Legal
Privacy Policy
A Vantyx Enterprises product · referiq.net · Last updated October 2, 2026
ReferIQ (referiq.net) is a referral revenue platform operated by Vantyx Enterprises (“we”, “us”). This policy explains what personal information the platform handles, why, who it is shared with, and the choices you have. It covers our customers (businesses that use ReferIQ), their referral partners, the leads and customers those businesses manage in ReferIQ, and visitors to our websites and referral links.
For leads and partners that a customer manages in ReferIQ, that customer decides what is collected and why, and we process the information on their behalf. Questions about that data are best directed to the business you dealt with; we will help them respond.
Information we collect
- Account information: name, email address, and a hashed password for people who sign in to the dashboard or partner portal; your role and organization; settings such as alert email addresses; and a record of actions taken in the account (audit log).
- Partner information: referral partners’ names, email addresses, phone numbers, applications, agreements, commissions and payout records. Payout bank and tax details are collected and held by Stripe, not by us.
- Lead information: details our customers enter or send us about their leads — name, email, phone, notes, stage, consent and opt-out status — plus how the lead arrived (referral link, campaign parameters such as utm values and Google click IDs, and events such as conversions).
- Call tracking: for customers using tracking numbers, the caller’s phone number, call time and duration. We forward calls; we do not record them.
- Referral link and website visits: when someone follows a referral link or visits our marketing pages we log the page, referrer, browser user agent and a salted, truncated hash of the IP address (not the IP itself). Email open tracking records when a message we sent on a customer’s behalf is opened.
- Inquiries: what you submit through our inquiry or partner application forms (name, email, company, message, and campaign parameters).
- Public content: to find referral opportunities, the platform reads public posts from sources such as Reddit and RSS feeds, which may include the author’s public username and post text.
- Connected accounts: when a customer connects Google Search Console, Google Ads, Meta Ads, a CRM or a social account, we store the access tokens (encrypted) and the data described in the next section.
Google user data
If you connect a Google account, ReferIQ accesses only what the feature you enabled needs:
- Google Search Console — search performance data for the properties you choose, and sitemap submission for sites we manage for you.
- Google Ads — creating and managing the campaigns you approve, reading their spend and performance, and uploading offline conversions (a Google click ID, the conversion time and its value) so Google Ads can measure results.
ReferIQ’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the features you see in ReferIQ; we do not sell it, use it for advertising unrelated to your account, or use it to train generalized AI models. You can disconnect a Google account at any time in ReferIQ, which deletes the stored tokens, or revoke access at myaccount.google.com/permissions.
How we use information
- To run the platform: route and track leads, attribute referrals, calculate commissions and pay partners.
- To send email and text messages our customers set up, honoring consent and opt-outs.
- To manage advertising and SEO for customers who ask us to.
- To generate drafts, summaries, scores and suggestions with AI (see below).
- To bill customers, prevent fraud and abuse, secure the service, and meet legal obligations.
- To respond to inquiries and support requests.
AI processing
Some features use AI models: scoring and summarizing public posts, drafting content and ad copy, and analyzing website pages. Requests go to AI infrastructure operated by Vantyx and, where configured, to third-party model providers (such as xAI, OpenAI or Anthropic) under their API terms. We do not send leads’ names, email addresses or phone numbers to AI providers. AI output is a suggestion; customers review it before it is published or used to spend money.
Who we share information with
We do not sell personal information. We share it only with service providers that help us run ReferIQ, or as our customers direct:
- Stripe — customer billing and partner payouts (Stripe Connect).
- Google and Meta — advertising, Search Console and conversion measurement, for customers who connect those accounts.
- Twilio — tracking numbers, call forwarding and text messages.
- Resend or another email provider — sending email.
- AI model providers — as described above.
- Cloudflare and our hosting providers — delivering and securing the service.
- Google Analytics — aggregate usage of our websites.
- Systems our customers connect — for example a CRM (HubSpot, Salesforce, Jobber) or a webhook URL, which receive lead details when the customer turns that integration on.
- Authorities or other parties when required by law, or to protect rights and safety.
- A successor organization if the business is merged, acquired or sold, under this policy.
Cookies
- Sign-in cookies keep you signed in and protect forms against forgery.
- Referral cookie (
vantyx_ref) remembers which referral link you followed so the referral can be credited, for the attribution period the referral agreement sets. - Google Analytics cookies measure website usage.
You can block or delete cookies in your browser; some features may not work without them.
Retention
We keep information for as long as the customer’s account is active or as needed to provide the service, keep financial and commission records, resolve disputes and meet legal obligations. When a customer closes their account we delete or anonymize its data on request, except where we must keep it by law. Connected-account tokens are deleted when the account is disconnected.
Your choices and rights
- Unsubscribe from marketing email with the link in any message, or reply STOP to texts.
- Disconnect Google, Meta or other connected accounts at any time.
- Ask to access, correct or delete your information by emailing [email protected]. Depending on where you live you may have additional rights; we will respond as the law requires. If your information was provided by one of our customers, we may refer your request to them.
Security
We protect information with encryption in transit, encrypted storage of access tokens, hashed passwords and API keys, access controls, and audit logging. No system is perfectly secure, and we will notify affected people of a breach as the law requires.
Children
ReferIQ is a business service and is not directed to children under 13. We do not knowingly collect their information.
Changes
We will post changes to this page and update the date above. For significant changes we will notify customers by email or in the app.
Contact
Questions about privacy: [email protected].