Privacy Policy

Referrers ("we", "us") operates an invite-only referral network for service operators. The operating address is 30 N Gould St Ste N, Sheridan, WY 82801, USA. This policy explains what data we collect, why, how it's stored, and the choices you have.

1. Data we collect

• Account data: name, email, profile picture, time zone, location — synced from your Referrers Network (Mighty Networks) profile.
• Service data: the services, niches, customers, and tags you list on your community profile. We use them to match opportunities.
• Opportunity data: companies, contacts, scope, budget, deal values, and messages you submit or exchange inside the workspace.
• Payout data: the payment method, account identifier, and tax form you provide so we can pay commissions. Stored encrypted at rest and visible only to admins.
• Operational data: sign-in events, IP addresses (for security), and product analytics (only with your consent — see Section 4).

2. How we use it

• Match referrers and providers, and run the commission lifecycle end-to-end.
• Send transactional emails (sign-in links, assignment notifications, commission updates).
• Detect and prevent abuse, fraud, and unauthorised access.
• Comply with tax and accounting obligations tied to commission payouts.

3. Sharing

We only share opportunity details (company, scope, contact) with the provider matched to that opportunity, the referrer who submitted it, and Referrers admins. Payout details are never shared between members. We do not sell personal data and we do not run third-party advertising.

4. Processors

We rely on a small number of trusted infrastructure providers acting as data processors on our behalf:

• Supabase (database, authentication, file storage)
• Mighty Networks (community-of-record for member profiles)
• Cloudflare (edge hosting, DNS, DDoS protection)
• Stripe (payment processing for commissions and provider payouts)
• Resend (transactional email delivery)
• PostHog (anonymous product analytics — loaded only with your cookie consent; see our Cookie Policy)

5. Retention

We keep account and opportunity data for as long as you're a member, plus the period required to settle outstanding commissions and meet legal/tax requirements (typically 7 years for financial records). You can request a copy or deletion at any time — see Section 8.

6. Security

Data is encrypted in transit (TLS) and at rest. Access to admin tooling is restricted to named Referrers staff with audit logging. Sign-in uses one-time email links — no passwords are stored. Webhook traffic is signature-verified before any privileged write.

7. International transfers

Members are based worldwide. Data may be processed in regions where our infrastructure providers operate, including the United States and the European Union. Where data is transferred out of the EEA or UK, we rely on the EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum executed with each processor.

8. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, and similar) you have rights to access, correct, export, or delete your personal data, restrict or object to certain processing, and lodge a complaint with your local supervisory authority. Email contact@referrers.network and we'll respond within 30 days.

9. Children

Referrers is for professional operators only. We do not knowingly collect data from anyone under 18.

10. Changes

We'll notify members by email of any material change. Continuing to use the workspace after changes take effect means you accept the updated policy.