Privacy Policy
How OnlyPPV collects, uses, discloses, and safeguards partner information across the affiliate platform. Compliant with GDPR and CCPA / CPRA.
Introduction
OnlyPPV ("we", "us") is a performance-marketing network connecting affiliate partners with advertisers in the Telegram ecosystem. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our affiliate platform at onlyppv.io and app.onlyppv.io.
By accessing or using OnlyPPV, you acknowledge that you have read this Policy and agree to be bound by it.
Information We Collect
Account & onboarding
- Display name and Telegram handle
- Email address
- Country / region of operation
- Declared traffic sources (Facebook Ads, TG Ads, in-app push, etc.)
- Expected monthly volume and verticals of interest
KYC (required only for payouts above $5,000 per month)
- Government-issued ID (passport or national ID)
- Proof of address (utility bill or bank statement, no older than 90 days)
- For companies: certificate of incorporation and UBO declaration
Tracking & traffic data
When you generate a tracking link and run traffic to it, we record click metadata: IP address, user-agent, GEO, referrer, sub_id values, click ID, and the timestamp of the click. When the advertiser fires a conversion postback, we record the conversion metadata together with the originating click.
Payout information
- USDT / TON wallet addresses you provide
- Withdrawal history and amounts
- Network and blockchain transaction hashes
Platform usage data
- Login sessions and dashboard activity
- Postback delivery logs (status codes, retries)
- Device information (browser, OS, IP address)
Legal Basis for Processing (GDPR)
We process your data under the following GDPR legal bases:
Art. 6(1)(b) — Contract performance
- Account management and authentication
- Tracking clicks and conversions for your campaigns
- Processing affiliate payouts
- Partner support
Art. 6(1)(c) — Legal obligation
- KYC and AML obligations for high-volume payouts
- Tax compliance and record-keeping
- Lawful government and law-enforcement requests
Art. 6(1)(a) — Your consent
- Marketing communications about new offers (only if opted in)
- Optional analytics tracking
- Non-essential cookies
Art. 6(1)(f) — Legitimate interest
We process certain data based on legitimate interest in platform integrity: anti-fraud detection on click and conversion events, fingerprinting suspicious traffic, and protecting advertisers and partners from low-quality traffic.
How We Use Your Data
Network operation
- Operating your affiliate account and dashboard
- Recording and attributing clicks and conversions
- Firing S2S postbacks to your tracker
- Calculating balances and processing crypto payouts
Anti-fraud
Click and conversion events are scored in real time using device fingerprints, click-to-conversion timing, GEO consistency and sub_id behaviour. Events identified as fraudulent are flagged and excluded from payouts.
Network analytics
- Aggregated performance benchmarks shared with advertisers
- Internal product and quality improvements
- Operational monitoring of postback delivery
Data Retention
| Data type | Retention | Legal basis |
|---|---|---|
| Account information | Until deletion or 180 days inactivity | Contract — Art. 6(1)(b) |
| Click & conversion logs | 24 months rolling | Legitimate interest — Art. 6(1)(f) |
| Anti-fraud signals | 12 months rolling | Legitimate interest — Art. 6(1)(f) |
| KYC documents | 5 years after last activity | Legal obligation — Art. 6(1)(c) |
| Payout records | 7 years | Legal obligation — Art. 6(1)(c) |
| Support tickets | 24 months | Contract — Art. 6(1)(b) |
Your GDPR Rights
You have the following rights under GDPR. All requests are processed within 30 days at no cost.
Art. 15 — Access
Request a JSON export of your data. Email privacy@onlyppv.com with subject "Data Access Request".
Art. 16 — Rectification
Correct inaccurate data via your dashboard or by emailing privacy@onlyppv.com.
Art. 17 — Erasure ("Right to be Forgotten")
Request account deletion via Settings → Delete Account, or by emailing privacy@onlyppv.com. We delete within 30 days. Exceptions: tax records (7 years) and KYC documents (5 years) are retained by law.
Art. 20 — Portability
Receive your data in a machine-readable JSON format on request.
Art. 21 — Objection
Opt out of marketing or non-essential analytics at any time.
Art. 77 — Lodge a complaint
You may complain to your local data protection authority. Contact us first at privacy@onlyppv.com — we will help you exercise your rights.
International Data Transfers
Your data may be processed in multiple locations including the EU, the United States, and the United Kingdom.
Safeguards
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Standard Contractual Clauses with non-EU processors
- Minimal data sharing — only what is necessary
Security
We implement industry-standard security measures:
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Role-based access controls with least privilege
- Continuous security monitoring and logging
- Encrypted backups with retention policies
- Documented incident-response procedures
In the event of a data breach affecting personal data, we will notify affected partners within 72 hours as required by GDPR, with details of the breach, affected data, and remediation steps. Contact: security@onlyppv.com.
California Residents (CCPA / CPRA)
If you reside in California, you have additional rights:
- Right to know — what we collect and how we use it
- Right to delete — request deletion of your data
- Right to opt out of sale — we do not sell data, but you may opt out anyway
- Right to correct — update inaccurate information
Email privacy@onlyppv.com with "California Privacy Rights" in the subject. Response within 45 days (extendable to 90 days with notice). Free of charge.
Changes to This Policy
We may update this policy. Material changes are posted on this page with a new "Last updated" date. Continued use of the Service after the change constitutes acceptance.
Contact Us
Privacy questions
privacy@onlyppv.com — response within 7 business days.
GDPR / CCPA requests
privacy@onlyppv.com with subject "[GDPR] [Request type]" — response within 30 days.
Security issues
security@onlyppv.com — response within 24 hours for critical issues.
Affiliate support
partners@onlyppv.com — response within 4 business hours.
By using OnlyPPV, you acknowledge that you have read, understood, and agree to this Privacy Policy.