Privacy Policy

What we collect

• Account data: your email address, username, display name and bio when you create an account.
• Referral content: the referral URLs, codes, reward descriptions and categories you choose to publish.
• Anonymous analytics: when someone clicks a referral, we store an anonymous session identifier, a timestamp, and the referring site when the browser provides it. We do not store IP addresses, device fingerprints or any directly identifying visitor data.

What we never do

• No invasive fingerprinting or cross-site tracking. Optional analytics and advertising conversion measurement run only after you accept them.
• We never sell your personal data or provide your direct identifiers to advertisers for their own direct marketing.
• We never expose your email address on your public profile.

Your rights

• You can edit or delete your referrals at any time from your dashboard. You may request a full export or deletion of your account data by contacting us. The application is structured so GDPR-style access, rectification and erasure workflows can be expanded without schema changes.

Data processing

• Production data is stored in PostgreSQL via Supabase with row-level security. Authentication is handled by Supabase Auth. Analytics remain private to each profile owner and are never published.

Email communications and marketing preferences

• ReferTree may send essential account and service emails needed to operate your account, such as security messages, password resets, important account notices and legally required service communications.
• We may also send limited tips and product reminders related to your use of ReferTree, such as a reminder to add your first referral or complete your profile. These messages stay related to the service and can be disabled at any time in Settings.
• Promotional emails — including selected ReferTree offers, boosted rewards and selected partner deals sent by ReferTree — are sent only if you actively opt in. The option is unchecked by default. You can withdraw consent at any time in Settings or using the unsubscribe option in promotional emails. ReferTree does not provide your email address to partners for their own direct marketing unless you separately and explicitly agree. To document your choice, we may retain the consent status together with its date, source, language and version.

Contact and collaboration messages

When you use our contact form, we process your name, optional company, email address and message only to review your enquiry and reply. Form delivery is handled by a third-party form delivery provider for transmission and spam prevention.

Sign in with Google

If you continue with Google, Google provides ReferTree with your verified email address and basic profile information, such as your name and profile picture. We use this information only to authenticate you and prepare your ReferTree profile. Your email address is never published.