Privacy Policy

    Effective date: October 2, 2025

    Introduction

    Reff.ly ("we", "us", or "our") respects your privacy and is committed to protecting it through our compliance with this policy. This Privacy Policy explains what data we collect, how we use it, and the rights and choices available to you.

    1. Information We Collect

    We collect information to operate, improve, and secure our services. The categories of information include:

    Account Information

    • Name, email address, password (hashed), and optional company details
    • Settings and preferences (e.g., default domains, branding)

    Product Usage

    • Links you create, edit, and manage; QR codes you generate; and related metadata
    • Analytics signals such as click counts, country/region, referrers, device types, and timestamps

    Technical Data

    • IP address, browser type, operating system, and device information
    • Cookies, local storage, and similar technologies used for authentication, security, and analytics

    2. How We Use Information

    • Provide, operate, and maintain the Reff.ly services
    • Improve, personalize, and expand features, including analytics and reporting
    • Communicate service updates, security alerts, and support messages
    • Detect, prevent, and address technical issues, abuse, or fraud
    • Comply with legal obligations and enforce our Terms of Service

    3. Legal Bases for Processing

    Where required (e.g., EEA/UK), we process personal data under these legal bases: performance of a contract, legitimate interests, consent (for certain marketing and cookies), and legal obligation.

    4. Sharing of Information

    • Service Providers: We share data with trusted vendors (hosting, analytics, customer support, payment processing) under contracts that protect your information
    • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred with appropriate safeguards
    • Legal Requirements: We may disclose information if required by law or to protect rights, safety, and the integrity of our services

    We do not sell your personal information.

    5. Data Retention

    We retain personal data for as long as your account is active or as needed to provide services and fulfill the purposes outlined in this policy. We may retain certain information as required by law, to resolve disputes, and to enforce agreements.

    6. Your Rights & Choices

    Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent at any time where processing is based on consent.

    • Access/Deletion: You can request a copy or deletion of your personal data
    • Correction: You can update certain information in your account settings or request corrections
    • Opt-Out: You can opt out of non-essential marketing communications at any time

    To exercise your rights, contact us at privacy@reff.ly. We may need to verify your identity before fulfilling requests.

    7. Cookies & Tracking Technologies

    We use cookies and similar technologies to provide essential functionality (e.g., login), remember preferences, and analyze usage. You can control cookies through your browser settings and our cookie banner (where applicable). For more details, see our Cookie Policy.

    8. Security

    We implement technical and organizational measures to protect your information, including encryption in transit, restricted access, and security monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

    9. International Data Transfers

    Your information may be transferred to and processed in countries other than your own. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your personal data.

    10. Children's Privacy

    Our services are not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us to request deletion.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by posting a notice on our website prior to the change becoming effective. The "Effective date" at the top will indicate the latest revision.

    12. Contact Us

    If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

    Email: privacy@reff.ly