Legal
Privacy Policy
Effective August 3, 2026
1. Who we are
Kickback Rewards ("Kickback," "we," "us") operates this site. If you have questions about this policy or your data, contact us at chris@kickback.so.
2. What we collect from account holders
When you create a Kickback account, we collect your email address, a hashed password, your profile name, your campaign configuration, and payout settings for your affiliates — specifically their payout email, payout method, currency, and tax ID.
3. What we process on merchants' behalf
In running your affiliate program, we process data about your customers on your behalf: referral clicks (IP address, user agent, referrer, and landing URL), signups (email address), and purchase events from Stripe (charge amounts and customer identifiers). For this data, we act as a processor — you, the merchant, are the controller.
4. Cookies
On kickback.so, we set a signed cookie called kickback_visitor, which identifies a browser across referral clicks and lasts one year, and a standard session cookie called _kickback_session, which is required for signing in. On merchant sites, the Kickback snippet sets a first-party cookie called _kbr_ref, which carries the referral code and visitor token for up to 90 days. We don't set any third-party advertising cookies.
5. Payments
Payments are processed by Stripe. We never see your card numbers — Stripe handles that directly. Stripe acts as a subprocessor for payment data.
6. Retention & deletion
We keep account data for as long as your account is active, and referral data for as long as the relevant merchant's campaign needs it. To request deletion, email chris@kickback.so.
7. Your rights
You can request access to, correction of, or deletion of your data by emailing chris@kickback.so.
8. Changes
If we make changes to this policy, we'll post the update here with a new effective date.