Privacy policy

Last updated: 2026-04-23.

Data we collect

• Account data: email, name, company, country, password hash (bcrypt), optional MFA secret (encrypted).
• Tracking data: IP address, country, device fingerprint (hash of IP+UA+accept-language), user agent, subids — linked to publisher+campaign but not to end-user identity.
• Postback data: raw MMP payload (may include IDFA/GAID hashed at rest), install timestamp, country.
• Financial data: bank/PayPal details submitted to payout methods (encrypted via pgcrypto).

How we use it

• Attribute installs to the correct publisher and debit the correct advertiser.
• Detect fraudulent installs via the 7 deterministic rules described at how it works.
• Generate tax forms (1099 / 1042-S) at year-end for publishers.

Your rights (GDPR / CCPA)

You can request a data export or erasure from your dashboard, or by emailing [email protected].

Subprocessors

MaxMind (GeoIP), Resend / SES (email), Stripe (advertiser payments), PayPal/Wise (publisher payouts), AWS (hosting). All covered under our Data Processing Agreement.