Privacy Policy – Partner Program

1. Introduction

FundingAffiliates (“we,” “us,” or “our”) operates the website fundingaffiliates.com and the partner referral platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you create a partner account and participate in our referral program.

This Privacy Policy applies only to partners (affiliates who refer businesses). For privacy practices related to merchant applications, see the FastFundApp Privacy Policy.

2. Information We Collect

A. Information You Provide

When you create a partner account, we collect:

• Personal Information: First name, last name, email address, phone number
• Business Information: Business name, business type, website (optional)
• Tax Information: Tax ID (EIN or SSN) for commission payments and IRS reporting
• Banking Information: Bank account details provided through Stripe Connect for commission payments
• Referral Slug: Your chosen custom URL identifier

When you use the platform, we may also collect communications, profile updates, and feedback you provide.

B. Information Automatically Collected

We automatically collect:

• Usage Data: Pages visited, time spent on pages, click patterns, referral link performance
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies: Session cookies to maintain your login state and track referral attribution
• Referral Data: Information about businesses you refer including application status and funding outcomes

C. Information from Third Parties

• Stripe Connect: Identity verification data, bank account verification, payment processing information
• Referred Businesses: Names and basic information about businesses you refer (for attribution and commission calculation)
• Lending Partners: Funding outcomes for your referrals (funded amounts, approval/denial status)

3. How We Use Your Information

We use your information to:

• Operate and maintain your partner account
• Process and pay commissions
• Track referral attribution and performance
• Communicate with you about your account, commissions, and program updates
• Provide customer support
• Comply with tax reporting obligations (IRS Form 1099-NEC)
• Detect and prevent fraud
• Improve our platform and services
• Send you marketing communications about program updates (with your consent)
• Enforce our Partner Terms of Service
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For partners in the European Union, we process your personal data based on:

• Contractual Necessity: To fulfill our partner agreement with you (account management, commission payments)
• Legal Obligations: Tax reporting, fraud prevention, regulatory compliance
• Legitimate Interests: Platform improvement, fraud detection, business analytics
• Consent: Marketing communications (you may withdraw consent at any time)

5. How We Share Your Information

A. Service Providers

We share your information with:

• Stripe: Payment processing, identity verification, tax form collection, bank account verification
• Cloud Hosting: Railway, AWS, or similar providers for secure data storage
• Analytics: Anonymous usage analytics to improve platform performance
• Email Services: Transactional and marketing email delivery

These service providers are bound by confidentiality agreements and may only use your data to perform services on our behalf.

B. Referred Businesses (Limited)

When you refer a business, they see your business name (e.g., "Referred by: Smith Accounting") and your referral relationship. They do not see your contact information, commission amounts, or performance data.

C. Legal Requirements

We may disclose your information if required by law, regulation, legal process, or government request, or to protect our legal rights, enforce our Terms of Service, investigate fraud or security issues, or protect the safety of users or the public.

D. Business Transfers

If FundingAffiliates is acquired, merged, or sells assets, your partner account information may be transferred to the acquiring entity.

E. With Your Consent

We may share information with third parties when you explicitly consent.

6. We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary compensation. We share data only as described in Section 5 above for operational purposes.

7. Data Security

We implement industry-standard security measures to protect your data:

• 256-bit SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Secure cloud infrastructure (Railway/AWS)
• Access controls and authentication requirements
• Regular security audits and monitoring

Sensitive data (Tax ID, bank account numbers) is stored and processed by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store full bank account numbers or unencrypted Tax IDs on our servers.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal information for as long as your partner account is active, or 7 years after your last commission payment (for tax and financial recordkeeping compliance).

After this period, we will delete or anonymize your data unless required by law to retain it longer. You may request earlier deletion by contacting us, subject to our legal retention obligations.

9. Your Rights

A. Access and Correction

You may access and update your account information at any time through your partner dashboard settings page.

B. Data Deletion

You may request deletion of your personal data by emailing moc.setailiffagnidnuf@ycavirp. We will delete your data within 30 days, subject to legal obligations, pending commission payments or disputes, and fraud prevention purposes.

C. Opt-Out of Communications

Marketing emails: Click “unsubscribe” in any marketing email or update preferences in your account settings. Transactional emails cannot be disabled (account notifications, commission payments, security alerts).

D. Data Portability

You may request a copy of your personal data in a structured, machine-readable format by emailing moc.setailiffagnidnuf@ycavirp.

E. Withdraw Consent

If processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information (subject to legal exceptions)
• Opt-out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your CCPA rights

To exercise these rights, email moc.setailiffagnidnuf@ycavirp or call (844) 755-2801.

11. European Union GDPR Rights

If you are located in the EU, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

To exercise these rights, contact our Data Protection Officer at moc.setailiffagnidnuf@opd.

12. International Data Transfers

If you are located outside the United States, your information will be transferred to and processed in the United States where our servers are located. The United States may have different data protection laws than your jurisdiction.

By using our services, you consent to the transfer of your information to the United States. We implement appropriate safeguards for international transfers including Standard Contractual Clauses (for EU partners) and adequacy decisions where available.

13. Cookies and Tracking Technologies

A. Essential Cookies (Required)

• Session cookies: Maintain your login state
• Authentication cookies: Verify your identity
• Security cookies: Prevent fraud and unauthorized access

B. Analytics Cookies (Optional)

Usage analytics: Understand how partners use the platform (aggregated and anonymous). You may disable non-essential cookies through your browser settings, but this may affect platform functionality.

We do not use third-party advertising or tracking cookies.

14. Children's Privacy

Our partner program is not intended for individuals under 18 years of age. We do not knowingly collect information from minors. If you believe we have collected information from a minor, contact us immediately at moc.setailiffagnidnuf@ycavirp.

15. Third-Party Services

Our platform integrates with Stripe Connect for payment processing and identity verification (stripe.com/privacy). These services have their own privacy policies. We are not responsible for their practices.

16. Do Not Track Signals

We currently do not respond to Do Not Track (DNT) browser signals. If we do so in the future, we will update this policy.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to your registered email address (at least 30 days before changes take effect) and prominent notice on fundingaffiliates.com. Continued use of the partner program after changes take effect constitutes acceptance of the updated policy.

18. Contact Us

For questions, requests, or concerns about this Privacy Policy or your personal data:

19. State-Specific Disclosures

A. Nevada Residents

Nevada law allows you to opt out of the sale of certain information. We do not sell your personal information as defined by Nevada law. If you have questions, contact moc.setailiffagnidnuf@ycavirp.

B. Virginia, Colorado, Connecticut, Utah Residents

If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have rights under your state's privacy law including the right to access, correct, delete, and obtain a copy of your personal data. Contact moc.setailiffagnidnuf@ycavirp to exercise these rights.

20. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you within 72 hours of discovering the breach (or as required by applicable law) via email to your registered email address, with details about the breach, affected data, and steps you should take.

We will also notify relevant supervisory authorities as required by law.

By creating a partner account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.