ENOVAI Affiliate Privacy Policy

The data controller for affiliate personal data is E-NOVAI GROUP SARL, registered under ICE number 003055000000017, with registered office at 369 rue 017845 Bab Al Madina, Unit F2, Azzouzia, Marrakech, Morocco.

2.1 Data you provide at registration
● Identity: First name, last name, entity name (if applicable)
● Contact: Email address, country of residence or incorporation
● Profile: Type of affiliate (individual / agency / developer), professional website (optional)
● Payment details: PayPal email or bank account details (SWIFT/IBAN) for commission payouts

2.2 Data generated during the program
● Performance data: clicks on your Affiliate Link, conversion events, commission amounts per referred client
● Payout history: dates and amounts of commissions paid, payment method used
● Dashboard activity: login timestamps, IP address at login (security purposes only)
● Communications: emails exchanged with the ENOVAI team in the context of the Program

Your dashboard shows only your own performance data. You have no access to ENOVAI's global metrics, other affiliates' data, or any internal analytics platform.

2.3 Data we do not collect
● Sensitive personal data (health, religion, political opinions, biometric data)
● Full credit card or bank card numbers
● Data about your end-clients beyond what is necessary for commission attribution

● Managing your affiliate account
Legal basis: Performance of contract | Data used: Identity, email, login data

● Calculating and paying commissions
Legal basis: Performance of contract | Data used: Performance data, payment details, payout history

● Fraud detection and prevention
Legal basis: Legitimate interest | Data used: Click data, IP address, conversion patterns

● Program updates and performance notifications
Legal basis: Performance of contract | Data used: Email, performance data

● Accounting and tax compliance
Legal basis: Legal obligation | Data used: Payment details, payout history, identity

● Dispute resolution and Agreement enforcement
Legal basis: Legitimate interest / Legal obligation | Data used: All data relevant to the dispute

ENOVAI does not sell your personal data. We share affiliate data only with the following recipients and only to the extent necessary:

● Payment processors: PayPal or your bank (SWIFT/IBAN) to process commission payments
● Hosting infrastructure: Vercel Inc. (USA) — for hosting the affiliate dashboard
● Automation: N8N GmbH (Germany) — for workflow automation between platform components
● Customer support: Chatwoot — for managing affiliate communications
● Legal or regulatory authorities: where required by applicable law or court order

All third-party recipients are bound by contractual data protection obligations. Transfers outside the EEA are covered by Standard Contractual Clauses (SCCs).

● Account and identity data: Duration of Program + 2 years after termination (Dispute resolution, audit trail)
● Performance data (clicks, conversions): Duration of Program + 2 years after termination (Commission verification, disputes)
● Payment details and payout history: Duration of Program + 5 years after termination (Accounting and tax legal obligations)
● Communications (emails): 3 years from date of communication (Dispute resolution)
● Security logs (IP, login timestamps): 12 months (Security monitoring)

To exercise any of the rights below, contact us at privacy@enovaigroup.com. We will respond within 30 days.

● Right of access: Request a copy of the personal data ENOVAI holds about you as an affiliate.
● Right to rectification: Request correction of inaccurate or incomplete data.
● Right to erasure: Request deletion of your data after termination, subject to legal retention obligations.
● Right to restrict processing: Request that we limit how we use your data in certain circumstances.
● Right to data portability: Request your performance and payout data in a structured, machine-readable format.
● Right to object: Object to processing based on legitimate interests.

The affiliate dashboard uses essential cookies to manage your session. No marketing cookies are placed in the dashboard environment.

The affiliate tracking system uses cookies and equivalent identifiers (placed on the end-user's browser when they click your Affiliate Link) to attribute conversions to your account. These cookies have a 90-day lifespan. Their use is disclosed to end-users in ENOVAI's main Privacy & Cookie Policy and managed via the cookie consent banner on enovaigroup.com. You can review our full policy at enovaigroup.com/terms/cookie-policy.

● Encrypted data transmission (TLS 1.2 minimum)
● Access controls and authentication for the affiliate dashboard
● Restricted internal access to affiliate payment data on a need-to-know basis
● Regular security monitoring and vulnerability testing

In the event of a data breach affecting your affiliate data, ENOVAI will notify you without undue delay if the breach is likely to result in a high risk to your rights and freedoms.

ENOVAI is based in Morocco. Some service providers are located outside Morocco and the EEA (including in the USA). Where affiliate data is transferred internationally, ENOVAI ensures appropriate safeguards are in place, in particular Standard Contractual Clauses (SCCs) adopted by the European Commission.

Material changes will be communicated to active affiliates by email at least 15 days before the effective date. The latest version is always published at enovaigroup.com/terms/affiliate-privacy-policy.

Entity: E-NOVAI GROUP SARL
ICE: 003055000000017
Email: privacy@enovaigroup.com
Address: 369 rue 017845 Bab Al Madina, Unit F2, Azzouzia, Marrakech, Morocco
Response time: 30 days maximum