The short version. We collect what the product needs to work — your account details, the affiliate IDs and destinations you connect, and the deal messages you ask us to convert and post. We do not sell your data, we do not run advertising or third-party tracking SDKs, and we never touch the commission your links earn. You can ask for a copy of your data or its deletion at any time by writing to support@affiliaters.in.
1. Who we are and what this covers
Affiliaters ("we", "us", "our") is the data fiduciary / controller for the personal data
described here. This policy covers the website at
affiliaters.in, the dashboard at app.affiliaters.in and our Telegram
bots. Our browser extension is covered by a
separate extension privacy policy, because it processes
different data on your device.
2. What we collect
| Category | What it includes | Why we need it |
|---|---|---|
| Account data | Email address, password (stored only in hashed form), plan and account status. We do not ask for your name. | To create your account, sign you in, apply your plan limits and contact you about the Service. |
| Affiliate credentials | The affiliate IDs, tags, tokens and API keys you add — for example your Amazon.in Associates tag, Flipkart, EarnKaro, Cuelinks, Admitad, Shopsy or other network details. | To rewrite links so the commission tracks to your accounts. We never use them for our own conversions. |
| Destination & session data | Telegram channel and group IDs, the Telegram session created when you log in for the Auto Forwarder, connected WhatsApp groups, the Twitter/X developer keys you paste (API key and secret, access token and secret), Facebook and Discord connections, WordPress site URL and application password. | To read the source channels you selected and post your deals where you told us to. |
| Content you process | Deal messages, captions, images, templates, replacer rules and blacklist words that pass through the converter or forwarder. | To convert links and deliver the finished post to your destinations. |
| Shortener data | Your own short domain, or your Bitly / Cuttly credentials, plus the short links generated and basic click counts where available. | To shorten links under your brand and show you what was created. |
| Payment proof | The plan you asked for, the amount, the date, the UPI reference / UTR number you send us and the payment screenshot you upload, plus our approval status and any note we add. There is no payment gateway and no card processing, so we never receive or store card numbers, CVVs, UPI PINs or bank passwords. Please mask anything in a screenshot that is not needed to identify the transfer. | To match your transfer to your account, activate the plan manually, prevent false payment claims, and keep tax and accounting records. |
| Support messages | What you send us on Telegram or email, and our replies. | To answer you and keep a history of the issue. |
| Technical logs | IP address, device and browser information, timestamps, pages or endpoints requested, and error diagnostics. | Security, abuse prevention, debugging and keeping the Service reliable. |
3. Why we process it — and on what basis
- To deliver the Service you asked for — performance of our contract with you: converting links, forwarding and posting deals, shortening links, applying your settings.
- To bill you and keep records — contract and legal obligation.
- To keep the Service safe — legitimate interests: fraud and abuse prevention, rate limiting, investigating misuse.
- To support and inform you — contract and legitimate interests: answering questions, sending service, security and billing notices.
- To improve the product — legitimate interests, using aggregated or de-identified usage patterns rather than reading your content.
- Where you consent — anything optional, such as being quoted as a customer. You can withdraw consent at any time.
4. What we never do
- We never sell, rent or trade your personal data.
- We never take a share of your affiliate commission, and we never substitute our own affiliate tag for yours.
- We do not embed third-party advertising, ad-targeting or analytics SDKs in the dashboard.
- We do not read your personal Telegram or WhatsApp chats. The Forwarder only touches the source channels you selected and the destinations you connected.
- We do not use your deal content to train advertising profiles or to run channels of our own.
5. Who we share data with
We share only what a specific job requires, and only with:
- Infrastructure and hosting providers that run our servers, databases and backups under confidentiality obligations.
- Banks and UPI infrastructure, only in the sense that your transfer travels from your bank or UPI app to ours. We do not send your account data to a payment gateway, because we do not use one — payments are verified manually from the UTR and screenshot you send.
- The platforms you connect — Telegram, WhatsApp, Twitter/X, Facebook, Discord, WordPress, Bitly or Cuttly — because your post has to reach them. Their own policies apply once it does.
- Affiliate networks, indirectly: your affiliate link carries your ID, so when someone taps it the network sees that click. That is how affiliate marketing works.
- Authorities or advisers, only where we are legally required, or where it is necessary to establish, exercise or defend legal claims, or to protect users' safety and the security of the Service.
6. Where data lives and how long we keep it
Data is stored on servers operated by our hosting providers and may be processed in India or in other countries where those providers run infrastructure. Where data leaves India or the EEA, we rely on appropriate safeguards offered by the provider.
- Account, plan and payment records — kept while your account is active and afterwards for as long as tax, accounting and legal obligations require. Payment screenshots are kept only as long as needed to evidence the transaction.
- Affiliate credentials, sessions and destinations — kept until you remove them, disconnect the integration, or delete your account.
- Deal content and conversion history — kept for a limited operational period so you can review what was posted, then deleted or de-identified.
- Technical logs — kept for a short period for security and debugging.
- Support conversations — kept while useful for context, then deleted.
When you delete your account we remove or de-identify your personal data, except records we must keep by law or that are needed to resolve a dispute.
7. Security
Traffic to and from the dashboard and our APIs is encrypted with HTTPS/TLS. Passwords are stored as one-way hashes, access to production systems is restricted, and integration credentials are stored for use only by the features you switched on. We apply reasonable technical and organisational measures appropriate to the size of the Service — but no internet service can promise absolute security, so please use a strong, unique password and keep your Telegram 2FA enabled.
8. Cookies and local storage
This website uses no advertising or cross-site tracking cookies. What we do use:
- Essential cookies in the dashboard to keep you signed in and to protect forms against cross-site request forgery.
- Local storage on this website for one thing only — remembering whether you
chose the light or dark theme (
aff-theme).
You can clear these at any time in your browser settings; clearing the session cookie signs you out.
9. Your rights and choices
- Access and portability — ask for a copy of the personal data we hold about you.
- Correction — fix anything inaccurate, directly in the dashboard or by asking us.
- Deletion — delete your account and ask us to erase your personal data, subject to records we must retain.
- Withdraw consent — for anything you opted into, at any time.
- Object or restrict — where we rely on legitimate interests, tell us and we will review.
- Complain — under India's Digital Personal Data Protection Act, 2023 you may raise a grievance with us first (see section 12) and then with the Data Protection Board of India. If you are in the EEA or UK, you may also complain to your local supervisory authority.
Write to support@affiliaters.in to exercise any of these. We will verify your identity and respond within the period required by applicable law, usually within 30 days.
10. Children
The Service is built for affiliate marketers and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, tell us and we will remove it.
11. Other sites and platforms
Our pages link to third-party sites — retailers, affiliate networks, Telegram, documentation and more. We are not responsible for their content or privacy practices. Once your deal reaches a platform you connected, that platform's privacy policy governs it. Reading their policies is worth the ten minutes.
12. Changes and how to contact us
We will update this policy as the product and the law change; the "Last updated" date above always reflects the current version, and material changes will be announced in the dashboard or by email. For anything privacy-related, including a grievance under the DPDP Act:
Affiliaters — Grievance contact: Govind Tiwari
Gurugram, Haryana, India
Email: support@affiliaters.in
Telegram: @AffiliatersHelpBot
Your use of the Service is also governed by our Terms & Conditions.