Affiliate Quality Tiers
Privacy Policy
Affiliate Quality Tiers never asks Whop for anything about your buyers. It reads your affiliates, your plans and your products, and it writes one thing: the commission rate on an affiliate override you approved. No customer name, email address, postal address, phone number or payment detail is requested, received or stored — the app holds no permission that would let it read them.
1. Who we are
Affiliate Quality Tiers (the “app”) is built and operated by Orumio (“we”, “us”).
| Operator | Orumio |
|---|---|
| Representative | Masanori Iwata |
| Address | Mitsuhashi Building 3F, 1-3-3 Kita-Aoyama, Minato-ku, Tokyo 107-0061, Japan |
| Contact | support@orumio.com |
| Telephone | We will disclose this without delay in writing or by email upon request. Please send requests to the contact address above. |
When you install the app on your Whop business, you are the controller of the data in your Whop business and its affiliate program, and we act as your processor: we process it only to provide the app to you, on your instructions.
2. What the app processes
2.1 From Whop, as the app you installed
The app reads your affiliate records (how many referrals each affiliate has brought, how many of those members are still active, Whop’s own retention figures, and the aggregate revenue and earnings Whop reports for that affiliate), your plans and the products they belong to, and the commission overrides already on your affiliates. It requests five permissions and no others: reading affiliates, plans and access passes, and creating and updating affiliate overrides. It holds no permission to read payments, members or users, and a call for data outside those five is refused by Whop, not merely declined by us.
2.2 About affiliate names
An affiliate record includes that affiliate’s Whop username, and the app stores it so its screens can name the affiliate you are deciding about rather than showing you an identifier. It is the same name your own Whop dashboard already shows you. No other property of the person behind an affiliate is read or kept — no email address, no legal name, no contact detail.
2.3 About the people who use the app
Only an admin of your business can open the app, which Whop confirms on every page load and on every action. Where a decision needs an author, the app records the acting admin’s Whop user id — who approved a change, who saved a policy, who bought the subscription — so that a commission change can be traced to the person who authorised it. It records the id Whop gives it and nothing else: no name, no email address.
2.4 Stored by the app
| Data | Personal data? | Why it exists |
|---|---|---|
| Your Whop business id | No — a business identifier | Identifies your installation |
| Affiliate records: id, Whop username, status, referral and active-member counts, Whop’s retention figures, and the revenue and earnings totals Whop reports per affiliate | The username, yes | The input to the tier decision, and what the screens show you |
| Plans and products: id, title, type, visibility, renewal price, currency, billing period, and the affiliate program rates set on the product | No — your catalogue | A commission rate is per plan, so the plan’s own terms decide what is proposed |
| Commission overrides: id, plan, type, value, and what they apply to | No — commercial terms | What exists today, and what a proposal would change |
| Your tier policy and its version history | No — your commercial terms | What each tier pays, and what past decisions were made against |
| Proposed and executed changes, and every attempt behind them | Whop user id of the approving admin | The record of what was proposed, approved, written and verified |
| Subscription status for the app itself | Whop user id of the purchaser | Entitlement and support |
| Product usage counters (which steps happened and when) | No | Whether the product works; kept in our own database, never sent to an analytics service |
3. Why we process it
One purpose only: to provide the app — read your affiliate program, sort affiliates into the tiers your policy defines, propose a commission rate for each, and write the changes you approve. This is the purpose we declared to Whop when we requested access, and it is the only thing the data is used for.
We do not, and the app has no mechanism to:
- use your data for marketing, advertising or profiling;
- sell or share your data with anyone;
- use your data to train machine-learning models;
- benchmark, aggregate or compare your affiliates, your rates or your revenue against another business’s.
The app makes no automated decisions about people, and no decision of any kind is made by an AI model. What each tier pays is a number you set; which tier an affiliate lands in follows written rules over Whop’s own figures, and the reason is shown next to every affiliate. Where the rules do not clearly apply, the app proposes nothing rather than guessing.
