Privacy Notice

Last updated: 5/13/2026

This Privacy Notice explains how Affiliate Mechanic ("we", "us", "our"), located in Burnet County, Texas, USA, collects and uses personal data in connection with the AB Split bot service. Affiliate Mechanic is the data controller for personal data processed through the Service.

1. Information we collect

• Account data — name, email address, password hash, role (owner or affiliate), affiliate slug.
• Test & content data — split tests, variants, images and copy you upload.
• Usage & event data — views, choices, clicks, session identifiers, tier earned, referring affiliate.
• Device & technical data — IP address, browser type, device identifiers, log data.
• Support data — messages and attachments you send when contacting us.

Payment card details are collected and processed by Paddle directly — we do not see or store full card numbers.

2. How we use your information

• To create and manage your account (legal basis: contract performance).
• To deliver the Service, run split tests, attribute affiliate clicks, and apply discounts (contract performance).
• To prevent fraud, abuse, and to maintain security of the Service (legitimate interests).
• To improve the Service and analyze usage trends (legitimate interests).
• To send transactional messages and respond to support requests (contract performance, legitimate interests).
• To send marketing communications, where you have consented or as otherwise permitted by law (consent or legitimate interests).
• To comply with legal obligations (legal obligation).

3. Who we share data with

• Paddle, our Merchant of Record, for sale of subscriptions, payment processing, subscription management, tax compliance, invoicing, and refund handling.
• Service providers / subprocessors — hosting (Lovable Cloud / Supabase), analytics, email delivery, and customer support tooling.
• Professional advisers — legal, accounting, and audit professionals where required.
• Authorities — if required by law, court order, or to protect rights or safety.

We do not sell your personal data.

4. Data retention

We keep personal data for as long as your account is active and as needed to provide the Service. After account closure we retain data only as required to comply with legal obligations, resolve disputes, and enforce our agreements; otherwise it is deleted or anonymised.

5. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. Contact us through the Service to exercise these rights.

6. International transfers

We are based in the United States, and our service providers may process data in the US and other countries. Where we transfer personal data from the UK or EEA, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions where available.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege database policies. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember your session. We may also use limited analytics to understand how the Service is used. You can manage cookies via your browser settings; disabling essential cookies may break the Service.

9. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your country).

10. Changes

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

11. Contact

Affiliate Mechanic — Burnet County, Texas, USA. For privacy questions, contact us through the in-app contact form or the support email listed in the app.