How Convli Tech (“convli”, “we”) processes personal data on this website, in the console and through the header tag publishers install on their sites.
1. Who we are
Convli Tech, United States, is the controller. Privacy contact: convliads@gmail.com.
2. Data we process and why
Website visitors: server logs (IP, user agent, page) kept briefly for security; the contact form (name, email, company, role, message) to answer you. Basis: legitimate interest and your request.
Website analytics: if you accept in the cookie banner, Google Analytics measures visits (pages, approximate location, device) with cookies. Until you accept, or if you reject, it receives only cookieless pings that store nothing on your device. Basis: your consent, which you can withdraw from “Cookie preferences” in the footer.
Console users: account data (email, name, role, password hash or SSO id), properties, payout details (encrypted, shown masked), security events and performance data (impressions, clicks, conversions, earnings). Basis: our contract with you and legal obligations.
Creators who connect Instagram: audience country shares and follower counts from your own account via the official API. We never read followers’ identities. Basis: your consent, revocable in the console.
Readers of publisher sites: the tag sets no cookies and does no fingerprinting. It records viewable impressions and clicks with the page context, an approximate country and a salted IP hash that rotates daily. A click id travels to the merchant network to attribute a sale. Basis: our and the publisher’s legitimate interest in measuring placements.
3. Sharing
Networks and merchants receive the click id and conversion data, never your personal data. Payout providers (Wise, PayPal) receive what is needed to pay you. Google receives website usage data through Google Analytics. Hosting and email providers act under data-processing agreements. Authorities only when the law requires.
4. International transfers
Providers may process data outside your country. Where required we rely on standard contractual clauses or equivalent safeguards.
5. Retention
Account data while your account is active plus the period accounting and tax law requires. Raw events are pruned on a rolling basis; reports keep aggregates. Security logs and contact messages are kept for a limited, proportionate period.
6. Your rights
Access, correction, deletion, portability, restriction, objection and withdrawal of consent, as your jurisdiction provides. Write to convliads@gmail.com. You may also complain to your data-protection authority.
7. Security
httpOnly session cookies, hashed passwords, two-factor authentication for administrators, payout details encrypted at rest, private APIs protected against cross-site requests. See security.txt for responsible disclosure.
8. Children
The console is for businesses and adult creators. We do not knowingly process data of children under 16.
9. Changes
We may update this policy; the date above says when. Material changes are announced in the console.
Questions about this document: convliads@gmail.com.