Privacy Policy
THRONE DIGITAL LTD ("Company", "we", "us"), a company registered in Cyprus, operates the AffGoat platform ("Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.
1. Data Controller
THRONE DIGITAL LTD is the data controller for personal data processed through the Platform. For data protection inquiries, contact us at contact@affgoat.com.
2. Data We Collect
2.1 Account Data
When you register, we collect:
- Full name, email address, country
- Contact information (Telegram, Discord handle)
- Password (hashed, never stored in plaintext)
- IP address at registration
2.2 KYC Data
For identity verification, we may collect:
- Government-issued ID (passport, national ID, driver's license)
- Proof of address (utility bill, bank statement)
- Selfie or video verification
2.3 Financial Data
- Payment method details (wallet address, IBAN, PayPal email)
- Commission earnings and payout history
- Transaction records
2.4 Usage Data
- Click and conversion tracking data
- Sub-IDs, traffic source identifiers
- Dashboard activity, feature usage
- Device type, browser, operating system
2.5 Cookies & Tracking
See our Cookie Policy for details on cookies and tracking technologies.
3. Legal Basis for Processing
We process your data under the following GDPR legal bases:
- Contract performance (Art. 6(1)(b)) — to provide the Platform, process commissions, and manage your account
- Legal obligation (Art. 6(1)(c)) — KYC/AML compliance, tax reporting
- Legitimate interest (Art. 6(1)(f)) — fraud prevention, platform security, analytics
- Consent (Art. 6(1)(a)) — marketing communications (you can withdraw anytime)
4. How We Use Your Data
- Provide and maintain the Platform
- Process commissions and payouts
- Verify your identity (KYC)
- Detect and prevent fraud
- Send transactional emails (payout notifications, account alerts)
- Improve the Platform and user experience
- Comply with legal obligations
5. Data Sharing
We share your data with:
- Tracknow — affiliate tracking and conversion attribution
- Supabase — database hosting and authentication (EU-based)
- Resend — transactional email delivery
- Vercel — platform hosting
- Advertisers — anonymized conversion data (no personal details)
- Legal authorities — when required by law or court order
We do not sell your personal data to third parties.
6. International Data Transfers
Some of our service providers operate outside the EEA. Where data is transferred outside the EEA, we ensure adequate protection through Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.
7. Data Retention
- Account data: retained while your account is active, plus 5 years after deletion for legal/tax compliance
- KYC documents: retained for 5 years after account closure per AML requirements
- Financial records: retained for 7 years per Cyprus tax law
- Tracking data: retained for 2 years, then anonymized
8. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — where processing is based on consent
To exercise your rights, email contact@affgoat.com. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Access controls and role-based permissions
- Regular security audits
- Secure password hashing
10. Children
The Platform is not intended for persons under 18. We do not knowingly collect data from minors.
11. Changes
We may update this Policy. Material changes will be notified via email or dashboard. Continued use after changes constitutes acceptance.
12. Supervisory Authority
You have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).
13. Contact
THRONE DIGITAL LTD
Efesou 9, Paralimni 5311
Famagusta, Cyprus
Email: contact@affgoat.com