Privacy notice

This notice applies to PrivateAffiliate AI, the workspace in which partnership revenue is sourced, negotiated, closed and accounted for, and to this website.

Where your company holds a workspace, your company is the controller of the commercial data inside it and we process that data on its instruction.

Account information: the name, work email address, company and role you provide when a workspace is opened, plus authentication records needed to keep your session safe.

Workspace content: the partner records, conversations, agreement terms, approvals and revenue entries created as you use the product.

Operational records: security events, audit entries, and the technical logs required to run, defend and debug the service.

Enquiry details: what you send us through the contact form, so that we can reply.

We do not run advertising trackers, sell data, or build profiles of you for anybody else.

We do not require, store or process your partners’ payment credentials. Secret material for third-party services stays with those services.

To provide the workspace you asked for, including the autonomous work it performs on your instruction.

To keep your account secure, detect abuse, and meet our own legal and accounting obligations.

To support you when you ask, and to improve the service — using operational signals rather than the content of your commercial relationships.

People you have authorised in your own workspace. Workspaces are isolated at the data layer, so one tenant cannot read another tenant’s records.

Our own staff only where strictly necessary to operate or repair the service. That access is least-privilege and recorded.

Service providers that run the underlying infrastructure, under contract and bound to confidentiality. They do not use your data for their own purposes.

Nobody else, unless you instruct us or we are legally compelled — and where we are permitted to tell you, we will.

Where your organisation signs in through single sign-on, the identity provider confirms who you are and we receive only the identity attributes needed to open your session — an identifier, an email address, a display name and the segment you belong to.

Your password is never seen or stored by this application when you arrive that way.

Workspace content is kept while your workspace is active, and for the retention period your agreement specifies afterwards.

Audit and security records are retained for the period your agreement requires, because their value is precisely that they cannot be quietly removed.

Enquiries are kept while the conversation is live and for a reasonable period after.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to a particular use. Where your company holds the workspace, we will direct such a request to them as controller.

You can export the full estate — records, ledger and audit trail — at any time. Nothing is held hostage.

If you are unhappy with how we have handled a request, you may complain to your local data protection authority.

Encryption in transit and at rest, policy enforced at the database layer, least-privilege access re-checked on every request, and a complete audit trail.

Our commitments are set out in full on the trust page.

If this notice changes materially, we will tell workspace owners directly rather than relying on you to re-read the page.

Questions, requests or complaints: use the contact form and mark it for privacy. A person will answer.