Privacy policy

01Who we are

Appsify is affiliate and referral program software for apps sold on app marketplaces. It is operated by Importify Limited. Contact details are at the end of this policy.

The Service has three kinds of users: app owners, who run an affiliate program for their app; affiliates, who promote an app and earn commission; and merchants, the customers of an app who are referred by an affiliate.

02Our role for program data

For your account, billing and our website, we decide how information is used and act as the controller.

When an app owner runs an affiliate program on Appsify, information about that program’s affiliates, referrals and merchants is processed to run the owner’s program. For that information we act as a service provider (processor) for the app owner, who is responsible for having a lawful basis to send it to us and for telling their affiliates and merchants about it.

03Information we collect

From app owners:

• account details: name, email address and password (stored only as a secure hash);
• app details: app name, install URL, logo, commission settings and program status;
• API keys you generate (stored only as a secure hash, shown to you once);
• plan and billing status for each app. Payments are processed by PayPro Global; we receive order and subscription details, not your full card details.

From affiliates:

• account details: name, email address and password (stored only as a secure hash);
• your referral code, the programs you have joined, and your PayPal email address for payouts;
• referrals, commissions, balances, payout requests and payout history.

About merchants, sent to us by a connected app or collected through referral links:

• the platform and a store identifier, such as the shop domain or store URL;
• the referral code the merchant entered, if any;
• the IP address of an install or of a click on a referral link, used to match an install to an affiliate;
• billing events for that merchant: amounts, currency, dates, event type (charge, recurring charge, refund, chargeback, cancellation) and the provider’s event ID. For Shopify apps, charges may be retrieved from the Shopify Partner API.

Technical and support information:

• server logs and session records: IP address, browser user agent, pages requested and timestamps;
• messages you send to our support address.

appsify.com is a static website. It does not use analytics, advertising or tracking cookies, and it does not collect personal information beyond standard server logs. See our Cookie policy.

04How we use information

• to provide the Service: attribute referrals to the right affiliate, calculate commissions, apply the holding period, record refunds and chargebacks, and show balances and payout requests;
• to let app owners review and approve payouts to their affiliates;
• to manage accounts, plans and billing;
• to keep the Service secure, prevent fraud and duplicate payments, and investigate abuse;
• to answer support requests;
• to meet legal, tax and accounting obligations and to resolve disputes.

We do not sell personal information, and we do not use it for advertising.

05Legal bases

Where the GDPR or UK GDPR applies, we rely on:

• contract: to provide the Service you signed up for;
• legitimate interests: to secure the Service, prevent fraud, attribute referrals accurately and improve the Service;
• legal obligation: to keep financial records and respond to lawful requests;
• the instructions of the app owner, for program data we process on their behalf.

06Who we share information with

• App owners: an owner sees the affiliates in their program, the referrals and commissions attributed to them, and the PayPal email an affiliate provides for payouts.
• Affiliates: an affiliate sees their own referrals, commissions, balances and payouts.
• PayPro Global, which processes subscription payments for Appsify plans.
• PayPal, which app owners use to pay their affiliates.
• Shopify, when we retrieve app charges through the Shopify Partner API.
• Our hosting provider, Cloudways, which runs our servers on DigitalOcean infrastructure.

We may also disclose information when the law requires it, to protect the rights and safety of our users or others, to enforce our terms, or as part of a merger, acquisition or sale of assets.

07International transfers

Importify Limited is based in Hong Kong, and our service providers may process information in other countries, including the United States and the European Union. Where required, we use appropriate safeguards for these transfers, such as standard contractual clauses.

08How long we keep information

• Commission ledger entries, transactions and payout records are kept for as long as needed for accounting, tax and dispute purposes. The ledger is append-only: entries are corrected by new entries, not edited.
• Account and program information is kept while the account is active and deleted or anonymised after the account is closed, except where we must keep it for the reasons above.
• Referral click records are used to match installs within 30 days of a click and are kept only as long as needed for attribution and dispute handling.
• Server logs and session records are kept for a short period for security and troubleshooting.

09Security

The Service runs over HTTPS. Passwords and API keys are stored only as secure hashes, access to program data is limited to the owner and affiliates of that program, and billing events are recorded once, so a repeated event cannot be paid twice. No system is perfectly secure, so please keep your password and API keys private and tell us if you think they have been exposed.

10Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict some processing, and to complain to your data protection authority.

To make a request, email support@appsify.com. We may need to verify your identity first. If your information is part of an app owner’s affiliate program, we may refer your request to that owner, who is responsible for that program.

11Children

The Service is for businesses and adults. It is not directed at anyone under 18, and we do not knowingly collect information from children.

12Changes to this policy

We may update this policy when the Service changes or the law requires it. The updated version will be posted on this page with a new date. If a change is significant, we will tell account holders before it takes effect.

13Contact

Importify Limited, Unit 1603, 16th Floor, The L. Plaza, 367-375 Queen’s Road Central, Sheung Wan, Hong Kong.

Email: support@appsify.com