Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: When you sign up via Google OAuth, we collect your email address, name, and Google profile picture
• Profile Information: Display name, bio, website, location (all optional)
• User Content: Referral codes you submit, ratings, and feedback
• Featured Company Information: If you purchase a featured listing, we collect company details and payment information (processed by Stripe)
• Communications: Messages sent through our contact form or support system

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, interaction with referral codes
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication, preference cookies for settings

1.3 Third-Party Services

• Google OAuth: For authentication (see Google's Privacy Policy)
• Stripe: For payment processing (we don't store credit card details)
• Sentry: For error tracking and performance monitoring
• Vercel Analytics: For anonymous usage statistics

2. How We Use Your Information

2.1 To Provide Our Service

• Create and manage your account
• Display your referral codes in our fair rotation system
• Process featured company listings and payments
• Send email verification and password reset emails
• Track usage statistics for your referral codes

2.2 To Improve Our Platform

• Analyze usage patterns to improve features
• Fix bugs and technical issues
• Develop new features based on user behavior
• Ensure fair rotation algorithm effectiveness

2.3 To Communicate With You

• Service announcements and updates
• Security alerts and account notifications
• Response to support requests
• Marketing communications (with your consent)

3. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share your information in these circumstances:

• Public Profile: Your display name and public referral codes are visible to all users
• With Your Consent: When you explicitly agree to sharing
• Service Providers: With trusted third parties who help us operate our platform (under confidentiality agreements)
• Legal Requirements: To comply with laws, regulations, or valid legal requests
• Protection of Rights: To protect the rights, property, or safety of ReferMeHub, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Data Retention

We retain your information for different periods depending on the type:

• Account Information: Retained while your account is active and for 30 days after deletion
• Referral Codes: Retained until you delete them or your account is closed
• Usage Logs: Retained for 90 days for security and debugging
• Payment Records: Retained for 7 years for tax and legal compliance
• Communications: Retained for 2 years or as required by law

5. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Encrypted database storage
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis
• Secure authentication via Google OAuth
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your personal information through your profile page.

6.2 Data Portability

You can request a copy of your data in a machine-readable format.

6.3 Deletion

You can delete your account and associated data through your profile settings or by contacting us.

6.4 Opt-Out

• Marketing emails: Use the unsubscribe link in any marketing email
• Cookies: Adjust your browser settings to refuse cookies
• Analytics: Use browser privacy extensions to block analytics

7. GDPR Rights (European Users)

If you are in the European Economic Area, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limited processing of your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@refermehub.com

8. CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To make a request, contact us at privacy@refermehub.com or use our contact form.

9. Children's Privacy

ReferMeHub is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by:

• Posting a notice on our website
• Sending an email to registered users
• Updating the "Last updated" date

Your continued use after changes indicates acceptance of the updated policy.

12. Contact Us