Affiliate Program Privacy Policy
Last Updated: May 28, 2026
Scope: This policy covers data collected specifically through the SecureVolumeFlow Affiliate Program. For general site privacy practices, see our
main Privacy Policy.
1. Data Controller
SecureVolumeFlow ("we", "us", "our") is the data controller for personal data processed through the Affiliate Program. Contact: support@securevolumeflow.com
2. Data We Collect
2.1 Affiliate Account Data
When you register as an affiliate, we collect:
- Full name — for account identification and payout records
- Email address — for login, notifications, and payout communications
- Hashed password — stored using bcrypt; we never store plaintext passwords
- IP address at registration — for fraud detection and account security
- Payout account details — PayPal email, Skrill email, or Neteller account ID (stored encrypted at rest)
2.2 Referral & Commission Data
- Your unique referral code and associated referral URL
- Records of customers referred by you (their user ID only — no PII is shared)
- Order IDs, purchase amounts, and commission amounts for qualifying sales
- Commission status history (pending, approved, paid, cancelled)
- Withdrawal request history and payment confirmation data
2.3 Tracking Cookies
When a visitor clicks your referral link, we set a first-party cookie (svf_ref) and a localStorage entry on the visitor's browser — not yours. This data:
- Contains only your referral code (no PII)
- Expires after 30 days
- Is used solely to attribute sales to your account
2.4 Technical & Usage Data
- Login timestamps and session tokens (stored as hashed values)
- API request logs (rate-limiting and fraud detection)
- Browser and device information for security purposes
3. How We Use Your Data
| Purpose |
Legal Basis |
| Operate and manage your affiliate account |
Contractual necessity |
| Calculate and pay commissions |
Contractual necessity |
| Fraud detection and program integrity |
Legitimate interest |
| Comply with financial / tax record-keeping requirements |
Legal obligation |
| Send program-related communications (payout confirmations, policy updates) |
Legitimate interest / Consent |
| Improve the affiliate platform and prevent abuse |
Legitimate interest |
4. Data Sharing
4.1 Payment Processors
To process payouts, your payout account identifier (PayPal email, Skrill email, or Neteller ID) is transmitted to the respective payment processor. Their privacy practices are governed by their own policies:
4.2 No Sale of Data
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
4.3 Legal Disclosures
We may disclose data if required by law, court order, or to protect the rights and safety of SecureVolumeFlow, our customers, or the public.
5. Data Retention
- Active accounts: Data retained for the lifetime of the account
- Closed accounts: Financial/commission records retained for 7 years (legal/tax obligation); login and session data deleted within 90 days of closure
- Fraud flags: Retained indefinitely to prevent re-registration
- Referral cookies on visitor browsers: 30 days from placement
6. Security
We protect your data with:
- HTTPS/TLS encryption for all data in transit
- Bcrypt password hashing (cost factor 12)
- HttpOnly, Secure, SameSite cookies for session management
- Rate limiting on authentication and API endpoints
- Access control — affiliate data is only accessible to the account owner and authorized administrators
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion (subject to legal retention requirements)
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Withdraw consent — where processing is based on consent
To exercise any of these rights, contact support@securevolumeflow.com. We will respond within 30 days.
8. Cookies
The Affiliate Program uses the following cookies:
svf_ref — Referral attribution cookie (first-party, 30 days, set on visitor's browser when they click a referral link)access_token — Affiliate dashboard session cookie (httpOnly, Secure, SameSite=Strict, 7 days)
These are strictly necessary cookies for program functionality. No third-party tracking cookies are used by the affiliate backend.
9. Children's Privacy
The Affiliate Program is not directed at individuals under 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected such data, contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or dashboard notification. The "Last Updated" date at the top reflects the most recent revision.
11. Contact & Complaints
For privacy inquiries or to file a complaint:
If you are located in the EU/EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.