Privacy Policy

Last updated: 13 Dicembre 2025

Data Controller

The Data Controller is:

Marco Contin

Via Po 2, 35036 Montegrotto Terme (PD), Italy

Tax Code: CNTMRC92A26L378J

Email: privacy@afflyt.io

The Data Controller is responsible for ensuring that personal data is processed in compliance with GDPR (EU Regulation 2016/679) and applicable Italian law.

Data Collected

We collect the following categories of personal data:

Registration data

Full name
Email address
Password (encrypted)

Usage data

Access and activity logs
Automation configurations
Aggregated performance and analytics

Technical data

IP address
Browser and device type
Technical and preference cookies

Integration data (optional)

Telegram bot tokens (encrypted)
Amazon affiliate tags

Purpose of Processing

Your personal data is processed for the following purposes:

Service provision

To allow you to use the Afflyt platform and its features.

Service communications

To send you important notifications about your account and the service.

Service improvement

To analyze usage and improve the platform.

Legal obligations

To comply with legal and tax obligations.

Legal Basis

Processing of your data is based on:

•Contract performance (Art. 6.1.b GDPR): to provide you the requested service
•Consent (Art. 6.1.a GDPR): for analytics and marketing cookies
•Legitimate interest (Art. 6.1.f GDPR): for security and fraud prevention
•Legal obligation (Art. 6.1.c GDPR): for tax and regulatory compliance

Retention Period

Your personal data is retained for the following periods:

Account dataUntil account deletion

Security logs12 months

Tax data10 years (legal requirement)

Aggregated analytics24 months

Your Rights

Under GDPR, you have the following rights:

Right of access (Art. 15)

Request a copy of your personal data

Right to rectification (Art. 16)

Correct inaccurate or incomplete data

Right to erasure (Art. 17)

Request deletion of your data

Right to portability (Art. 20)

Receive your data in a structured format

Right to object (Art. 21)

Object to marketing processing

Right to lodge a complaint

File a complaint with the supervisory authority

To exercise your rights, write to privacy@afflyt.io. We will respond within 30 days.

Extra-EU Transfers

Your data is stored on servers located in the European Union (Netherlands). In case of transfers to third countries, we adopt the following safeguards:

•Standard contractual clauses (SCC) approved by the European Commission
•Verification of required supplementary measures
•Selection of providers with appropriate certifications

Security Measures

We adopt the following technical and organizational measures to protect your data:

TLS 1.3 encryption for all communications

AES-256 encryption for sensitive data (tokens, credentials)

Daily encrypted backups

Rate limiting and anti-DDoS protection