Data Processing Terms

These Data Processing Terms describe how personal data flows between PassiveVelocity and Vendors. PassiveVelocity is a technology and reporting platform; Vendors independently operate their own offers, checkout, fulfillment, and support.

• PassiveVelocity is the controller of platform account, offer-management, and tracking/reporting data it collects.
• A Vendor is an independent controller of the personal data it collects from customers through its own checkout, fulfillment, and support.
• Where PassiveVelocity processes data on a Vendor's documented instructions, it does so as that Vendor's processor for that activity.

To attribute activity and enable commission decisions, PassiveVelocity shares with each Vendor the Affiliate, lead, and conversion data associated with that Vendor's offers. Vendors receive only data related to their own offers. Affiliates receive activity and commission data attributed to their own referral links. See the Tracking & Attribution Policy and Privacy Policy.

Each party processes personal data only for legitimate, disclosed purposes: operating the platform, attributing activity, producing reporting, preventing fraud, providing support, and meeting legal obligations. Where PassiveVelocity acts as a Vendor's processor, it processes that data in line with the Vendor's documented instructions and this policy.

Both parties must apply appropriate technical and organizational security measures. PassiveVelocity uses vetted service providers (for example, infrastructure, email, and analytics) that act on its instructions and are bound by appropriate confidentiality and security obligations.

Personal data may be processed in the locations where the parties and their service providers operate. Data is retained for as long as needed to provide the platform, support reporting, meet legal obligations, and resolve disputes, after which it is deleted or anonymized.

To make a request about data PassiveVelocity controls, use the privacy request channel.