Privacy policy

Effective 14 September 2026

Controller

Markus Schwed, Tempelstraße 7, 66773 Schwalbach, Deutschland – info@affliq.com

Website and web portal

This website (www.affliq.com), the app's API (api.affliq.com) and the web portal (app.affliq.com) are hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) on a server in Germany. Technically necessary data (IP address, time, requested address, user agent) is processed in server logs; the legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). Logs are deleted automatically after a short time.

The website sets no cookies and embeds no analytics, advertising or font services. The web portal sets one technically necessary session cookie after sign-in.

Waitlist

If you join the waitlist, we store your email address, your language and the time of signup, and we send one confirmation email (double opt-in) and later the notice that Affliq is available, plus an invitation to the beta if you asked for one. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time by writing to info@affliq.com; we then delete the address. Unconfirmed addresses are deleted after 30 days, the list itself after launch.

Privacy in the Affliq app

Affliq is your private ledger for TikTok Shop: samples, deadlines, commissions and the evidence behind them. We process only what you enter or forward for that.

Sign-in with TikTok

You sign in through TikTok (Login Kit). From TikTok we receive a technical identifier, your display name, the address of your profile picture and access tokens, which we store encrypted; TikTok does not give us your email address. Your language comes from your device. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR). What TikTok processes during sign-in is governed by TikTok's privacy policy.

Your records

In the app you store samples (product, seller, receipt, deadline, video link), orders and commissions (estimated, settled, paid, clawbacks), notes, a log of changes to every sample, and your legal profile (name, address, contact, tax details) for imprints and invoices. We process this data solely to provide you with your own records (Art. 6 (1) (b) GDPR). Tax numbers are stored encrypted.

Evidence: screenshots and forwarded emails

Screenshots you share with Affliq and emails you forward to your personal Affliq address are stored unchanged as evidence for your records, including the original message. Such evidence may contain third-party data (for example seller names); you decide what you file. Evidence is never deleted, at most set aside, because it forms your business records.

Reading evidence (Anthropic)

So that you do not have to type a screenshot or a forwarded email, we transmit the image or the text of the message to Anthropic PBC (USA) as a processor; the model reads product, seller, date, amounts and status from it, which you then confirm. Anthropic does not use API data to train its models. Transfers to the USA are based on standard contractual clauses (Art. 46 GDPR).

Forwarding address (Postmark)

Emails to your forwarding address (…@in.affliq.com) are received by the provider Postmark (ActiveCampaign, LLC, USA) and passed on to us; Postmark keeps a copy briefly for delivery. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR); transfers to the USA rely on standard contractual clauses (Art. 46 GDPR). Mail to unknown addresses is rejected and not stored.

Notifications

If you switch reminders on, we store your device token and your device's time zone and send at most one notification a day through the Apple Push Notification service (deadlines, commission rate changes). You switch both off in your profile or in iOS Settings; the token is then deleted.

Recipients at a glance

Retention, export and deletion

Your data stays stored as long as your account exists. You build a year's tax package (samples, commissions, evidence) in the app yourself and hand it to whom you choose. We delete your account on request to info@affliq.com; because your records and evidence are business records with retention duties of your own, we provide them to you as a package first.

Your rights