4. Who else processes it (sub-processors)
The app talks to a deliberately small number of external services. There is no analytics service, no error-reporting service receiving payloads, no email or messaging service, and nothing loaded into the page from a third party.
| Service | Role | Data it can see |
|---|---|---|
| Whop | The platform your business and its affiliate program run on | All of your business data — Whop is the source of truth, governed by your agreement with Whop |
| Vercel (Vercel Inc.) | Application hosting, scheduled jobs and runtime logs | Data in transit while a request is served, plus runtime logs |
| Neon (Neon Inc.) | Managed Postgres database | Everything the app stores, listed in the table above |
Our database and application servers are located in the United States. If you are in the European Economic Area or the United Kingdom, this means your data is transferred outside that region. We are established in Japan, which the European Commission and the United Kingdom have each recognised as providing adequate protection. Write to support@orumio.com if you need the details of the safeguards that apply to the onward transfer to our hosting providers.
5. How it is protected
- It asks for as little as it can. Five permissions, none of which can read your buyers. Data that was never requested cannot leak from our database.
- Encryption in transit. The app is served only over HTTPS, and its connections to Whop and to the database both use TLS.
- Every request proves who you are. Access is a signed token Whop issues for this app, verified on each page load, plus a live check with Whop that you are an admin of that business — repeated on every action, not just at sign-in. A failure to reach Whop is treated as no access.
- One business at a time. Every record is keyed to your business id and every query is scoped by the business the request was authenticated for.
- Credentials are never in the database. The keys the app uses live only in its runtime configuration. No credential, request header or response body is ever written to a record or to a log.
- Changes are verified, not assumed. Every commission change the app writes is read back from Whop and compared with what was approved; each attempt is recorded, and anything that does not match stops rather than repeats.
6. Logging
The app writes operational logs so that failures can be diagnosed. Those logs record identifiers, classifications, counts and timestamps — never access tokens, never raw payloads, and never personal data. Logs are held in our hosting provider’s runtime log storage; nothing is forwarded to any third-party log or analytics service.
7. Cookies and tracking
The app sets no cookies of its own and uses no advertising, analytics or tracking cookies.
8. How long it is kept
- While the app is installed, your records are kept so the app can show history and so a change can be traced to the run and the person that produced it.
- Within 30 days of the app losing access to your business — because you uninstalled it or withdrew its permissions — everything listed above is deleted: your affiliates and their snapshots, your policy and its versions, every proposal, change and attempt, the ownership record, notifications and your subscription record.
- Usage counters are kept, with your identity removed. The counters that tell us whether the product works are not deleted; instead the business id on them is replaced with a one-way digest and every key naming a person is stripped out, so they can no longer be connected to you or to anyone at your business.
- Commission overrides on Whop are yours and are left alone. Deleting our records does not change any rate on your affiliates — what the app wrote stays exactly as you approved it, under your control in Whop.
9. Requests from data subjects
Because the app stores an affiliate’s Whop username and the Whop user id of an admin who approves a change, you can ask us about that data at any time. Write to us and we will answer within 30 days.
- Access and export: We will tell you what the app holds for your business, and provide it in a machine-readable form.
- Deletion: We will delete everything the app holds for your business on request, without waiting for the 30-day period above. Uninstalling the app starts the same deletion by itself.
- Correction: The affiliate figures come from Whop and are corrected there — the app re-reads them every week. Anything the app itself recorded, such as your tier policy, you can change in the app.
10. Security incidents
If we confirm an incident affecting your data, we notify the affected customers directly and in plain language — what happened, what data was involved, what we have done, and what if anything you need to do — targeting within 72 hours of confirming it.
11. Changes to this policy
If we change what the app does with data, we update this page and its version number before the change ships. Material changes are announced to customers with an active installation.
12. Contact
Questions, requests, or anything that looks wrong in this policy: support@orumio.com.
Affiliate Quality Tiers · Version 1.0, 8 September 2026 ·
Affiliate Quality Tiers is an independent product of Orumio and is not affiliated with, endorsed by, or sponsored by Whop Inc. Whop is a trademark of its owner.