Privacy Policy

1. What we collect

When you use the Site, we collect:

• Account info: email address and a salted hash of your password. Optional: display name, company name, contact name, website, billing email.
• Content you create: reviews, ratings, replies, AI chat messages, claim/edit submissions.
• Usage data: aggregate page views, referral-link clicks, and banner impressions/clicks (counted per day, not per individual).
• Technical data: IP address (in server logs only, retained briefly), user agent, and a server-side session cookie for keeping you signed in.
• Inbound email: if you email [email protected], the message and headers are stored so we can respond.

2. How we use it

• Operate the Site: serve pages, authenticate sessions, render reviews and listings.
• Send transactional email: account verification, password reset, replies to your messages.
• Send promotional email only if you opted in at signup. You can unsubscribe at any time.
• Improve the Site: aggregate analytics on which networks affiliates view and click.
• Moderate content and prevent abuse.

3. Cookies

We use a single first-party session cookie (cpanet_sess) to keep you signed in. It's HTTP-only, SameSite=Lax, and (on HTTPS) marked Secure. We don't currently use third-party advertising or tracking cookies. If that changes, this policy will be updated and shown on the Site.

4. Email

Outbound mail is delivered through Resend (resend.com), which acts as our email service provider. Inbound mail to addresses on cpa.network is also routed through Resend before being stored on our servers. Resend processes the message contents to deliver and parse them; their privacy practices apply alongside ours.

5. AI Affiliate Manager

When you ask a question of the on-page AI assistant, your message and the network's public profile/reviews are sent to OpenAI to generate a response. We store the conversation transcript on our servers (associated with your account, or with an anonymous session ID if you're not signed in). We don't send your account email or other personal identifiers to OpenAI.

6. Sharing

We do not sell your personal data. We share data only with:

• Service providers we depend on to run the Site (hosting, email delivery, AI inference). Each is bound by their own contract and privacy practices.
• Authorities when legally required to do so.
• The public, in the case of content you publish on the Site (reviews, replies, public-profile fields).

7. Affiliate referral links

When you click a network's “Visit” link, we record an aggregate click count and redirect you to the network's site (with a referral identifier). We do not pass your email or account ID to the network. The network's own cookies and analytics may apply once you're on their site.

8. Data retention

We keep account data for as long as your account is active. Reviews and replies remain published unless you ask us to remove them or they're moderated off the Site. Server access logs are kept briefly for diagnostics, then rotated. AI chat transcripts are retained for quality and product improvement.

9. Your rights

You can request access to, correction of, or deletion of your personal data via our contact page. Where applicable (GDPR, CCPA, similar), you also have the right to object to certain processing and to lodge a complaint with a supervisory authority. We'll respond within 30 days.

10. Children

cpa.network is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we'll remove it.

11. Security

Passwords are stored hashed with bcrypt. Sessions use HTTP-only cookies and CSRF tokens. We use HTTPS for all traffic. No system is perfectly secure — if we ever suffer a breach affecting your data, we'll notify you promptly.

12. Changes

We may update this policy occasionally. Material changes will be announced on the Site or by email. The “Last updated” date at the top reflects the latest revision.

13. Contact

Questions or requests? Use our contact page.