REFERAAFRICA
Log inSign up

Privacy Policy

Last updated: 3 July 2026

1. Who we are

Refera Africa is an affiliate marketing platform operated from Accra, Ghana. In this policy "we", "us", and "the Platform" refer to Refera Africa.

2. What we collect

  • Account data: name, email, country, and password (hashed).
  • Payout data: mobile money number or bank account details you provide.
  • Tracking data: click events (referrer, user agent, hashed IP, hashed device fingerprint) and conversion events (order id, sale amount, product).
  • Communication data: support emails and messages you send us.

3. Why we use it

  • Attribute clicks and sales to the correct affiliate.
  • Detect and prevent fraud (self-referrals, duplicate conversions, bot clicks).
  • Pay commissions and issue receipts.
  • Send transactional emails (welcome, earnings, payouts, password reset).
  • Improve the product and comply with legal obligations.

4. Legal basis

We process data to perform the contract you enter with us, to comply with law, and for our legitimate interests in fraud prevention and platform improvement.

5. Cookies

When someone clicks your affiliate link we set two first-party cookies (aff_ref and aff_dev) valid for 30 days. They exist solely to give you credit for a sale. No third-party advertising cookies are set by the Platform.

6. Sharing

We share data only with: (a) infrastructure providers (Supabase, hosting, email delivery) under confidentiality; (b) the merchant of a product you promoted, limited to attribution data needed to pay you; (c) authorities when legally required.

7. Retention

Account and financial records are retained for 7 years to satisfy tax and audit obligations. Click and device-hash data are retained for 24 months, then aggregated or deleted.

8. Security

Data is encrypted in transit (HTTPS) and at rest. Access is restricted with row-level security and role-based controls. Fraud triggers block duplicate and self-referral conversions automatically.

9. Your rights

You may access, correct, export, or delete your personal data. Email notify@refera.africa and we will respond within 30 days.

10. Children

Refera Africa is not directed to children under 18 and we do not knowingly collect their data.

11. Changes

We will notify you by email of material changes at least 14 days before they take effect.