Privacy Policy

This policy explains what personal data PrivateLeads ("we", the "Network") collects, why, and your rights. It covers our affiliates, advertisers and their staff, and the end users whose clicks pass through our tracking links. We are the data controller for this processing.

Data we collect

• Account data — name, business name, email, messenger handle, country, declared experience and traffic types, payout method and account details, and the IP address used at sign-up.
• Tracking data — for each click on a tracking link: a generated click ID, the offer and affiliate, any sub-ID the affiliate passes, IP address, user-agent, referring URL, and approximate country derived from the IP. For each conversion: the advertiser's transaction ID, amount, status and timestamp.
• Usage data — pages visited in the portal, API calls, and audit records of actions taken by staff and account holders.

We do not knowingly collect special-category data and do not run advertising cookies.

Why we use it and our legal basis

• To run the Network — attributing clicks to conversions, calculating payouts and invoices, and giving each party their own reporting. Legal basis: performance of a contract.
• Fraud prevention and traffic quality — detecting bots, duplicate clicks, out-of-GEO traffic and datacenter/VPN addresses, and investigating disputes. Legal basis: legitimate interests (protecting advertisers, affiliates and the Network).
• Legal and accounting — tax records, responding to lawful requests. Legal basis: legal obligation.
• Service email — verification, approvals, password resets, payout notices. Legal basis: performance of a contract.

Sharing

Click and conversion data is shared between the affiliate who generated it and the advertiser who owns the offer — advertisers see a masked affiliate ID, never an affiliate's name or contact details. We use a small number of processors: a cloud host for the application and database, and an email provider (Resend) for service messages. We do not sell personal data. We disclose data if required by law.

Affiliate postbacks

If an affiliate configures their own postback URL, we send that URL the click ID, offer ID, sub-ID, transaction ID, payout amount and status for their own conversions, so their tracker stays in sync. The affiliate is the controller for what happens to that data on their systems.

Retention

Click and conversion records are kept while they are needed for attribution, billing, dispute resolution and fraud analysis, and then for the period required by tax and accounting law, after which they are deleted or aggregated. Account data is kept for the life of the account plus the statutory record-keeping period.

International transfers

Our infrastructure and processors may be located outside your country. Where data leaves the UK or EEA we rely on an adequacy decision or Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to complain to your data-protection authority. To exercise a right, email privacy@privateleads.online. End users whose clicks were tracked can ask us to locate and delete their records using the click ID, IP and approximate date.

Contact

Data-protection contact: privacy@privateleads.online.