Privacy Policy
Effective: June 20, 2026
Referly LLC ("Referly," "we," "us," or "our") is committed to protecting the privacy of our users. This Privacy Policy describes what information we collect, how we use it, who we share it with, and what rights you have regarding your data.
1. Information We Collect
1.1 Account Information
When you create a Referly account, we collect your name, email address, and authentication credentials. Account creation and authentication are handled by our identity provider, Clerk. We do not store your password directly.
1.2 Business Profile Information
When you set up a business profile on Referly, we collect your business name, business category or trade, phone number, email address, website URL, city, state, ZIP code, and a text description of your business. You may also upload a business logo, which is stored on our hosting infrastructure.
1.3 Referral Data
When you send or receive referrals through the platform, we collect and store the referred customer's name, email address, and phone number, the service requested, any notes you include, the referral status and outcome, and timestamps of all referral activity. This data is necessary to operate the core referral tracking service.
1.4 Payment Information
If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. We do store your Stripe customer ID, subscription plan, plan status, and billing period dates for account management purposes.
1.5 Usage Data
We automatically collect certain information when you use Referly, including your IP address, browser type and version, pages visited, time spent on pages, and general location data derived from your IP address. This data is collected through our hosting provider (Vercel) and is used to maintain and improve the service.
1.6 Email Lead Information
If you submit your information through a lead capture form on our marketing pages (such as the agency application form), we collect your first name, last name, email address, phone number, and the trade or business category you select. This information is used to follow up with you about Referly's services.
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 Providing the Service
To create and manage your account, display your business profile to potential referral partners, facilitate the sending and receiving of referrals, calculate trust scores based on your referral activity, process subscription payments, and send transactional notifications (such as new referral alerts).
2.2 Communication
To send you referral notifications, partnership requests, and other service-related emails through our email provider (Resend). We do not send marketing emails unless you have explicitly opted in. You may opt out of non-essential communications at any time.
2.3 Improvement and Analytics
To understand how users interact with the platform, identify bugs or performance issues, and improve the user experience. We do not sell your data to advertisers or use it for behavioral advertising.
2.4 Legal and Compliance
To comply with applicable laws, respond to legal process, prevent fraud, and enforce our Terms of Service.
3. Third-Party Services
Referly uses the following third-party services to operate the platform. Each service has its own privacy policy governing their handling of your data:
3.1 Clerk (Authentication)
Clerk handles user authentication, including account creation, login, and session management. When you sign up or sign in, your authentication data (email, name, and session tokens) is processed by Clerk. Privacy policy: clerk.com/legal/privacy
3.2 Stripe (Payment Processing)
Stripe processes all subscription payments and will handle referral fee payouts through Stripe Connect. Stripe collects and stores your payment information directly. We never see or store your full card number. Privacy policy: stripe.com/privacy
3.3 Resend (Email)
Resend delivers transactional emails on our behalf, including referral notifications, partnership requests, and account-related messages. Your email address and name are shared with Resend for this purpose. Privacy policy: resend.com/legal/privacy-policy
3.4 Vercel (Hosting)
Vercel hosts the Referly application. Vercel may collect usage data including IP addresses, browser information, and request logs as part of their hosting infrastructure. Privacy policy: vercel.com/legal/privacy-policy
3.5 Neon (Database)
Neon hosts our PostgreSQL database where your business profile, referral records, and account information are stored. All data is encrypted at rest and in transit. Privacy policy: neon.tech/privacy-policy
3.6 Vercel Blob (File Storage)
Vercel Blob stores uploaded files such as business logos. Files are stored securely and are accessible only through authenticated requests or public profile pages.
3.7 Cloudflare (DNS and Security)
Cloudflare provides DNS management, DDoS protection, and bot mitigation for referlyapp.co. Cloudflare may process your IP address and request headers as part of their security services. Privacy policy: cloudflare.com/privacypolicy
4. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We share your information only in the following circumstances:
4.1 With Your Referral Partners
When you form a partnership with another business on Referly, your business profile information (name, category, city, trust score) is visible to that partner. When you send a referral to a partner, the referred customer's name, contact information, and service details are shared with the receiving business. This sharing is essential to the operation of the referral service.
4.2 Public Profile
Your business name, category, city, trust score, and logo are displayed on your public Referly profile. This profile is accessible to anyone with the URL. You can control what information appears on your profile through your Settings page.
4.3 Service Providers
We share data with the third-party services listed in Section 3 strictly for the purpose of operating the platform. These providers are contractually obligated to protect your data and may not use it for their own purposes beyond providing their services to us.
4.4 Legal Requirements
We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
5. Data Retention
We retain your account and business profile data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it (for example, financial transaction records for tax compliance, which may be retained for up to 7 years).
Referral records associated with completed transactions may be retained in anonymized form for analytics and platform improvement purposes even after account deletion.
6. Data Security
We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS/SSL) for all data transmitted between your browser and our servers, encryption at rest for database storage, secure authentication through Clerk with multi-factor authentication support, access controls limiting employee access to user data, and regular security reviews of our infrastructure and code.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Cookies and Tracking
Referly uses cookies and similar technologies strictly for functional purposes. We use session cookies to maintain your login state (managed by Clerk), functional cookies to remember your preferences, and security cookies for CSRF protection and bot mitigation (managed by Cloudflare).
We do not use advertising cookies, tracking pixels, or third-party analytics tools that track you across other websites. We do not participate in ad networks or sell data to advertisers.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
8.1 Access and Portability
You have the right to request a copy of the personal data we hold about you. Contact us and we will provide your data in a commonly used electronic format within 30 days.
8.2 Correction
You can update your business profile and account information at any time through your Settings page. If you need to correct other data, contact us.
8.3 Deletion
You have the right to request deletion of your account and associated personal data. You can initiate this by contacting us. We will process deletion requests within 30 days, subject to any legal retention requirements.
8.4 Objection and Restriction
You have the right to object to certain processing of your data or request that we restrict processing in certain circumstances. Contact us to exercise these rights.
9. Children's Privacy
Referly is designed for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you via email or through the platform. Your continued use of Referly after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.
11. Contact
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, contact us at:
Last updated: June 20, 2026. The most current version of this Privacy Policy will always be available at referlyapp.co/privacy.
