Privacy Policy

Introduction

Reflio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our referral management platform and services.

By using Reflio, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Company information (business name, website URL)
• Payment information (processed securely through Stripe)
• Contact information for support requests
• Communication preferences

Referral Data

When you use our platform, we collect and process:

• Referrer information (name, email, unique referral codes)
• Referred user information (name, email, signup data)
• Referral campaign details and performance metrics
• Reward and payout information
• Conversion and transaction data

Usage Data

We automatically collect certain information when you use our services:

• Log data (IP address, browser type, operating system)
• Device information and identifiers
• Pages visited and features used
• Time and date of visits
• Referring website addresses

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

How We Use Your Information

We use the information we collect for the following purposes:

• Provide Services: To operate and maintain your referral campaigns and process referrals
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Payment Processing: To process payments, issue rewards, and handle refunds
• Analytics: To understand how our services are used and improve our platform
• Communication: To send administrative information, updates, and marketing communications (with your consent)
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations and enforce our terms

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share data with third-party service providers who help us operate our platform:

• Stripe: Payment processing and payout services
• Cloud Hosting: Infrastructure and data storage
• Analytics: Usage analytics and monitoring
• Email Services: Transactional and marketing emails

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

Business Transfers

If Reflio is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

Data Storage and Security

Your information is stored on secure servers hosted by enterprise-grade cloud providers. We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Automated backups with encryption
• Monitoring and incident response procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

• Account data is retained while your account is active
• Referral and transaction data is retained for 7 years for tax and legal compliance
• Marketing data is retained until you unsubscribe
• Log data is retained for 90 days for security and debugging

After the retention period, we will securely delete or anonymize your information.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (right to be forgotten)
• Data Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

To exercise these rights, please contact us at cedric@pirax.app. We will respond to your request within 30 days.

Cookie Policy

We use the following types of cookies:

• Essential Cookies: Required for the platform to function properly
• Analytics Cookies: Help us understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track visitors across websites for advertising purposes (with consent)

You can control cookies through your browser settings. Note that disabling cookies may limit your use of certain features.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Reflio is not intended for children under 13 years of age (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Sending you an email notification for material changes

We encourage you to review this Privacy Policy periodically. Changes become effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: