How we protect your accounts and data
Updated
The short version: we only use your network keys to fetch data from your networks, nobody else can see your data, it's stored in the EU (Stockholm), and you can delete it whenever you want. The details are below.
In plain words
- We only read your data; we never change anything in your network accounts
- Other customers never see your data
- Hosted in the EU, in Stockholm
- Delete it anytime
Network keys
The network keys you give us are encrypted with AES-256 before they are stored. The encryption key is kept in AWS, separate from the database. Keys are only used to fetch data from your networks, and they are never shown again after you save them.
Separation between customers
Every query in the platform is limited to your own organization. One customer's merchants, approvals, tracking links and earnings are never visible to another. Merchants' product data is the exception: it may be shared between customers approved for that merchant, each with their own tracking links. Product data specific to your publisher account is kept separate.
Where data lives
The database and application run on Amazon Web Services in Stockholm, Sweden (eu-north-1), under the GDPR. The database is encrypted at rest and all traffic uses HTTPS.
Deleting data
Disconnect a network and its keys are deleted at once, and its data within minutes. Delete your account in Settings → Account and access ends at once and your data is deleted within minutes; we email you when it is done. Shared merchant feed copies still needed by other approved customers are kept; copies stored only for your publisher account are deleted with your connection or organization. Backups roll over after 7 days.
API keys
Keys for the Aggrefine API are shown once, when you create them. We store only a hash, so nobody can read them back, not even us. Each key reaches your organization's channels and nothing else, and you can revoke it anytime. Each API call is logged with the first characters of the key (never the key itself), the endpoint, the result and the IP address it came from, and these logs are kept for 7 days.
Sign-in and your team
Sign-in runs on Amazon Cognito, with email and password or Google. We never see your password, and sessions expire after 30 days. Only people you invite can join your organization; invitations expire after 7 days.
We do not hold third-party security certifications yet. Need a data processing agreement (DPA)? Ask us and we'll send one. Found a problem? Email info@aggrefine.com. For how we handle personal data, read our privacy policy.