Privacy Policy

1. Who we are

LeadsRefer (“LeadsRefer,” “we,” “our,” or “us”) operates the affiliate performance platform available at leadsrefer.com. We connect advertisers with affiliate marketers to track clicks, conversions, and manage commission payouts.

Questions about this policy can be directed to admin@leadsrefer.com.

2. Information we collect

We collect information in the following ways:

• Account information: Name, email address, and password hash when you register as an affiliate or advertiser.
• Business & payout information: Company name, address, tax identification numbers (TIN/EIN), payout method details (e.g. PayPal, ACH routing information), and W-9 data provided for tax compliance.
• Tracking data: Click events, conversion events, IP addresses, user-agent strings, geo-location (country/region), and device type collected when end-users interact with affiliate tracking links. This data is pseudonymized and used solely for attribution and fraud prevention.
• Call recordings: If you use our call-tracking features powered by Twilio, calls may be recorded and transcribed. You are responsible for notifying callers in accordance with applicable law.
• Usage & log data: Server logs, API request metadata, and browser session cookies used for authentication.

3. How we use your information

• Operate, maintain, and improve the LeadsRefer platform.
• Authenticate users and manage account security.
• Track and attribute affiliate clicks and conversions to calculate commissions.
• Process commission payouts and maintain payout records.
• Detect and prevent fraudulent traffic, click fraud, and abuse.
• Comply with tax reporting obligations (e.g. IRS 1099 filings).
• Send transactional emails (payout confirmations, account notices).
• Respond to support inquiries sent to admin@leadsrefer.com.

We do not sell your personal information to third parties, and we do not use your data for behavioral advertising.

4. Cookies & tracking technologies

We use cookies and similar technologies for:

• Session authentication: A secure, HTTP-only session cookie is set when you sign in and is required to use the platform.
• Affiliate attribution: When an end-user clicks an affiliate tracking link, a cookie or URL parameter records the click for attribution purposes. This is necessary for the platform to function as described.

We do not set third-party advertising cookies.

5. Data sharing & subprocessors

We share data with the following categories of service providers only as necessary to operate the platform:

• AWS (Amazon Web Services): Cloud hosting (App Runner, RDS/Supabase).
• Supabase: Managed PostgreSQL database hosting.
• Twilio: Call tracking and recording (if enabled).
• Stripe: Payment processing for advertiser billing.
• Resend / email provider: Transactional email delivery.

We do not share affiliate tracking data (click/conversion records) with any parties other than the advertiser whose offer generated the event and the affiliate whose link was clicked.

6. Data retention

We retain account and payout records for a minimum of seven (7) years to comply with financial and tax recordkeeping requirements. Tracking click and conversion logs are retained for up to three (3) years for auditing and dispute resolution. You may request deletion of your account data by contacting us; note that legally required records cannot be deleted before their retention period expires.

7. Security

We use industry-standard security measures including TLS encryption in transit, hashed passwords, encrypted TIN storage, and role-based access controls. However, no system is 100% secure and we cannot guarantee absolute security.

8. Your rights

Depending on your jurisdiction you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at admin@leadsrefer.com. We will respond within 30 days.

California residents may have additional rights under the CCPA. EU/EEA residents may have rights under the GDPR. Contact us for jurisdiction-specific requests.

9. Children

LeadsRefer is not directed at children under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, data requests, or concerns: