This policy explains what we do with your personal data when you use profit.ninja, apply to the network, or contact us. It applies to the public website and the affiliate dashboard.
01 Who we are
Profit Ninja operates the affiliate network described on this website. For the purposes of the General Data Protection Regulation (GDPR), Profit Ninja is the controller of the personal data described below.
Full corporate details of the operating entity are made available to registered publishers inside the affiliate dashboard.
You can reach us about anything in this policy at [email protected].
02 Data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Name, email address, company details, messaging handles, the traffic sources and promotion methods you declare. | You, at sign-up and in your dashboard profile. |
| Payout data | Payment method and the details needed to pay you (wallet address or bank details), invoices and billing documents. | You, when you request a withdrawal. |
| Campaign data | Clicks, conversions, their status, and the performance statistics tied to your account. | Generated as you send traffic. |
| Enquiry data | Name, email, company, website, vertical and the message you send us. | You, through the contact and advertiser forms. |
| Technical data | IP address, browser and device information, and server log entries. | Collected automatically when you use the site. |
We do not ask for, and do not want, special categories of data (such as health, political opinions or biometric data). Please do not send them to us.
03 Why we process it
| Purpose | Legal basis |
|---|---|
| Creating and running your account, giving you access to campaigns, tracking conversions and paying you. | Performance of a contract (Art. 6(1)(b) GDPR) — the agreement set out in our Terms of Service. |
| Reviewing your application and verifying your traffic sources. | Steps taken at your request before entering into a contract (Art. 6(1)(b)). |
| Answering enquiries sent through our forms. | Legitimate interest (Art. 6(1)(f)) — responding to people who contact us. |
| Detecting and investigating fraud, protecting the network and our advertisers. | Legitimate interest (Art. 6(1)(f)) — running the network securely and honestly. |
| Keeping accounting and tax records. | Legal obligation (Art. 6(1)(c)). |
| Establishing, exercising or defending legal claims. | Legitimate interest (Art. 6(1)(f)). |
Providing your data is voluntary, but without it we cannot conclude or perform the agreement.
04 Who we share it with
- Advertisers — where necessary to run a campaign you have joined, to validate your conversions and to resolve disputes about them.
- Service providers acting on our behalf — hosting, email delivery, and the tracking platform that runs the network. They process data on our instructions only.
- Google — our forms use Google reCAPTCHA to block automated abuse, and our pages load fonts from Google. This means your IP address and some browser data reach Google. See the Cookie Policy.
- Authorities — where we are legally required to disclose data.
We do not sell your personal data, and we do not share it for third-party advertising.
05 International transfers
Your account and payout data are not routinely transferred outside the European Economic Area. Where a service provider we rely on — such as Google, for reCAPTCHA and fonts — processes data outside the EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
06 How long we keep it
- Account and campaign data — for as long as your account is active, and afterwards for the limitation period applicable to potential claims between us.
- Billing and tax records — for the period required by tax law.
- Enquiries — for as long as needed to handle them, and then for a reasonable period in case you follow up.
- Server logs — for a short period, for security and diagnostics.
You may close your account at any time by contacting the Administrator, who will delete the account and clear the associated data, except where we must keep records to meet a legal obligation or to defend a claim.
07 Your rights
Under the GDPR you have the right to:
- Access your data and receive a copy of it.
- Rectify data that is inaccurate or incomplete.
- Erase your data, where one of the grounds in Art. 17 applies.
- Restrict processing in the circumstances set out in Art. 18.
- Port your data to another controller, in a structured, machine-readable format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time, where processing is based on consent. This does not affect processing carried out before the withdrawal.
To exercise any of these, write to [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.
08 Security
We apply technical and organisational measures appropriate to the risk, including encryption of traffic in transit, access controls on the dashboard, and restricting internal access to payout data to the people who need it. No system is perfectly secure, and we do not claim otherwise — but if a breach affects your rights, we will notify you and the supervisory authority as the GDPR requires.
09 Cookies
This website uses a small number of cookies, all of them necessary for it to work, plus cookies set by Google reCAPTCHA on pages with a form. There is no advertising or analytics tracking on the public website. The full list is in our Cookie Policy.
10 Children
The network is a business service for adults. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
11 Changes to this policy
We may update this policy. The current version is always the one published on this page, and the "last updated" date at the top reflects the most recent change. If a change materially affects you, we will tell you by email or through the dashboard.
12 Contact
Questions, requests or complaints about this policy: [email protected], or through our contact page.