Security at Referly

Referly handles your affiliate, referral, and commission data. Here's how we protect it.

Encrypted in transit: All traffic to Referly — the marketing site, dashboards, affiliate portals, and API — is served exclusively over HTTPS/TLS.
Payments handled by Stripe: Card and payout details are processed by Stripe, a PCI-DSS Level 1 certified provider. Your card numbers never touch Referly's servers or database.
Managed, access-controlled infrastructure: Referly runs on Vercel with data stored in a managed PostgreSQL database (Supabase). Production access is limited to the founding team.
Session-based authentication: Accounts are protected with industry-standard session authentication (NextAuth), and auth pages are excluded from search indexing.
Privacy-first data handling: We don't sell personal data. What we collect and why — including Google-connected account data for affiliate verification — is documented in our Privacy Policy.
Data deletion on request: Want your account and data removed? Email us and we'll process the deletion.

Questions or disclosures

Found a vulnerability, or have a security question before signing up? Email support@referly.so and we'll respond promptly. See also our Privacy Policy and Terms of Use.

Referly handles your affiliate, referral, and commission data. Here's how we protect it.

Encrypted in transit: All traffic to Referly — the marketing site, dashboards, affiliate portals, and API — is served exclusively over HTTPS/TLS.
Payments handled by Stripe: Card and payout details are processed by Stripe, a PCI-DSS Level 1 certified provider. Your card numbers never touch Referly's servers or database.
Managed, access-controlled infrastructure: Referly runs on Vercel with data stored in a managed PostgreSQL database (Supabase). Production access is limited to the founding team.
Session-based authentication: Accounts are protected with industry-standard session authentication (NextAuth), and auth pages are excluded from search indexing.
Privacy-first data handling: We don't sell personal data. What we collect and why — including Google-connected account data for affiliate verification — is documented in our Privacy Policy.
Data deletion on request: Want your account and data removed? Email us and we'll process the deletion.

Found a vulnerability, or have a security question before signing up? Email support@referly.so and we'll respond promptly. See also our Privacy Policy and Terms of Use.