Legal

Privacy Policy

Last updated: September 2026. This policy explains what data Referable collects, why, and the control you have over it.

1. Who we are

Referable (“we”, “us”) provides referral and affiliate program software for apps built with Lovable. When you create a Referable workspace, we act as the controller of your account data and as a processor of the referral data your app sends us on your behalf.

2. What we collect

Account data

  • Your name, email address and authentication details when you sign up.
  • Your workspace name and your app’s public address, supplied automatically when you connect Lovable.
  • Program configuration: reward rules, offers, currency and payout settings you create.

Referral data (processed for you)

  • Referrer details your app sends us: name, email address and their unique referral code.
  • Referral events: link visits, sign-ups, payments (amount and currency), refunds and reward status.
  • Technical identifiers needed for attribution, such as the referral code stored in the visitor’s browser.

Connection credentials

  • API keys you connect (for example Tremendous) are stored encrypted and used only to perform the actions you request, such as sending a cash reward.

3. How we use it

  • To attribute referrals to the right referrer and calculate rewards.
  • To show you analytics, referral history and reward ledgers in your dashboard.
  • To operate and secure the service, prevent fraud (such as self-referrals) and provide support.
  • To send essential service emails, such as sign-in links. We do not sell your data or use it for advertising.

4. Cookies and browser storage

The tracking snippet your app serves stores the referral code in the visitor’s browser for up to 60 days so the right referrer is credited if the visitor signs up later. It does not track visitors across other websites.

5. Sharing

We share data only with the service providers needed to run Referable (hosting, database and authentication infrastructure, and payout providers such as Tremendous when you choose to send cash rewards). We do not sell personal data.

6. Retention and deletion

We keep your data while your account is active. You can delete programs, referrers and referrals from your dashboard at any time, and you can ask us to delete your account and all associated data by contacting us. Deleting a program keeps anonymised history in reports where needed for accurate records.

7. Your rights

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. Contact us to exercise any of these rights.

8. Security

Data is encrypted in transit and at rest. Access to production systems is restricted, and secret keys are never exposed to the browser or to connected AI tools.

9. Changes

If we make material changes to this policy we will update the date above and, where appropriate, notify you by email.

10. Contact

Questions about this policy or your data? Email us at privacy@referable.dev.