Privacy Policy

1. Introduction

Welcome to Comparro. This Privacy Policy explains how [COMPANY NAME] ("Comparro," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our platform at comparro.com (the "Platform").

We are committed to protecting your privacy and handling your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Platform.

2. Information We Collect

We collect several types of information from and about users of our Platform:

2.1 Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Full name (optional)
• Profile information (e.g., website URL, company name)
• Account type (Publisher or Advertiser)
• Payment information (for payouts and billing)

2.2 Usage Data

We automatically collect information about how you interact with the Platform:

• Widget views, clicks, and conversions
• Dashboard activity and feature usage
• Performance metrics (conversion rates, revenue)
• Traffic sources and referral information

2.3 Technical Data

When you access the Platform or embed Widgets, we collect technical information including:

• IP address (anonymized where possible)
• Browser type and version
• Device type and operating system
• Referring URL and exit pages
• Date and time of access
• Approximate geographic location (country/region level)

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to provide functionality, analyze usage, and track affiliate conversions. See Section 5 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Provide and Improve Services

• Authenticate your identity and manage your account
• Enable Widget embedding and affiliate tracking
• Process commission payments and payouts
• Provide customer support and respond to inquiries
• Analyze performance and optimize Widget rankings
• Detect and prevent fraud, abuse, and security threats

3.2 Communication

• Send transactional emails (account notifications, payout confirmations)
• Provide important updates about the Platform
• Respond to support requests and feedback
• Send marketing communications (with your consent, and you may opt out at any time)

3.3 Legal and Compliance

• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and protect our rights
• Resolve disputes and investigate complaints

4. Sharing Your Information

We may share your information in the following circumstances:

4.1 With Other Users

Certain information is visible to other users of the Platform:

• Publishers: Widget performance data (anonymized) may be visible to Advertisers for optimization purposes
• Advertisers: Offer performance metrics may be visible to Publishers in Widget dashboards

We do not share personally identifiable information (email addresses, payment details) with other users without your explicit consent.

4.2 With Service Providers

We work with trusted third-party service providers to help us operate the Platform:

• Supabase: Authentication, database, and storage services
• Vercel: Hosting and content delivery
• Payment processors: For handling payouts and billing (e.g., Stripe, PayPal)
• Analytics providers: To analyze usage and improve the Platform

These service providers are bound by confidentiality agreements and may only use your information to provide services on our behalf.

4.3 For Legal Requirements

We may disclose your information if required by law or in response to:

• Legal process (subpoenas, court orders)
• Requests from law enforcement or government authorities
• Investigations of fraud, security threats, or Terms of Service violations
• Protection of our rights, property, or safety, or that of others

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on the Platform before your information is transferred.

5. Cookies and Tracking

We use cookies and similar tracking technologies to provide functionality and track affiliate conversions.

5.1 Types of Cookies We Use

• Essential cookies: Required for authentication and core functionality
• Affiliate tracking cookies: Track Widget clicks and attribute conversions to Publishers
• Analytics cookies: Help us understand how users interact with the Platform
• Preference cookies: Remember your settings and preferences

5.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. However, disabling cookies may affect the functionality of the Platform, particularly affiliate tracking and authentication.

6. Third-Party Services

The Platform integrates with third-party services that have their own privacy policies:

• Supabase: Authentication, database, and backend services (Privacy Policy)
• Vercel: Hosting and CDN services (Privacy Policy)
• Google OAuth: For authentication (Privacy Policy)

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

7. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Access controls: Limited access to personal data based on role and necessity
• Authentication: Secure authentication with support for two-factor authentication (2FA)
• Monitoring: Continuous monitoring for security threats and unauthorized access

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to provide the Platform and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

• Account data: Retained while your account is active, plus 90 days after deletion
• Transaction records: Retained for 7 years for tax and legal compliance
• Analytics data: Aggregated data may be retained indefinitely for research and optimization

If you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

9.1 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for data processing at any time

9.2 CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know: Request information about the personal data we collect and how it is used
• Delete: Request deletion of your personal data
• Opt-out: Opt out of the sale of your personal data (we do not sell personal data)
• Non-discrimination: Not be discriminated against for exercising your rights

9.3 Exercising Your Rights

To exercise any of these rights, please contact us at support@comparro.com. We will respond to your request within 30 days.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information as soon as possible.

11. International Transfers

Your personal information may be transferred to and processed in countries other than your country of residence, including [REGION], where our servers and service providers are located.

These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated Privacy Policy on the Platform
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification (for significant changes)

Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.