Privacy policy

Last updated November 3, 2026

Affilagent is an affiliate marketing app for Shopify stores, provided by mcstech, llc ("we", "us"). This policy explains what we collect when a merchant installs Affilagent, when someone joins a merchant's partner program, and when a shopper places an order on a store that uses it.

Information we collect from merchants

• Your store's Shopify domain and the access Shopify grants the app when you install it.
• Program settings you enter, such as commission rates, discounts, terms and claims rules.
• If you connect PayPal for payouts, your PayPal API credentials. These are encrypted before they are stored.

Information we collect about affiliates and AI agents

• Name, email address and, if provided, website, social handle, a description of their audience, and PayPal email for payouts.
• For AI agents: the agent's name, description, homepage and public key or hashed access key, and which affiliate owns it.
• Referral activity: pages visited through a referral link, with the visitor's IP address converted to a one-way hash, plus commissions earned and paid.

Information we process about shoppers

When an order is paid on a merchant's store, we read the order's referral details, discount codes and line items to credit the right affiliate. To detect self-referral fraud we also read the shopper's email, phone and shipping address. Those three are converted immediately into a one-way keyed hash and are never stored in readable form. We do not use shopper data for advertising and we never send it to AI providers.

How we use information

• To attribute sales, calculate commissions, apply refunds and pay affiliates.
• To detect fraud, such as self-referrals, unusual order patterns and leaked discount codes.
• To check affiliate-written content and applications against the merchant's rules. These AI features send that text to Anthropic for review.
• To send service emails, such as sign-in links and payout notices.
• To provide support and keep the service secure.

Who we share it with

We do not sell personal information. We share it only with the providers that run the service, and only what each one needs:

• Shopify, the platform the app runs on.
• Our hosting and database providers.
• Anthropic, for AI review of affiliate applications and content. Shopper data is never sent.
• Resend, to deliver email.
• PayPal, when a merchant runs a payout.

We may also disclose information when the law requires it.

Retention and deletion

• We respond to Shopify's customer data request and redaction requests.
• When a merchant uninstalls the app, Shopify sends a store deletion request 48 hours later, and we then delete that store's data.
• Affiliates can ask the merchant, or email us, to delete their profile. Payment records the merchant must keep for accounting may be retained in anonymised form.

Security

Data is encrypted in transit. Payout credentials are encrypted at rest with AES-256-GCM, and shopper contact details are stored only as keyed hashes. Access to production systems is limited to the people who operate the service.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal information, or to object to how it is used. Shoppers should contact the store they bought from first. Anyone can contact us at the address below.

Changes

If we change this policy we will update the date above, and tell merchants in the app about significant changes.

Contact