Privacy Policy

Effective date: June 8, 2026

This Privacy Policy describes how Coritra ("we", "us", or "our") collects, uses, and discloses information when you access or use the Coritra platform and related services (the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account and Contact Information

When you create an Account, we collect information such as your name, email address, company name, and billing details. This information is necessary to provide you with access to the Service and to process payments.

1.2 Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken, and timestamps. This data helps us understand how the Service is used and how we can improve it.

1.3 Technical Data

We collect technical information such as your IP address, browser type, operating system, device identifiers, and referring URLs. This information is used for security, fraud prevention, and service reliability purposes.

1.4 Customer Data

Data you input into the Service, such as partner records, attribution events, commission formulas, and settlement documents, is your data ("Customer Data"). We process Customer Data only as directed by you and as necessary to operate the Service.

1.5 Cookies and Similar Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and collect aggregate analytics data. You can control cookie settings through your browser; however, disabling certain cookies may affect your ability to use the Service.

2. How We Use Your Information

We use the information we collect to:

• provide, maintain, and improve the Service;
• process payments and send billing-related communications;
• respond to your inquiries and provide customer support;
• send administrative notices, product updates, and security alerts;
• monitor and analyse usage patterns to improve features and user experience;
• detect, investigate, and prevent fraudulent or unauthorised activity;
• comply with legal obligations.

We do not use your Customer Data to train AI models, to build advertising profiles, or for any purpose unrelated to operating and improving the Service.

3. Legal Basis for Processing (EEA / UK)

If you are located in the European Economic Area or the United Kingdom, our legal basis for processing your personal data is:

• Contract performance – processing necessary to provide the Service you have subscribed to.
• Legitimate interests – security, fraud prevention, and improving the Service, where these interests are not overridden by your rights.
• Legal obligation – where we are required by law to retain or disclose data.
• Consent – for optional marketing communications, which you may withdraw at any time.

4. Sharing of Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers. We engage trusted third-party vendors (e.g., cloud hosting, payment processors, email delivery) who process data on our behalf under binding confidentiality and data-protection agreements.
• Business transfers. If Coritra is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
• Legal requirements. We may disclose your information if required to do so by law or in response to a valid legal request (e.g., a court order or government authority).
• Protection of rights. We may disclose information where we believe it is necessary to prevent fraud, to enforce our Terms of Service, or to protect the rights and safety of Coritra, our users, or the public.

5. Data Retention

We retain your personal information for as long as your Account is active or as needed to provide the Service. After Account deletion or subscription cancellation, we retain Customer Data for up to 30 days to allow for recovery, after which it is permanently and securely deleted, except where we are required by law to retain it for a longer period (e.g., financial records for tax purposes).

6. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including countries whose data-protection laws may differ from those of your jurisdiction. Where such transfers occur, we take appropriate safeguards , such as Standard Contractual Clauses approved by the European Commission , to ensure your data is protected in accordance with this policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access. Request a copy of the personal data we hold about you.
• Rectification. Request correction of inaccurate or incomplete data.
• Deletion. Request erasure of your personal data, subject to legal retention obligations.
• Portability. Request your data in a structured, machine-readable format.
• Objection / Restriction. Object to or request restriction of certain processing activities.
• Withdraw consent. Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at legal@coritra.com. We will respond within 30 days (or the timeframe required by applicable law). You also have the right to lodge a complaint with your local data-protection authority.

8. Data Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security. If you suspect a security incident, please contact us immediately at security@coritra.com.

9. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us at legal@coritra.com and we will promptly delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, notify you by email or via an in-app notice at least 14 days before the changes take effect. Your continued use of the Service after the updated policy's effective date constitutes your acceptance of the changes.

11. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at:

Coritra
legal@coritra.com