Who we are
Attrly is operated by Attrly LLC, a California limited liability company (“Attrly”, “we”, “us”). This policy covers attrly.com and the Attrly platform, including the dashboards and creator portals we host for agencies.
Two roles
- For this website and for account and contact details, Attrly decides how information is used and is responsible for it.
- For data an agency connects or uploads (its Amazon data, brands, campaigns and creators), the agency is the owner and Attrly is its service provider. We process that data only on the agency’s instructions, under our agreement with the agency. If you are a creator or brand contact working with an agency, that agency’s own privacy notice also applies.
What we handle
When you visit attrly.com
The marketing site sets no cookies, runs no analytics or advertising trackers, and loads its fonts from our own servers. Our hosting provider keeps short-lived request logs (such as IP address, browser type and the page requested) to deliver the site and protect it from abuse.
Account information
Names, work email addresses and roles of the agency and brand team members and creators who use Attrly, and the sign-in details our authentication provider keeps to log them in, such as sign-in times and session records. We never store passwords in plain text.
Agency, brand and creator information
Agency and brand names and settings, campaign details, and the creator details an agency adds or a creator provides: name, email address, social handles and the links assigned to them.
Amazon Ads and Amazon Attribution data
When a brand connects its Amazon Ads account through Login with Amazon, we receive an access token for that account and use it to read:
- Advertiser profiles, Attribution publishers, tags and campaigns.
- Aggregated performance reports: clicks, detail page views, add-to-carts, purchases, units, attributed sales and Brand Referral Bonus estimates.
These reports are aggregated by Amazon. They do not include Amazon shoppers’ names, contact details or order-level records, and Attrly does not receive any.
When you contact us
If you email us, we keep the message and your contact details to reply and to keep a record of the conversation.
How we use it
- To provide the service: show each agency and its brands which creators and links drive results, and give creators a view of their own links and performance.
- To secure the service, prevent misuse and fix problems.
- To communicate with customers about their accounts and the service.
- To meet legal obligations.
We do not sell personal information, share it for cross-context behavioral advertising, or use customer data to train models.
Limits on Amazon data
Amazon data is held to stricter rules than anything else on the platform:
- It is used only to provide Attrly to the agency and brand that connected it.
- It is shown only to that agency, that brand’s authorized users, and the creators it relates to, as the agency configures.
- It is not sold, rented or disclosed to other third parties, and is not combined with data from other sources except as Amazon’s terms allow.
- It is kept only as long as the agency needs it for the service, and deleted as described below.
Retention and deletion
- Active customers: we keep customer data while the agency’s account is active.
- Disconnecting Amazon: when a brand disconnects its Amazon account, or the authorization is revoked, we promptly delete its stored tokens and stop collecting new data.
- Ending service: within 30 days after an agency’s account ends, we delete its customer data, including Amazon data, unless the agency asks for an export first or the law requires us to keep something. Encrypted backups roll off on their normal schedule after that.
- Request logs from the website are kept for a short period by our hosting provider.
Who we share it with
We use a small number of service providers to run Attrly. Each processes data only to provide its service to us, under contract.
| Provider | What they do | Location |
|---|---|---|
| Vercel | Hosting for the website and application | United States |
| Supabase | Database, storage and sign-in (Supabase Auth) | United States |
| Business email (Google Workspace) | United States and other countries |
Amazon is the source of Amazon Ads and Attribution data, under the brand’s own agreement with Amazon. We may also disclose information when the law requires it, to protect people or the service, or as part of a merger or sale of the business, in which case this policy continues to apply.
Security
We protect data with encryption in transit and at rest, encrypted storage of Amazon tokens, and strict separation between customers. Our security page has the details.
Your choices and rights
You can ask us to access, correct, delete or export your personal information, and you will not be treated differently for asking. If your information came to us through an agency, we will pass your request to that agency or help it respond.
California residents have these rights under the California Consumer Privacy Act. We do not sell or share personal information and do not use sensitive personal information to infer characteristics about you.
Children
Attrly is a business service and is not directed to children under 16. We do not knowingly collect their information.
Changes
If we change this policy, we will update the date above, and tell customers directly before any material change takes effect.
Contact
Questions or requests: hello@attrly.com. Security concerns: security@attrly.com.