Referral Partner Privacy Policy
What we collect when you sign up as a Profirmo Referral Partner, why we collect it, how long we keep it, and how to exercise your rights.
1. Data we collect
When you sign up as a Referral Partner we collect your full name, email address, phone number, and the IP address of the device you signed up from. We also store the timestamp of your terms acceptance. Once you onboard professionals we record every professional you submit, the onboarding timestamp, and your partner code on each of those records.
2. Why we verify your phone
We send a one-time password (OTP) to your phone via SMS to confirm you control the number. The phone number doubles as your partner code, so verifying it prevents one person from creating multiple Referral Partner identities and protects your earned commission.
3. How we use onboarding activity
We track every professional you onboard so we can credit commission when the admin approves them. Aggregated metrics (total onboarded, approved, rejected) appear on your dashboard and in the admin's partner listing. We do not share your individual onboarding numbers with other Referral Partners.
4. How we use payout records
Every commission credit, payout request, and payout decision is stored against your partner record so you can audit your earnings and so the admin can resolve disputes.
5. Professional data
The professional data you submit during onboarding becomes part of the professional's Profirmo profile, governed by the platform-wide Privacy Policy. We may contact the professional directly to verify the details you submitted. You must confirm at the point of submission that the professional has consented to be contacted by Profirmo for verification.
6. Cookies, analytics & device data
The Referral Partner Portal sets a session cookie for your login and uses standard analytics (Google Analytics) to measure traffic and improve the product. Analytics data is aggregated and pseudonymous; it includes device, browser, and page-view information but no payout-record content. You can disable cookies in your browser, but the portal requires the session cookie to keep you signed in.
7. Cross-border processing
Profirmo's infrastructure is hosted in India (AWS Mumbai region) by default. Some sub-processors used for email delivery, SMS OTP, and analytics may process limited operational data (e.g., your email address, phone number, IP address) outside India, in jurisdictions including the United States and the European Union. We rely on the vendors' contractual safeguards for any such transfer.
8. Data retention
Active Referral Partner records are retained for as long as the account is active. After account closure, identifying personal data (name, email, phone) is retained for 24 months for fraud-prevention and audit purposes, and then deleted or anonymised. Commission, payout, and tax-related records are retained for 8 years to meet statutory record-keeping obligations under Indian law. Onboarded-professional records that have become part of the Profirmo marketplace remain governed by the platform-wide Privacy Policy and may be retained for the lifetime of the professional's Profirmo profile.
9. Security & access
Your account is protected by an OTP-verified password and / or login OTP. Passwords are stored as bcrypt hashes, never in plain text. Only the Profirmo admin team has access to Referral Partner records, and only for legitimate platform-operation purposes.
10. Your rights & contact
You can request a copy of your record, request correction of inaccurate details, or request deletion of your account at any time. Some records (payout history, regulatory records) may be retained beyond account deletion as set out above. To exercise any of these rights, or for any privacy-related question, email privacy@profirmo.com from the email address registered to your account. We aim to respond within 15 business days.