Privacy Policy

1. Who we are

Rolindip is an affiliate marketing network operated by Voliom LLC, 1001 E Main St, Richmond, VA, United States. This policy explains what we collect, why, and what control you have. Questions or requests: privacy@rolindip.com.

2. Account data

When you create an advertiser or publisher account we collect your name, email address, country, and the business or channel details you choose to provide (website URLs, social handles, follower counts, a profile image). Publishers who request payouts also provide payment details, which are held by our payment providers rather than by us.

3. Tracking data

When someone clicks a Rolindip tracked link we record a click identifier, the time, the destination, the referring page, the browser user agent, the IP address, and the country and network derived from it. We use this to attribute a sale to the publisher who drove it, to calculate commission, and to detect fraud.

We set a first-party cookie on our own tracking domain containing the click identifier. We do not use third-party cookies, we do not build advertising profiles, and we do not track people across sites unrelated to the link they clicked.

4. Conversion data from merchants

When a merchant integrates their store — through our Shopify app, our WooCommerce plugin, or a server postback — their platform sends us the order identifier, order value, currency, and the Rolindip click identifier associated with the sale.

We do not receive shoppers’ names, email addresses, phone numbers, shipping addresses, or payment details. A shopper who buys from a store using Rolindip is not identifiable to us; we know only that an order of a given value was placed after a particular click.

5. Why we may process this data

To provide the service under our contract with you; for our legitimate interest in preventing fraud and keeping the network secure; and to meet legal, accounting and tax obligations. Where consent is required for a cookie or similar technology, it is collected by the site placing it.

6. Who we share it with

Advertisers see the publisher who drove each sale and the transaction details, but not shopper data (we hold none). Publishers see their own clicks, conversions and earnings. We use service providers to run the platform: Cloudflare (hosting and edge delivery), Supabase (database), Stripe and PayPal (payments and payouts), and Brevo (transactional email). Each processes data only on our instructions. We do not sell personal data.

7. International transfers

Our providers operate globally, so data may be processed outside your country, including in the United States. Where required, transfers rely on Standard Contractual Clauses or another approved safeguard.

8. How long we keep it

Account data is kept while your account is open and for up to seven years afterwards where financial records require it. Click and conversion records are kept for up to 24 months, which covers commission validation, refund windows and dispute resolution. Aggregated statistics that cannot identify anyone may be kept longer.

9. Your rights

Depending on where you live, you may request access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing. If you are in California, you may request disclosure of the categories collected and opt out of any sale or sharing — we do neither. Email privacy@rolindip.com and we will respond within the period the applicable law requires. You may also complain to your local data protection authority.

10. Merchants and shopper requests

If you are a merchant using our Shopify app or WooCommerce plugin, you are the controller of your shoppers’ data and we are your processor for the limited order data described in section 4. Shopify’s customer data request, customer redact and shop redact webhooks are implemented; because we store no shopper personal data, a customer request returns nothing to disclose and a redact request has nothing to erase. A shop redact request deletes the store’s stored credentials and mapping.

11. Security

Data is encrypted in transit. Tenant separation is enforced at the database layer rather than in application code. Signing secrets are encrypted at rest, and external writes are authenticated and idempotent. No system is perfectly secure, but we design so that a single mistake does not expose another tenant’s data.

12. Children

Rolindip is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a minor has an account, contact us and we will remove it.

13. Changes

We will update this page when our practices change and revise the date above. Material changes affecting account holders will also be sent by email.

14. Contact

Voliom LLC, 1001 E Main St, Richmond, VA, United States · privacy@rolindip.com