Privacy Policy

1. Introduction

ProfitOS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our affiliate marketing platform and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password, and business information when you create an account.
• Payment Information: Credit card details, billing address, and transaction history (processed securely via Stripe).
• Content: Articles, reviews, and other content you create using our platform.
• Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers.
• Usage Data: Pages visited, features used, time spent on the Service.
• Log Data: IP address, access times, referring URLs.
• Cookies: See our Cookie Policy section below.

2.3 Information from Third Parties

• OAuth Providers: If you sign in with Google, we receive your name, email, and profile picture.
• Affiliate Networks: Performance data from connected affiliate programs.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

Legal Basis for Processing (GDPR): We process your data based on: (a) your consent, (b) performance of our contract with you, (c) our legitimate interests, or (d) compliance with legal obligations.

4. How We Share Your Information

We may share your information with:

• Service Providers: Third parties that perform services on our behalf (payment processing, hosting, analytics).
• Affiliate Networks: When you connect affiliate programs to track your performance.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

• Comply with our legal obligations (e.g., tax and accounting requirements)
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

Upon account deletion, we will delete or anonymize your data within 30 days, except where retention is required by law.

6. Your Rights Under GDPR (European Users)

If you are in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Restriction: Request restriction of processing.
• Portability: Receive your data in a structured, machine-readable format.
• Object: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where we rely on consent.

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

7. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information.
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information).
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact us at [email protected] or call us at 1-800-PROFITOS. We will verify your identity before processing your request.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (session management, authentication).
• Analytics Cookies: Help us understand how you use our Service (usage patterns, performance).
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Note that disabling cookies may affect some features of our Service.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data protection
• SOC2 Type II compliance

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with our service providers
• Compliance with applicable data protection laws

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (such as email notification).

Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

If you are in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.