კონფიდენციალურობის პოლიტიკა

1. Data we collect

• Account & identity: name, email, password (hashed by our auth provider), role, organization, and language preference.
• Profile: creator/brand profile details you provide (handle, bio, niche, links, rate card, social accounts).
• Tracking & attribution: when a tracking link is clicked we record the IP address, user-agent, referrer, timestamp, and set a visitor identifier cookie (mr_vid) to attribute later conversions. Conversions are received from connected stores via webhooks and may include an order identifier and a hashed customer reference.
• Financial: commission and payout records, and payout details you provide (e.g. bank/IBAN or payout-provider account). Payments to brands are processed by our payment service provider.
• Verification (KYC): where required before payout, identity information and documents needed for identity verification and sanctions/AML screening.
• Communications & usage: messages you send through the Platform, support requests, in-app notifications, and technical/usage logs.

2. How we use data and our legal bases

• To provide the service (accounts, campaigns, tracking, commissions, payouts) — performance of a contract.
• Attribution, analytics, fraud prevention, and security — our legitimate interests in operating a trustworthy marketplace and preventing abuse.
• Identity verification, tax, accounting, and AML — compliance with legal obligations.
• Optional cookies and certain communications — your consent, which you may withdraw at any time.

3. Cookies and tracking

We use strictly necessary cookies to run the Platform and an attribution cookie for tracking links. For details and choices, see our Cookie Policy.

4. Connected social accounts

Creators may connect one or more social accounts (TikTok, YouTube, Instagram, Facebook). Connecting is entirely optional — the Platform works without it — and you choose which accounts to connect. We use the platform's official API and its standard authorization flow; we never ask for or store your social account password.

With your authorization, we read from each account you connect:

• Account details: account ID, username/handle, display name, profile picture, and follower count.
• Your public content: the posts and videos on that account, including title, description, thumbnail, publish date, duration, and link.
• Performance metrics: views, likes, comments, shares, saves, reach, and watch time, where the platform makes them available.

We use this only to display your reach and content performance on your Meet Referral profile, so brands can evaluate you, and to show you your own statistics. We do not post, comment, message, or take any other action on your behalf, and we do not use this data for advertising or sell it. These numbers never change how much you earn.

Where a connected account belongs to someone else (for example a Facebook Page you manage for a client), it is shown as work you do and its audience is not counted as your own reach.

Disconnecting and deletion. You can disconnect any account at any time from Connected Accounts in your settings. Disconnecting revokes our access at the platform, removes that account and its statistics from your public profile immediately, and deletes the stored content and metrics for that account. You can also revoke access from within TikTok, Google, or Meta's own settings. Deleting your Meet Referral account removes all connected-account data. Access tokens are encrypted at rest and are never shown to brands or other users.

5. Who we share data with

We share personal data with service providers (processors) only as needed to run the Platform:

• Hosting, database & authentication — Supabase.
• Payments (brand charges) — our payment processor, where applicable.
• Creator payouts — the payout/bank rail you select (e.g. Wise).
• Transactional email — Resend.
• Error monitoring & diagnostics — Sentry.
• Identity verification (KYC/AML) — our verification provider, where applicable.

We may also disclose data where required by law, to enforce our terms, or to protect rights, safety, and security. We do not sell your personal data.

6. International transfers

Our database and application servers are hosted in the European Economic Area (Frankfurt, Germany). Some providers process data outside Georgia and the EEA. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision, as applicable.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the service. Financial, tax, and AML records are retained for the periods required by law. Tracking/click data is retained only as long as needed for attribution, fraud prevention, and reporting, after which it is deleted or anonymized.

8. Your rights

Subject to applicable law, you have the right to:

• access a copy of your personal data;
• rectify inaccurate data;
• erase your data (“right to be forgotten”), subject to legal retention obligations;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with a supervisory authority — in Georgia, the Personal Data Protection Service.

To exercise these rights, contact privacy@meetreferral.com.

9. Security

We use technical and organizational measures including encrypted transport, tenant isolation with row-level security, hashed credentials, and access controls. No method of transmission or storage is completely secure; we work to protect your data and to notify you and the authorities of breaches where required.

10. Children

The Platform is not intended for, and we do not knowingly collect data from, anyone under 18.

11. Changes and contact

We may update this Policy and will notify you of material changes. Questions or requests: privacy@meetreferral.com.