Yelku1. Who we are
PT DWIPA MESARI GLOBAL, publishing as Dwipt, is the controller of personal information in the Yelku affiliate program. Contact: support@yelku.com. Postal address: Br. Tengah, Blahbatuh, Gianyar 80581, Bali, Indonesia. This notice covers the application, the partner portal, tracking links, and commission. It does not replace the Yelku application privacy policy, which covers the budgeting app itself.
2. What we collect
From you: name, email address, the language of your content, the platform, the handle, and the time you accepted these terms and which version. After acceptance: a password hash (not the password in clear text), a sign-in session, and, if you enter it, a PayPal email. If you ask to change that PayPal email, we store the proposed address, a hash of the confirmation token, when the token expires, and whether you confirmed it. If you turn on an authenticator, we store an encrypted secret and hashes of recovery codes, not the recovery codes in clear text. From the Program: clicks on your tracking link (time, a hash of the IP address, country and language when the network provides them, a visitor identifier, and a referring address when the browser sends one), conversions attributed to your link, commission, holds, refunds, and withdrawals. If you ask to leave, we store a hash of the confirmation token and whether it was used. We do not receive your payment-card number. We do not log into your social account.
3. Why
We use this information to take and review applications, to keep a handle from being registered twice, to attribute sales, to calculate and pay commission, to send the emails these Terms describe (acceptance, a request that you leave, your own leaving confirmation, and a PayPal-change confirmation), to sign you in, to let you use an authenticator if you turn one on, and to keep a record of the Terms you accepted. The basis is the contract in the Program Terms, and our legitimate interest in preventing a second claim on a handle and in securing sign-in and payouts. Where a law requires consent for a particular cookie, we do not rely on that consent for operating the tracking link you asked us to issue.
4. Who receives it
PayPal receives the PayPal email and the rupiah amount when you withdraw. Our email provider receives the messages we send you. A hosting provider stores the database. We do not sell personal information. We may disclose information if the law requires it.
5. How long
We keep the application, the handle, the acceptance record, and commission records for as long as the place in the Program is open and afterwards for as long as we need them for payment disputes, tax, and to stop that handle being claimed again by someone else. Click records follow the same retention as the console that stores them. A leaving-confirmation token expires after seven (7) days if unused. A PayPal-change token expires after twenty-four (24) hours if unused.
6. Your requests
You may ask us to access, correct, or delete personal information that the Program does not still need for a live handle, an unpaid or disputed commission, or the handle lock in section 4 of the Program Terms. Email support@yelku.com. You may also leave under section 11 of the Program Terms. Mandatory law of your country may give you additional rights, including, where the GDPR or UK GDPR applies, the right to complain to a supervisory authority. Our EEA contact for the Yelku consumer service is named in the Yelku privacy policy; you may use the same email above for the Program.
7. Security
Passwords are stored as a salted hash. An authenticator secret, if you turn one on, is stored encrypted. Mailbox and similar secrets are encrypted. No method of transmission or storage is perfectly secure. You must keep your email account, your password, and any authenticator or recovery code to yourself, and you must change the password in the portal if you believe it has been exposed.