia. By using the Service you consent to this international transfer, which is carried out under these providers' contractual data-protection safeguards.

• Vercel Inc. (United States) — hosting and infrastructure
• Clerk Inc. (United States) — user authentication
• Stripe Inc. (United States) — payment processing
• OpenRouter Inc. (United States) — AI content generation and product screenshot extraction
• Sentry (Functional Software, Inc.) (United States) — error and performance monitoring

5. Data security

We take reasonable technical and organisational measures to protect your personal data, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Cookies

We use only essential cookies required for authentication and security (via Clerk). We do not use tracking, analytics, or advertising cookies.

7. Data retention

Campaign records are retained for 2 years from creation, after which they are automatically deleted. Account data is retained until you delete your account, after which all data is permanently removed within 30 days.

8. Your rights

Under the Malaysian Personal Data Protection Act 2010 (as amended), you have the right to access, correct, and delete your personal data, and the right to data portability. To exercise these rights, visit your Account page or email us at arifin@arifaisolutions.com. You also have the right to lodge a complaint with the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, Malaysia).

9. Children

The Service is not intended for individuals under 18, and we do not knowingly collect personal data from minors.

10. Changes & contact

We may update this policy; the "Last updated" date reflects the latest version. For privacy enquiries: arifin@arifaisolutions.com.