Privacy Policy

Affreedom Research is a private research workspace used by its operator to evaluate affiliate marketing programmes. It is not a public service and does not offer accounts to the general public.

Account data. The email address and a hashed password of each authorised operator, used solely to sign in.

Research data. Publicly available information about merchant websites — domain names, public review scores, publicly disclosed advertising records, and affiliate programme listings published by affiliate networks. This information concerns businesses, not private individuals.

Credentials you provide. API keys and access tokens for third-party services you choose to connect. These are encrypted with AES-256-GCM before storage and are never returned to the browser or shared.

If you connect a Google Ads account, this application requests the https://www.googleapis.com/auth/adwords scope, and uses it for three purposes only:

• Keyword research — search volume, competition, bid estimates and historical trends for domains being researched.
• Reporting — reading performance of campaigns, keywords and search terms, and spend against daily budgets, for the connected account.
• Campaign management — creating and adjusting Search campaigns for the connected account: budget, targeting, keywords, negative keywords and ad text.

Of those three, only keyword research is implemented today; reporting and campaign management are being built. The commitments below are binding on them regardless.

Campaign management is limited by design. Every new campaign will be created paused, and enabling it, raising a budget, or removing a campaign or keyword will each require an explicit confirmation at the time. Nothing will be changed on a schedule or without a person asking for it.

The application never initiates a payment, changes a payment method, or edits a billing setup — there is no billing or payment code in it at all — and spend figures are read-only. It never creates Google Ads accounts. It only ever touches accounts the connecting user owns, and there is no mechanism to add anyone else's account.

What is stored is the derived keyword metrics, and the performance figures needed to show trends over time once reporting is in place. The OAuth refresh token is encrypted at rest and is never returned to the browser in any form, not even masked — the interface can only ask whether a credential exists, not what it is. Google user data is never sold, never used to target advertising at anyone, never combined with consumer personal data, and never transferred to any third party. Per-credential call counting and redaction of account identifiers from error messages are implemented for the affiliate network APIs today and are being extended to Google Ads.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

All data is held in a PostgreSQL database on a server controlled by the operator. Secrets are encrypted with AES-256-GCM. Traffic to the application is served over HTTPS.

No data is sold, rented or shared with third parties. Data leaves the application only when it is sent back to the originating service to fulfil a request you initiated.

Research data is kept until the operator deletes it. You may revoke this application's access to your Google account at any time at myaccount.google.com/permissions. To have stored data deleted, contact us using the details below.

Questions about this policy: xuanhinh.affiliate@gmail.com