Affinaut is committed to protecting personal data in line with the EU/UK General Data Protection Regulation (GDPR) and similar laws. This page explains our roles, your rights, and how we handle data on behalf of our customers.
On this page
1. Controller & processor roles
- For account and billing data of our direct customers, Affinaut is the data controller.
- For data that a network operator processes within their tenant (e.g., their affiliates’ and end-users’ data), the operator is the controller and Affinaut acts as a processor on their behalf.
2. Lawful bases for processing
We process personal data on one or more of these bases:
- Contract — to provide the service you signed up for.
- Legitimate interests — to secure, improve and support the platform.
- Legal obligation — for tax, accounting and anti-fraud/AML requirements.
- Consent — for optional communications, which you can withdraw at any time.
3. Your rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data or complete incomplete data.
- Erase data (“right to be forgotten”) where applicable.
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Lodge a complaint with your local data-protection authority.
To exercise these rights, email support@affinaut.com. If your request concerns data held within a specific network, we may direct it to that network operator as controller.
4. Data Processing Addendum (DPA)
Where we act as your processor, a DPA governs that processing, including confidentiality, security measures and sub-processing. A DPA is available to customers on request at support@affinaut.com.
5. Sub-processors
We use vetted sub-processors to deliver the service, including:
- Paddle — payment processing / Merchant of Record (card payments).
- Binance Pay — cryptocurrency payment processing.
- Cloud hosting and infrastructure providers.
- Transactional email and support providers.
6. International data transfers
Where personal data is transferred outside your region, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and equivalent mechanisms.
7. Breach notification
If a personal-data breach is likely to result in a risk to individuals, we will notify affected customers and the relevant authorities without undue delay and in line with our legal obligations.
8. Data protection contact
For any data-protection matter, contact us at support@affinaut.com and mark your message “Data Protection”.
Contact us
Questions about this gdpr & data protection? Reach our team at support@affinaut.com. We aim to respond within 2 business days.