Privacy Policy

Last updated: 23 August 2026

This Privacy Policy explains how KashFlyer (“Kashflyer”, “we”, “us”) collects, uses, discloses, and safeguards information in connection with the Kashflyer performance-marketing tracking platform and related websites (the “Platform”). By using the Platform you agree to the practices described here.

Kashflyer serves two audiences: customers (networks, agencies and advertisers who operate accounts on the Platform) and their end users(the people who click tracked links). For most end-user data processed through tracking, our customer is the data controller and Kashflyer acts as their processor.

1. Information we collect

Account & profile data

Name, email address, company details, role, and credentials you provide when an account is created or used.

Usage & tracking data

When a tracked link, pixel, or postback is used, we process technical data such as IP address, device and browser information (user agent), timestamps, referring URLs, click and conversion identifiers, and campaign/sub-ID parameters. This is used to attribute clicks and conversions and to detect fraud.

Billing & support data

Plan, usage counts, invoices, and any information you share when contacting support.

Cookies

See our Cookie Policy for details on the cookies we use.

2. How we use information

  • To provide, operate, secure, and improve the Platform;
  • To attribute clicks and conversions and generate reporting;
  • To detect, investigate, and prevent fraud and abuse;
  • To calculate usage, billing, and payouts;
  • To provide customer support and service communications;
  • To comply with legal obligations and enforce our terms.

3. Legal bases (EEA/UK)

Where the GDPR applies, we rely on: performance of a contract; our legitimate interests in operating, securing, and improving the Platform and preventing fraud; compliance with legal obligations; and, where required, your consent.

4. How we share information

  • With the relevant customer: tracking data is made available to the account (network/advertiser) whose links generated it.
  • Service providers (sub-processors): infrastructure hosting and, where you configure them, measurement partners (e.g. AppsFlyer, Adjust) and postback endpoints you enable.
  • Legal & safety: where required by law, or to protect rights, safety, and the integrity of the Platform.
  • Business transfers: in connection with a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal data.

5. Hosting & international transfers

The Platform is hosted in the European Union (Germany). Where data is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses.

6. Data retention

Account data is retained while your account is active and as needed to comply with legal obligations. Tracking and log data is retained for the period configured for the account and then deleted or aggregated. Backups are rotated on a rolling basis.

7. Security

We protect data with encryption in transit (TLS), encryption at rest for sensitive secrets, strict access controls, tenant isolation, rate limiting, and audit logging. No method of transmission or storage is completely secure, but we work continuously to protect your information.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To exercise these rights, contact us at contact@kashflyer.com. If Kashflyer processes your data on behalf of a customer, we will refer your request to that customer where appropriate.

9. Children

The Platform is intended for business users and is not directed to individuals under 18.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above.

11. Contact

Questions, requests, or grievances can be sent to contact@kashflyer.com. This Policy is governed by the laws of India.