Privacy policy
How we collect, use and protect your personal data as an affiliate of the program.
Contents
1. Data controller
The controller of your personal data is Tech 555, Inc., a Nevada Corporation with registered address at PO Box 50624, Henderson, NV 89016, USA. Contact email for privacy matters: [email protected].
2. Data we collect
When you sign up for and use the affiliate program we may collect:
- Account data: name, email, password (hashed), country, preferred language, sign-up date.
- Tax and payout data: legal name, address, tax ID where applicable, payout method and details for your chosen payment processor (Paxum ID, IBAN, etc.).
- KYC data (from $600 accumulated): government ID and verification selfie.
- Usage data: IP address, browser, operating system, dashboard access logs, tool events.
- Tracking data: clicks, sign-ups and purchases attributed to your affiliate account.
- Communications: emails, support tickets and messages to your account manager.
3. Purposes of processing
- Managing your account and the affiliate program
- Calculating and processing your payouts
- Complying with tax and compliance obligations (including KYC and fraud prevention)
- Providing support and maintaining service quality
- Sending you operational communications (product changes, payouts, technical notices)
- Monthly newsletter: only if you explicitly subscribed, and you can unsubscribe at any time
- Aggregated statistical analysis to improve the program
4. Legal basis
- Performance of the contract: the data needed to operate your account and process payouts.
- Legal obligation: retention of tax data, KYC and audit records.
- Legitimate interest: fraud prevention, service security, product improvement.
- Consent: newsletter, non-essential cookies, marketing communications.
5. Sharing data with third parties
We share data only with those who need it to run the service:
- Payment processors: Paxum, CosmoPayment, YourSafe, banks for Wire/ACH
- KYC provider for identity verification where applicable
- Hosting and CDN provider
- Support and customer-service platform provider (handling of contact tickets)
- Tax and legal advisors and auditors bound by a duty of confidentiality
- Authorities where there is a legal obligation to cooperate
We do not sell personal data and we do not share it for third-party marketing purposes.
6. Retention
We keep your data while the account is active and for the periods required by tax and fraud-prevention regulations after closure. Accounting data is kept for the applicable legal period (typically 5-10 years depending on jurisdiction). Complaint correspondence and files are kept for 7 years, in line with the Tech 555 group record-keeping policy; resolved files are anonymized as part of that archive.
7. Your rights
You have the right to:
- Access: obtain a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of data not required by a legal obligation.
- Objection and restriction: object to certain processing or request its restriction.
- Portability: receive your data in a structured format.
- Withdraw consent: at any time, for processing based on consent.
To exercise any of these rights, write to [email protected] identifying yourself as the data subject. If you are not satisfied with the response, you may lodge a complaint with your country's supervisory authority.
8. Cookies and tracking
We use technical cookies necessary for the dashboard to work, a first-party cookie that remembers the language you choose (ac_lang, 1 year) and a first-party affiliate attribution cookie (ac_ref, 90 days); neither is shared with third parties. For affiliate tracking we use a combination of a cookie and a user hash that allows lifetime attribution without depending exclusively on the browser. In addition, if you accept non-essential cookies, we load Google Tag Manager with Google Analytics 4 (audience measurement) and Google Ads (campaign measurement), which set their own cookies (_ga, _gcl_au and similar). Until you accept, those tools run in restricted mode —consent denied by default— and set no cookies or advertising identifiers. You can manage your preferences from the banner shown on your first visit, and we honor your browser's Global Privacy Control (GPC) signal as a valid opt-out of sale/sharing.
9. Security
We apply reasonable technical and organizational measures to protect your data: encryption in transit (HTTPS), encryption at rest for sensitive data, role-based access control, periodic audits and team training. Even so, no system is 100% infallible and we cannot guarantee absolute security.
10. International transfers
As the Operator is based in the USA and our team and providers are spread across the USA, the EU and other countries, your data may be transferred outside your country of residence. We apply Standard Contractual Clauses and other recognized safeguards to guarantee an equivalent level of protection.
11. Changes to this policy
We may update this policy. Material changes are notified by email at least 14 days before they take effect. The date of the last update appears at the top of the document.
12. Your Privacy Rights
We grant the following rights to all users, regardless of where they reside, in accordance with applicable US privacy laws (including the CCPA/CPRA). This section supplements the rest of this Privacy Policy.
12.1 Categories of information we collect
In the past 12 months we have collected the following categories of personal information:
| Category | Examples in your account | Disclosed to |
|---|---|---|
| Identifiers | Name, email, country, IP address, affiliate ID | Hosting/CDN, payment processors |
| Customer records | Legal name, address, tax ID where applicable | Payment processors, tax advisors |
| Commercial information | Payment method and details, commission and payout history | Payment processors |
| Internet / network activity | Dashboard access logs, tool events, clicks, sign-ups and purchases attributed to you | Hosting / aggregated analytics |
| Geolocation | Approximate location derived from IP | Hosting/CDN |
| Sensitive personal information | Government ID and verification selfie (KYC above $600), payment account details | KYC provider, payment processors |
Sources: directly from you (registration, forms, verification), from your activity in the dashboard and tools, and from our payment processors and identity-verification provider.
12.2 Purposes
We use this information to manage your account and the program, calculate and process payouts, comply with tax and fraud-prevention obligations (including KYC), provide support, send operational communications, and — only with your consent — our newsletter.
12.3 Sale and sharing
We do not sell your personal information for money and we do not share it for cross-context behavioral advertising, and have not done so in the past 12 months. We also do not knowingly sell or share the personal information of consumers under 16 (our service is for adults 18+ only).
12.4 Sensitive personal information
We use and disclose your sensitive personal information only for purposes permitted by law: to provide the service, verify your identity (KYC), process payments and prevent fraud. You may request that we limit its use to those purposes.
12.5 Your rights
- Know: what we collect, the sources, the purposes, and the categories of third parties we share it with.
- Delete: request deletion of information we collected from you (subject to legal exceptions such as tax or anti-fraud obligations).
- Correct: fix inaccurate information.
- Opt out of the sale/sharing of your personal information.
- Limit the use and disclosure of your sensitive personal information.
- Non-discrimination: we will not treat you differently for exercising these rights.
12.6 Opt-out preference signal (GPC)
We honor opt-out preference signals that meet legal requirements, such as Global Privacy Control (GPC). If your browser sends this signal, we treat it as a valid request to opt out of sale/sharing for that browser or device.
12.7 How to exercise your rights
Email us at [email protected]. Because we operate exclusively online, email is our designated request method. We will verify your identity before responding. You may use an authorized agent acting on your behalf with verifiable permission.
Timelines: we confirm receipt within 10 business days. We respond to know/delete/correct requests within 45 calendar days (extendable by another 45 with notice). Opt-out of sale/sharing and limit-sensitive requests are handled within a maximum of 15 business days.
12.8 Complaints
If you are not satisfied with our response, you may file a complaint with the competent supervisory authority in your jurisdiction.
Last updated: July 21, 2026. Controller: Tech 555, Inc., PO Box 50624, Henderson, NV 89016, USA.
Questions about privacy, or want to exercise your rights? Write to [email protected].