Privacy Policy

1. Who is responsible

Afipal (“Afipal”, “we”, “us”) is responsible for the personal information used to operate this website, prepare and review waitlist submissions, administer referrals, handle enquiries and keep the service secure.

This policy covers the public website and free early-access waitlist. You can reach us through our contact form for privacy questions and requests.

2. What we collect and where it comes from

• Submission details: your contact email, submitted public product or creator link, information you enter or correct, selected images and your confirmation of the draft.
• Public-source information: relevant descriptions, names, images, links, language, categories and public audience information from your submitted page and related public sources checked against that identity.
• Verification and referrals: email-verification state, invite attribution, qualification evidence, aggregate progress, credit tiers and related review records.
• Support messages: the name, email, subject and message you provide through the contact form and related correspondence.
• Technical and security data: request and device information, security and rate-limit records, processing results and error information needed to operate and protect the service.

Information comes from you, your browser, the public websites you submit and the providers used to retrieve and process those pages. Required fields are identified in the relevant form. Without them, we may be unable to prepare a submission, verify an email or respond to an enquiry. Please avoid sending passwords, confidential material or sensitive personal information that is unnecessary for the request.

3. Why we use information

We use information to prepare an editable draft, save your confirmed submission, review your request, verify your email, send operational updates, maintain referral progress, answer questions and prevent abuse. We also use relevant records to investigate failures, resolve disputes and meet legal duties.

We process information needed to prepare and manage the submission you request and to take steps towards early access at your request. We rely on legitimate interests to review relevant public information, prevent duplicate or abusive submissions, maintain security, administer referrals fairly and answer enquiries, taking your rights into account. We rely on consent where required for optional uses, and on legal obligations where we must retain or disclose information.

We do not sell your personal information. Joining the waitlist is not consent to unrelated advertising or permission to publish your draft automatically. If we introduce optional marketing or advertising tools, we will provide the notices and choices required before using them.

4. Public information, AI and internal review

We use automated retrieval and AI to read public information and suggest draft details. We may process public-page text, metadata and images, as well as the resulting draft and processing evidence. Only submit public pages you are entitled to represent; do not provide access credentials for private accounts.

AI output may be inaccurate or incomplete. You can review and correct your draft before confirming it. Submission approval is an internal review decision, separate from email verification, referral qualification and an early-access invitation. We do not use an AI draft alone to guarantee admission, credit use or commercial outcomes. Contact us about an error in public-source information or a review decision.

5. Who can access information

Authorised Afipal team members and service providers can access information needed to prepare and review submissions, handle enquiries, operate the service and protect it. Access is limited by role and purpose. We may disclose information when legally required or when necessary to protect people, investigate misuse or establish or defend legal claims.

A waitlist submission is not automatically a public profile. A referrer’s private progress page shows aggregate counts, credits, verification and priority state; it does not disclose referred people’s email addresses, identities or submission content. Referrals do not give an inviter access to your draft or contact details.

6. Providers and international processing

Amazon Web Services provides hosting, storage, content delivery and operational email. OpenAI helps prepare drafts from submitted public links and relevant public information. Microlink and Apify may retrieve public pages and profile information when ordinary retrieval is unavailable. These providers and their subprocessors may process information outside your country, including outside the European Economic Area. Where required, transfers are subject to applicable safeguards such as adequacy decisions or standard contractual clauses under the providers’ data-processing arrangements. Contact us for details of the safeguards relevant to your information.

Provider information is available from AWS, OpenAI, Microlink and Apify. The public websites and social platforms you link to have their own privacy practices. A public link is sent to the relevant website or retrieval provider when we fetch it; this does not grant us access to private content on that platform.

7. Cookies, browser storage and private links

Essential first-party cookies support onboarding continuity, request protection and security. An unfinished submission can be restored in the same browser for up to 24 hours. After confirmation, a read-only completion receipt lasts 30 minutes so a refresh or lost response can recover the completion screen. Your theme preference is stored in your browser.

Invite links contain a public referral code intended for sharing. Verification and private referral-progress links contain credentials: keep them private. Anyone with a working private progress link can view that link’s aggregate progress. Submissions using the same contact email share one waitlist identity and referral progress.

The public waitlist does not use optional advertising cookies or session replay. If that changes, we will update this policy and provide any required consent choices before enabling those tools. External links and the websites you submit are governed by their own notices.

8. How long we keep information

We keep submissions, draft edits and associated public-source information while needed to manage your early-access request. Referral and verification evidence may remain necessary to maintain accurate progress, prevent abuse and resolve disputes. Contact messages are kept while needed to handle the enquiry and any related follow-up. Technical records, expired credentials and temporary processing artifacts are subject to scheduled cleanup. We assess requests to remove information and retain only what remains necessary for security, legal obligations or legal claims. Deleted information may remain in protected backups until those copies are replaced under their retention cycle.

Leaving the waitlist does not necessarily erase records needed to prevent duplicate referrals, resolve a dispute or meet a legal obligation. We assess those exceptions when handling a request. We cannot remove information from the independent public websites you originally linked.

9. Your choices and rights

You can contact us to ask about your information, correct a draft or request removal from the waitlist. Where data protection law applies, you may ask to access, correct or erase personal information, restrict processing, receive a portable copy, or object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you can withdraw it without affecting earlier lawful processing.

We may need to verify your identity and consider applicable legal exceptions before fulfilling a request. You can complain to the data protection authority responsible for your location; the European Data Protection Board lists EEA authorities. There is no need to send us a password or a private verification link to make a privacy request.

10. Children and policy changes

Do not submit a child’s information without the permission and authority required by applicable law. Contact us if you believe a child’s personal information has been submitted or used improperly so we can investigate.

We will update the date above when this policy changes and give appropriate notice of significant changes. Updating this policy does not itself provide consent for a new use of your information.