Privacy Policy

• Name and email address when you register
• Promo codes and related information you submit
• Feedback and comments you provide
• Usage and performance data (including optional analytics when you allow it)
• Technical data such as IP address, browser type, and approximate region when required for security and operations
• Mobile phone number when you provide it for SMS notifications, referral programs, or referDot Pro business follow-ups (with your consent)
• Billing email, subscription tier, and payment-related identifiers when you subscribe to referDot Pro (card details are collected and stored by Stripe, not on referDot servers)
• Pro owner policy acceptances: when a workspace owner signs the Owner Messaging & Communications Responsibility Policy, we store the policy version, acceptance date/time, account identity, workspace name, IP address, user agent, and related metadata for compliance and dispute records (retained for platform administration; not shown in the workspace activity log)
• Donation amount and email when you make a voluntary donation via Stripe Checkout

• Provide, maintain, and improve our services
• Send technical notices, support messages, and SMS you have opted into (account verification, security alerts, and referDot Pro referral or follow-up messages)
• Send deal and update emails or texts when you select the separate marketing checkboxes at signup (they start unchecked; you must opt in). Deal notes use a weekly schedule by default. You can turn email or texts off, change cadence, or unsubscribe on your profile anytime; for SMS you can also reply STOP. Account/security messages may still be sent
• Record Terms and Privacy acceptance at signup (version and timestamp) for compliance
• Process referDot Pro subscriptions, invoices, cancellations, and plan changes via Stripe
• Respond to your comments and questions
• Monitor and analyze trends, product performance, and (where permitted) aggregated commercial demand

We do not sell your name, email address, or other information that directly identifies you to third parties for their own marketing. We may share personal information when you have given clear consent, when required by law, or with service providers who assist us under confidentiality and data processing obligations.

We may prepare and share aggregated or de‑identified statistical information — for example summaries of browsing interest by category or time window that do not disclose individual identities. Such data may be licensed, shared with partners or corporate affiliates, or used in future commercial arrangements subject to contract and applicable law. Where required, we rely on an appropriate lawful basis (such as consent for optional analytics-derived metrics, or legitimate interests with balancing tests and respect for your rights). We configure internal exports to withhold very small buckets to reduce the risk that combined statistics could single out rare behaviour.

We may also share account and operational information with Dirtydegree, our parent platform company, and related group businesses for fraud prevention, security, support, and product improvement — consistently with this policy.

For paid referDot Pro plans we share necessary billing identifiers (for example customer and subscription IDs, billing email, and plan metadata) with Stripe to charge and manage subscriptions. Stripe’s privacy practices apply to card data they process. See stripe.com/privacy.

We use cookies for security, sign-in sessions, and site functionality (necessary). With your permission, we use analytics cookies to measure how referDot is used. You can choose Accept all, Necessary only, or Reject optional from our banner, and you can change browser settings at any time.

Withdrawing analytics consent limits future behavioural events in our optional analytics pipeline. It does not erase lawfully retained historical statistics that are already stored in aggregate form.

Depending on your region, regulations may treat certain transfers of behavioural or device data as sales or sharing even when we strip direct identifiers from commercial bundles. Where those laws apply we provide the opt-out or consent mechanisms required and document them in this policy.

referDot is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in a manner that would require parental consent under the U.S. Children's Online Privacy Protection Act (COPPA).

Account creation requires that you are at least 18 years old (see our Terms of Service). If you believe we have collected information from someone under 18, contact us and we will take appropriate steps, which may include deleting the account and related data.

You may have the right to access, correct, delete, or port your personal information, and — where applicable — to object to or restrict certain processing or to opt out of sales/sharing. Marketing email and texts can be changed on your profile. You can also reply STOP to a text. Submit other requests through our support page and we will respond consistent with applicable U.S. and state law.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), may provide additional rights regarding personal information we collect.

Categories we may collect: identifiers (such as name, email, phone); commercial and account activity (submissions, subscriptions, preferences); internet / device information (IP address, browser, approximate region); and inferences drawn from usage when you allow analytics.

Purposes: provide and secure the service, process payments via Stripe, send messages you agreed to, improve the product, and comply with law — as described in this policy.

Sale / sharing: We do not sell your name, email, or other information that directly identifies you for third-party marketing. Certain analytics or aggregated insights may be treated as a "sale" or "sharing" under California law depending on configuration; where required we honor opt-out choices (including Global Privacy Control / GPC signals, which decline optional analytics) and the cookie banner options described above. See also our Cookie Policy.

Your California rights: subject to exceptions, you may request to know, access, correct, delete, or opt out of sale/sharing of personal information, and not to be discriminated against for exercising those rights. Authorized agents may submit requests as permitted by law.

Submit requests via support@referdot.com or our support page. We will verify your request and respond within the timeframes required by California law.