Privacy Policy
Last updated: May 4, 2026
1. Information We Collect
AffProf ("AffProf", "we", "us", "our") is operated by Carlos Sanchez operating as AffProf, based in Ottawa, Ontario, Canada. Account information • Email address and name when you register • Password hash (we never see your plaintext password) Usage data • Links, products, tags, and settings you create • Click events on your short links • Brand assets you upload (logos, images for QR codes) Click analytics (visitors of your short links) • Country (derived from IP address) • Device type, browser, and operating system • Referrer source • We do not store personally identifiable information about visitors. IP addresses are hashed before storage and never retained in raw form. Marketing site analytics • Pages visited on affprof.com • Clicks on primary buttons, registration links, login, pricing, contact, blog CTAs, and social links • Page language, button location or section, selected plan, and call-to-action type • Technical data such as device type, browser, operating system, approximate country, and referrer source Payment information • Handled entirely by Stripe. We never store credit card details on our servers. • We retain only Stripe customer and subscription identifiers needed to manage your subscription. Operational data • Server logs containing timestamps, request paths, and error traces • Email delivery logs from Resend
2. How We Use Your Information
• To provide and operate the Service • To send email alerts when your links break • To send transactional emails (account confirmation, billing receipts, security notifications) • To measure how visitors interact with our marketing site, including primary buttons, pricing pages, blog content, and registration links • To improve our pages, messaging, pricing, and user experience • To respond to support requests • To detect and prevent fraud or abuse We do not sell your personal data. We do not use your data to train AI models.
3. Data Sharing
We share data only with the following processors, each contractually bound to protect your data: • Stripe — Payment processing for Pro subscriptions (email, name, billing address) • Resend — Transactional email delivery (email, name, message content) • Neon — Database hosting, all operational data • DigitalOcean — Application hosting at app.affprof.com, all operational data • Vercel — Marketing site hosting at affprof.com, marketing site visitor data only • Google Analytics / Google LLC — Marketing site analytics, including page views, interaction events, browser/device technical data, and referrer source We never share your data with advertisers or marketing networks.
4. Data Retention
• Account data is retained while your account is active. • Click analytics are retained for 12 months, then aggregated and anonymized. • Server logs are retained for 30 days. • After account deletion, all personal data is permanently removed within 30 days. Anonymized aggregated metrics may be retained.
5. Cookies
AffProf uses essential cookies required for authentication and session management. On the marketing site affprof.com, we may also use analytics cookies or similar technologies, such as Google Analytics, to measure visits, primary button clicks, and content performance. We do not use advertising cookies or sell personal data. We also do not use cookies to personally identify individual visitors of your short links.
6. Your Rights
Depending on your location, you may have the following rights: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion of your account and data • Export your data in a portable format (CSV) • Object to or restrict processing • Withdraw consent at any time To exercise these rights, contact us at privacy@affprof.com. If you are in the European Economic Area, the United Kingdom, or Canada, you have additional rights under GDPR, UK GDPR, or PIPEDA respectively, including the right to lodge a complaint with your local data protection authority.
7. Account Deletion
You can delete your account at any time from your settings page. Before deleting, we recommend exporting your links via the CSV export feature available in the links menu. When you delete your account: • Any active Stripe subscription is cancelled immediately. • Your account data, links, products, click analytics, and uploaded brand assets are permanently deleted within 30 days. • Active short links stop redirecting. • Aggregated, anonymized metrics may be retained for service improvement.
8. Security
We implement industry-standard security measures including: • Encrypted connections (HTTPS/TLS) for all traffic • Hashed passwords using modern hashing algorithms • IP addresses hashed before storage • Database access restricted via access controls • Regular automated backups No system is 100% secure. If we detect a security incident affecting your data, we will notify you without undue delay.
9. International Data Transfers
AffProf is operated from Canada. Your data may be processed in Canada, the United States (Stripe, Vercel, Neon, Resend), and other locations where our processors operate. We rely on Standard Contractual Clauses and equivalent mechanisms for international transfers.
10. Children's Privacy
AffProf is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to This Policy
We may update this policy periodically. We will notify you by email of significant changes at least 14 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance.
12. Contact
For privacy-related questions: privacy@affprof.com General contact: hello@affprof.com