Merchant service terms

The service and the parties

SPIKE HEALTH LLC, 8 The Green, Suite B, Dover, DE 19901, United States, provides Referlane. These terms apply between us and the merchant business accepting them. The person accepting represents that they may act for that business. Contact support@referlane.app for app support or data-processing instructions.

Referlane helps a merchant manage affiliate accounts, referral discounts, commissions and manual payout records. The merchant sets its program rules, reviews affiliates, and makes payments through its own chosen method. Preparing or exporting a payout in Referlane does not transfer money. Any app subscription is presented and approved through Shopify; these terms do not create a separate charge.

Data processing and merchant instructions

The merchant determines the purposes of its affiliate program and the lawful basis for the information it supplies. We process its program information on its behalf to provide Referlane, follow documented instructions, protect the service and handle privacy requests. We use our own business, account and support information to operate the service as described in the privacy notice.

The processing can include merchant and store identifiers, affiliate profiles and contact details, referral activity, order and refund facts, commission and payout records, payment or tax instructions supplied to the program, and information required for authentication, support and privacy requests. The privacy notice describes these categories, purposes and processing locations in more detail.

We limit collection and use to what the service needs. We do not sell merchant or customer data, use it for unrelated advertising, combine it for competitive benchmarking, or use it to train or improve AI models. The merchant must supply only information it has authority to process and must not put passwords, tokens or unnecessary personal data in free-text notes.

Providers and safeguards

The merchant authorizes the disclosed service providers needed to operate Referlane: Shopify for store services, authentication, billing and privacy callbacks; Railway for application processing; Supabase for database and queue storage; Resend for transactional messages; and Fastmail for support correspondence. Provider access is limited to the service purpose. Additional processing arrangements must have appropriate safeguards and any required authorization before use.

We apply authenticated access, merchant and app-registration boundaries, encryption, and operational controls to protect information. People with production access must keep information confidential and use authorized access for a recorded purpose. The privacy notice explains application encryption and provider storage protections without claiming a certification for Referlane.

We will inform the merchant without undue delay of a personal-data breach affecting its information, cooperate on investigation and remediation, and meet Shopify's notification requirements. Contact the support address for information needed to assess these processing arrangements or applicable data-protection obligations.

Privacy requests, retention and termination

We assist the merchant with valid access, correction, deletion and other applicable privacy requests. These processes do not depend on an active paid subscription. A downloaded export is not proof that a requester received it. The merchant must verify the requester, use a secure delivery channel and accurately record completion.

Retention and deletion follow the privacy notice, applicable Shopify requirements, documented instructions and applicable law. Any legal restriction on erasure must be identified for the particular records and reviewed rather than used as a general reason to keep all data indefinitely. The merchant is responsible for copies it downloads and for its separate payment services.

When service ends, we must address the applicable return and deletion obligations, including operator and provider copies. An outstanding balance or an immutable audit design is not by itself a legal retention exception. The merchant should obtain needed program records before uninstalling and contact support about an unresolved request or required legal retention.

Responsibility and changes

SPIKE HEALTH LLC is responsible for Referlane, its support, and our handling of data through the app. Shopify is not a party to these terms and is not responsible for Referlane defects, harm caused by the app, or our access, use, disclosure or storage of merchant data. Shopify does not provide Referlane installation or usage support unless it expressly says otherwise.

The merchant remains responsible for its affiliate program rules, communications and payment decisions. Nothing in these terms removes rights or duties that cannot lawfully be excluded. Questions and disputes about Referlane should be sent to support@referlane.app.

We identify the version of these terms presented to the merchant and record acceptance. Material changes require an updated version and appropriate notice or acceptance. The merchant's affiliate-program terms are a separate agreement between that merchant and its affiliates.