Privacy Policy

1. Who we are (controller)

Affilitrack is a product of F5 MARKETING DIGITAL LTDA, Brazilian tax ID (CNPJ) 19.786.028/0001-24, Av. Osvaldo Cruz, S/N, Quadra V, Lote 10, Setor Central, Jaupaci, GO, 76210-000, Brazil. We act as controller for our customers' account and billing data and as processor for the click-tracking data we handle on their behalf, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and, where applicable, the GDPR. Data protection officer: privacidade@affilitrack.com.br.

2. Scope

This policy covers the website affilitrack.com.br, the dashboard app.affilitrack.com.br, the tracking hosts we operate — app.affilitrack.com.br and cname.affilitrack.com.br — and customer subdomains pointed to those hosts via CNAME. When you click an Affilitrack tracking link, the request passes through our server for a few milliseconds and is redirected to the advertised destination.

3. Data we process

Account data (as controller)

Name, e-mail, company, CPF/CNPJ for invoicing, payment data handled by our payment gateway (we do not store card numbers) and contact-form submissions.

Tracking data (as processor, on behalf of the customer)

On click: a click identifier generated by us, IP address, user agent, inferred country and device type, referrer URL, timestamp, and the parameters present on the tracking URL — such as gclid, gbraid, wbraid, fbclid, ttclid, utm_*, sub-parameters and the destination URL declared in redirection_url. On conversion: the fields sent by the advertiser's platform via server-to-server postback (event type, value, transaction ID). We do not collect the visitor's name, e-mail or phone number at click time.

4. Purposes

Redirecting the visitor to the advertised destination; attributing conversions to the originating click; producing reports for the customer; forwarding events to sub-affiliates configured by the customer; detecting and preventing fraud and abuse; complying with legal obligations; and, for account data, billing and support.

5. Legal bases

Performance of a contract; legitimate interest in security and fraud prevention; compliance with legal obligations; and consent where applicable. For data processed on behalf of customers, the legal basis is determined by the customer as controller.

6. Redirection and advertising platforms

Our tracking links declare the immediate redirect destination in the public redirection_url query parameter and the server redirects exactly to it, appending only our own click identifier. We do not insert undisclosed intermediate domains, do not add third-party ("foreign") parameters to the destination and do not alter the advertised landing page. Technical details: transparent redirection policy (Portuguese). We do not sell or rent click data and do not use it for our own advertising or for profiling visitors.

7. Sharing

Tracking data is sent to third parties only when the customer configures a relay (sub-affiliate) or integration, and only the fields the customer selects. We use infrastructure providers (hosting, DNS, e-mail, payment gateway) under contract; tracking infrastructure is located in Brazil. We may disclose data to authorities where required by law.

8. Retention

Click and conversion data is kept for the duration of the subscription and deleted within 90 days after account closure, unless retention is legally required. Security logs are kept for up to 12 months. Tax records follow statutory periods.

9. Your rights

Confirmation, access, rectification, anonymisation, portability, erasure, information about sharing and withdrawal of consent (LGPD art. 18; GDPR arts. 15–22 where applicable). Write to privacidade@affilitrack.com.br; we answer within 15 days. Visitors of customer campaigns may contact us directly and we will forward the request to the responsible controller.

10. Cookies and local storage

The website uses strictly necessary cookies only. The dashboard uses a session cookie for authentication. The tracking redirect does not set cookies in the visitor's browser. The optional pixel, when installed by a customer on their own site, uses first-party storage of that site only, never third-party cookies.

11. Security

TLS on every connection (including tracking hosts), per-workspace data isolation, hashed passwords, postback authentication by token or verified domain, audit logging and daily backups.

12. International transfers

Tracking data is processed in Brazil. E-mail and payment providers may operate in other countries under appropriate contractual safeguards.

13. Changes

This policy may be updated; the date at the top identifies the current version. Material changes are communicated by e-mail or in the dashboard.

14. Contact

F5 MARKETING DIGITAL LTDA — Av. Osvaldo Cruz, S/N, Quadra V, Lote 10, Setor Central, Jaupaci-GO, 76210-000, Brazil — privacidade@affilitrack.com.br