Privacy notice

1. Who we are

1.1Affilo is a marketplace where brands list products, creators and designers (“makers”) post about them, and makers are paid on the sales they bring in. In this notice “Affilo”, “we” and “us” means the business behind affilo.app. The Affilo company is being incorporated in England and Wales; once it is, it will be named here as the controller of your personal data.

1.2For anything about your data, write to privacy@affilo.app. We reply within one month.

1.3This notice covers affilo.app, the creator and brand apps on the web, the Affilo app for iPhone and Android, and creators’ storefronts at affilo.app/@handle. Brands that use Affilo are controllers of their own customers’ data; their privacy notices cover what happens on their stores.

2. What we collect

2.1Your account. Your email address and, if you give it, your name. We sign you in with a link sent to your email, so we hold no password.

2.2Creator and designer profiles. Your handle, display name, bio and photo, your Instagram and TikTok handles, your niche, who referred you, and whether we have approved your application.

2.3Brand teams. The name and email of each person on a brand’s team, and their role.

2.4Payouts. Our payment provider, Stripe, collects and holds your identity documents and bank details. We hold only your Stripe account reference, whether you can be paid, and the amounts paid to you.

2.5Sales. For each order credited to a maker: the order reference, its amounts, the discount code used, which link, post or ad it came through, and when. We never hold a shopper’s name, email or address. To stop makers buying through their own links, we compare a one-way hash of the order’s email and address with the maker’s; the hash can’t be turned back into the address.

2.6Samples. If you ask a brand for a sample, the shipping address you give, stored encrypted and shared with that brand only to send it.

2.7Your work and messages. Scripts, videos and statics you submit, notes on them, and messages between you and brands.

2.8Connected accounts. Creators connect Instagram and Facebook to join (section 4). Brands may connect a Shopify store. We hold the access needed to run Affilo: comments that carry your keyword and the replies we send for you, posts you link to products, and a store’s orders, refunds and discount codes. From a store’s orders we also count customers by shipping country and city, as totals only; nothing is stored against the order or the shopper. Access tokens are stored encrypted.

2.9Security records. When you sign in or change something important (a role, a rate, a payout), we record what happened and when, with a keyed hash of your IP address and your browser’s user agent. We never store your IP address itself.

2.10Your choices. When you agreed to our terms and this notice, which version, and that you confirmed you’re 18 or over.

2.11Instagram and Facebook insights. For creators, what Meta reports about your own professional account: followers and growth, reach and views, likes, comments, saves and shares, Story completion, your recent posts’ results, and Meta’s audience breakdown in aggregate (age bands, gender and top countries and cities). Meta never gives us your individual followers, and we don’t ask for them. Section 4 says how we use it.

2.12The Affilo app. When you sign in on the app: a session, held only as a one-way hash, the name the app gives your device (for example “iPhone 16”), its platform and when it was last used, so you can see and sign out each device. If you allow notifications, your device’s push token, stored encrypted. Signing out of the app deletes its session and push token.

3. Why we use it, and our lawful basis

Where we rely on legitimate interests, we have weighed them against your rights; you can ask us for that assessment.

4. Instagram and Facebook insights

4.1Required to join. Connecting your Instagram professional account, through Instagram or Facebook Login, is a condition of joining Affilo as a creator. Without it you can’t take products, ask for samples or send work to brands. Switching to a professional account is free. Designers don’t need to connect.

4.2What we read. What section 2.11 lists, refreshed daily through Meta’s official tools, never by scraping. We don’t post for you, read your messages or see your followers one by one.

4.3Our lawful basis. It is part of our contract with you, and our legitimate interest in running a fair marketplace. It is not based on consent, so there is no switch to turn it off while you stay; you can disconnect or close your account at any time.

4.4What we use it for. Vetting applications; matching and ranking creators for each brand; suggesting rates and expected sales per post; spotting fraud such as bought followers; and understanding the market, such as which categories and formats sell.

4.5What brands see. Verdicts only: Verified, how well your audience matches their customers, an expected sales range, a trust signal and bands such as “10k–25k followers”, with your sales on Affilo. Brands never see your raw numbers, follower curves or audience breakdown, and can’t export them. A media kit at affilo.app/@handle/kit shows only the stats you choose to publish.

4.6We never sell it. We don’t sell, license or pass on what Meta gives us, as Meta’s terms require.

4.7When you leave. Disconnecting, or closing your account, deletes everything we got from Meta at once, and always within 24 hours; your media kit is unpublished too. Your sales records stay, as section 6 says. You can also remove Affilo in your Instagram or Facebook settings: Meta then tells us, we delete the same data, and Meta gives you a confirmation code. Check its status at affilo.app/api/meta/deletion?code= followed by your code.

5. Who we share it with

5.1Brands see what they need to work with you: your name or handle, your posts and work for them, your results on their products, and our verdicts on your insights (section 4.5), never the insights themselves. A brand sees order details only for orders credited on its own store.

5.2Agencies that run a brand’s programme see the same as that brand. A client report an agency shares carries the same verdicts and sales, never raw insights.

5.3Our processors, who handle data only on our instructions:

5.4Where a processor handles data outside the UK, the transfer is protected by the UK’s adequacy regulations (for example the UK Extension to the EU-US Data Privacy Framework) or the UK International Data Transfer Addendum to the EU’s standard contractual clauses.

5.5We share data with the police, HMRC or a court only where the law requires it. We never sell personal data.

6. How long we keep it

7. Your rights

7.1You can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, or to move it to another service. Creators can download their data, including their insights and signed-in devices, and delete their account from Me at any time (section 8). Brand team members can do the same from Settings.

7.2You can object to anything we do on the basis of legitimate interests, and withdraw consent at any time where we rely on it.

7.3We make no decisions about you by automated means alone. Applications, rejections and fraud reviews are decided by a person.

7.4We do profile creators: we use your insights and sales to rank you and score your match for each brand (section 4.4). A ranking only sets the order a brand sees creators in. It never decides an application, a payout or a fraud review, and you can object to it under 7.2.

7.5Some data we must keep even if you ask us to delete it, such as payment records for tax. We’ll tell you when that applies.

8. Delete your account

8.1On the web. Sign in at affilo.app/sign-in, open Me, go to Your data and choose Delete my account. Type your handle to confirm and choose Delete it.

8.2In the app. Open Me and choose Delete my account. It opens the same step on the web, signed in.

8.3Without signing in. Email privacy@affilo.app from the address on your account and we’ll delete it and confirm by email.

8.4What happens. Your email, name, handle, bio, photo, social handles and posts are deleted at once, and your links and codes stop working. Everything we got from Meta is deleted within 24 hours, and every app session and push token at once. Payment records stay for 6 years against an anonymous account, because the law asks us to keep them.

9. Children

Affilo is for people aged 18 and over. We don’t knowingly hold data about anyone younger; if we find we do, we delete it.

10. Security

Data is encrypted in transit and at rest. Sign-in links and sessions are stored only as one-way hashes. Shipping addresses, access tokens and push tokens are encrypted with keys we hold separately. Access inside Affilo is limited to the people who need it, and every sensitive change is logged.

11. Complaints

If you’re unhappy with how we handle your data, tell us first at privacy@affilo.app. You can also complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or 0303 123 1113.

12. Changes

We’ll post any change here with a new date, and tell you by email before a change that affects how we use your data.