Privacy Policy
Last updated: June 2025
What we collect
When you create an account, we collect your email address, network name, and password (hashed with argon2id). When your affiliates use your white-label portal, we collect the data you configure: their email, company name, and payout identifier (encrypted at rest with AES-256-GCM).
Tracking data
Click and conversion events include the visitor IP address (encrypted at rest), user agent, referrer, click timestamp, and any custom sub-parameters you pass. This data belongs to you. We process it on your behalf to deliver the tracking and reporting features.
How we use your data
We use your email address to send account-related messages: email verification, password resets, and billing notifications. We do not sell your data or use it for advertising.
Data storage
All data is stored in AWS us-east-1 (N. Virginia). Backups are encrypted. We retain your data for as long as your account is active and for 90 days after cancellation.
Cookies
We use a single httpOnly session cookie for authentication. No third-party tracking cookies are set on any OfferMesh page.
Contact
Questions about privacy? Email hello@offermesh.app.