Partner Program Privacy Notice

PlatOps Security, LLC ("PlatOps," "we," "us") runs a partner program: agencies and consultancies introduce companies that need our infrastructure, DevOps and security services, and we pay them commission. This notice explains what personal data that involves, why we use it, how long we keep it and what rights you have. It adds to our Privacy Policy, which covers the rest of our website and services.

This notice is for three groups of people:

• people at a partner business who use the partner portal;
• people whose business contact details a partner gave us when registering an introduction to their company; and
• people who click a partner's referral link.

1. If you use the partner portal

1.1 What we hold

• Your account: your name, business email address, company name and referral code, and the programs you have joined.
• Sign-in: we send single-use sign-in links that expire after 15 minutes, and keep a signed-in session for up to 30 days. There is no password.
• The agreement: which version of the Partner Referral Agreement you accepted, when, and your separate consent to deal electronically.
• Your activity: the introductions you register, clicks on your referral link (counted per day), and your commission, statements and payouts.
• Invoices and tax forms: the invoices you send us, and your IRS Form W-9 or W-8, are kept with our finance records and with the service we use to collect tax forms and file information returns. The portal holds no bank details and no tax identification numbers.

1.2 Why we use it, and on what legal basis

• To run the Partner Referral Agreement with your business: your account, attributing introductions, calculating and paying commission, and sending you statements and notices. Legal basis: performance of a contract, or, where the contract is with your employer, our legitimate interest in running it.
• To keep tax, accounting and payment records. Legal basis: compliance with legal obligations.
• To secure the portal and to prevent fraud and self-referral. Legal basis: our legitimate interests in protecting the program and the partners in it.

We credit commission automatically, by the attribution rules in the agreement. A person at PlatOps reviews any attribution you dispute.

2. If a partner registered you as a contact

When a partner introduces a company to us, they register the company and a person to contact there. If that is you, we did not collect your details from you: the partner named in our first email to you gave them to us.

2.1 What we hold

Your business email address, and your name where the partner gave it; the name and website of your company; any notes the partner added about the opportunity; and whether we accepted the introduction. We ask partners to register business contacts only, and never sensitive information.

2.2 Why we use it, and on what legal basis

• To contact your company about the services the partner thought it needs.
• To record which partner introduced your company, so the right partner is paid and a disagreement between partners can be settled.

Legal basis: our legitimate interests in responding to a business introduction and in running the partner program fairly. We use only business contact details, tell you at our first contact where they came from, and stop contacting you as soon as you ask.

2.3 Your right to object

You can object at any time by replying to our email or writing to legal@platops.com, and we will not contact you about the introduction again. We keep a short record that you objected, so it stays that way, and we keep the registration itself where it supports commission already paid to the partner.

3. If you click a partner's referral link

A referral link (for example on go.platops.com) records a click with a hashed version of your IP address that cannot be linked across days, your browser's user agent and referring page, and the time. Raw click records are deleted after 90 days; partners see only daily totals. If you accept cookies, the partner code is also stored in your browser for up to 90 days. Section 4 of our Privacy Policy explains both, and how to withdraw consent.

If your company later buys from us, we record which partner referred it against your company's billing account, so the partner can be paid. Partners see the commission they earned, not your payment details.

Legal basis: our legitimate interests in paying partners accurately and preventing referral fraud, and your consent for anything stored in your browser.

4. Who we share it with

• The partner concerned. A partner sees whether a company they registered was accepted and the commission they earned. We do not show partners a client's payment details, or which client a referral-link payment came from.
• Service providers who process data on our instructions: Amazon Web Services (hosting and email, in the United States), Stripe (payments), the service we use to collect tax forms and file information returns, and our accountants and legal advisers.
• Where the law requires it, or to establish or defend a legal claim.
• A buyer of our business, if PlatOps is sold or merged, under the same protections.

We do not sell personal data, and we do not share it for advertising.

5. How long we keep it

• Partner accounts, registrations, commission, statements and payments: for as long as the program needs them and, because they support commission paid and our tax records, for six years after the end of the year they relate to.
• Sign-in links and sessions: 15 minutes and 30 days.
• Raw referral click records: 90 days.
• A registered contact who objects: we stop using your details for outreach at once, and keep only what section 2.3 describes.

6. International transfers

We store program data in the United States. Where data protection law of the European Economic Area, the United Kingdom or Switzerland applies to data a partner gives us, the transfer is covered by the European Commission's standard contractual clauses, with the UK and Swiss adaptations, which form part of our Partner Referral Agreement.

7. How we protect it

Program data is encrypted in transit and at rest, and access is limited to the people who run the program. IP addresses from referral clicks are hashed before they are stored, and the portal holds no bank or tax identification details.

8. Your rights

Depending on where you live, you may have the right to access your personal data, correct it, have it deleted, restrict or object to our use of it, receive it in a portable format, and withdraw consent where we rely on it. Where we rely on legitimate interests, you can object, and we will stop unless we have compelling grounds or need the data for a legal claim. You will not be treated differently for exercising a right.

To exercise a right, write to legal@platops.com. We will answer within 30 days. If you are in the EEA, the UK or Switzerland, you may also complain to your data protection authority.

9. Changes to this notice

We will post any change on this page and update the date above. If a change affects partners materially, we will also tell them through the portal.

See also: Privacy Policy | Partner Program