Company
Privacy Policy
Published August 26, 2026
Draft pending legal review. This text honestly describes the intended practice, but should be reviewed by a lawyer before launch — particularly regarding GDPR and CCPA.
Who we are
Affify is an affiliate operations platform. This document covers the website at affify.app and the platform at my.affify.app.
What we collect
On the website (affify.app)
- aggregate navigation data (pages visited, traffic source, device type) via Vercel Analytics, with no individually identifying cookies;
- whatever you voluntarily type into the contact form: name, email, channel count and message.
In the platform (my.affify.app)
- account data: name, email and password (stored hashed);
- workspace data: brand name, market, team members;
- integration credentials (affiliate tags, channel tokens), stored encrypted;
- content you create: products, posts, articles, schedules;
- audit records: who did what and when, inside your workspace.
In the Affify Chrome extension
- when connecting: the extension identifier, a technical identifier for that installation, the extension version, and the authorized user and workspace;
- when you choose to send a product: the ASIN, canonical product URL, Amazon market (Brazil or United States), and a technical key that prevents duplicate requests;
- security and audit data needed to issue, validate, and revoke the connection.
The extension does not read or transmit Amazon cookies, passwords, cart data, browsing history, or Amazon account information. It acts only on supported product pages and only after a visible user action. The connection token is kept in protected extension storage; on the server, tokens are stored only as hashes.
We do not sell, rent or share your data with third parties for marketing purposes.
Why we collect it
- to operate the service: without integration credentials there is no way to publish to your channels;
- for security and support: audit records make it possible to understand what happened when something breaks;
- to improve the product: aggregate usage metrics, without reading the content of your posts.
- to create the draft requested through the extension: identify the product and retrieve its commercial data through the Amazon integration configured for the workspace. The extension never approves, schedules, or publishes content automatically.
Who we share it with
Only with providers necessary to run the service, and only the minimum needed:
- Vercel — hosting for the public website at
affify.app; - Railway — hosting for the platform and API at
my.affify.app; - transactional email providers — confirmation and password recovery;
- APIs you connect (Amazon, Telegram, Meta, and others) — they receive only what is required to perform the action you requested.
Data handled by the extension is used only to provide and protect the single purpose described above. It is not sold, used for personalized advertising, or transferred to data brokers. Our use of this information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
How long we keep it
For as long as your account exists. After cancellation we retain data for up to 90 days to allow reactivation and export, then delete it — except where law requires retention (for example, tax records).
Your rights
At any time you may:
- access and export your data;
- correct inaccurate data;
- request deletion of your account and associated data;
- revoke connected integrations.
You can also revoke a Chrome connection directly in the extension settings or in Affify's Integrations area. Revocation removes that browser's access; drafts you chose to create remain in your workspace until you delete them.
Extension security
The production extension communicates only over HTTPS with my.affify.app. Authorization uses a temporary code and PKCE, and each connection is limited to the approved user, workspace, and permissions. The extension sends only the minimum data needed to identify the product and create the requested draft.
To exercise any of these, write to contato@affify.app. We respond within 15 days.
Cookies
The site uses only cookies required for functionality and language preference. The platform uses a session cookie to keep you signed in. We do not use advertising cookies or cross-site tracking.
Changes
Material changes to this policy are announced by email to active customers at least 15 days in advance.