Legal
Privacy Policy
Last updated: September 2026. This policy explains what data Referable collects, why, and the control you have over it.
1. Who we are
Referable (“we”, “us”) provides referral and affiliate program software for apps built with Lovable. When you create a Referable workspace, we act as the controller of your account data and as a processor of the referral data your app sends us on your behalf.
2. What we collect
Account data
- Your name, email address and authentication details when you sign up.
- Your workspace name and your app’s public address, supplied automatically when you connect Lovable.
- Program configuration: reward rules, offers, currency and payout settings you create.
Referral data (processed for you)
- Referrer details your app sends us: name, email address and their unique referral code.
- Referral events: link visits, sign-ups, payments (amount and currency), refunds and reward status.
- Technical identifiers needed for attribution, such as the referral code stored in the visitor’s browser.
Connection credentials
- API keys you connect (for example Tremendous) are stored encrypted and used only to perform the actions you request, such as sending a cash reward.
3. How we use it
- To attribute referrals to the right referrer and calculate rewards.
- To show you analytics, referral history and reward ledgers in your dashboard.
- To operate and secure the service, prevent fraud (such as self-referrals) and provide support.
- To send essential service emails, such as sign-in links. We do not sell your data or use it for advertising.
4. Cookies and browser storage
The tracking snippet your app serves stores the referral code in the visitor’s browser for up to 60 days so the right referrer is credited if the visitor signs up later. It does not track visitors across other websites.
5. Sharing
We share data only with the service providers needed to run Referable (hosting, database and authentication infrastructure, and payout providers such as Tremendous when you choose to send cash rewards). We do not sell personal data.
6. Retention and deletion
We keep your data while your account is active. You can delete programs, referrers and referrals from your dashboard at any time, and you can ask us to delete your account and all associated data by contacting us. Deleting a program keeps anonymised history in reports where needed for accurate records.
7. Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. Contact us to exercise any of these rights.
8. Security
Data is encrypted in transit and at rest. Access to production systems is restricted, and secret keys are never exposed to the browser or to connected AI tools.
9. Changes
If we make material changes to this policy we will update the date above and, where appropriate, notify you by email.
10. Contact
Questions about this policy or your data? Email us at privacy@referable.dev.