Privacy Policy

This Privacy Policy explains how Shape Affiliates Inc. ("Shape Affiliates," "we," "us," or "our") collects, uses, and protects your information when you use our affiliate platform (the "Platform").

We are committed to respecting your privacy and complying with applicable laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

We collect the following categories of data:

We use your information to:

• Operate and maintain your affiliate account
• Track referrals and calculate commissions
• Process and send payments
• Detect and prevent fraud or misuse
• Communicate with you about your account, payouts, or updates
• Improve and secure our Platform
• Comply with legal obligations

If you are located in the European Economic Area (EEA), our legal basis for processing includes:

• Performance of a contract: to manage your affiliate account
• Legal obligation: to comply with financial or tax regulations
• Legitimate interest: to maintain Platform integrity and prevent abuse
• Consent: when you opt in to marketing or communications

We only share data with:

• Payment processors (to issue payouts)
• Shopify Partners (to confirm referral attribution)
• Service providers (hosting and support tools under confidentiality agreements)
• Regulators or authorities when legally required

We retain your personal information only for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we securely delete or anonymize it.

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, restricted access controls, and regular security reviews. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

Your information may be processed and stored in countries other than your own. Where data is transferred internationally, we take steps to ensure it remains protected in accordance with this Privacy Policy and applicable law.

Depending on your location, you may have the right to:

• Access, correct, or delete your data
• Request a copy of your data
• Withdraw consent for marketing
• Object to certain processing activities

We use only essential, first-party cookies that are required for the Platform to function — for example, to keep you signed in and to remember your preferences and language. We do not use advertising cookies, and we do not use third-party analytics or tracking technologies to profile you.

Because these cookies are strictly necessary for the service you request, they are used on the basis of providing the Platform to you. You can block or delete cookies through your browser settings, though doing so may prevent you from signing in or using core features.

The Platform is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the Platform or by email.

For privacy-related questions or data requests, contact: