Information We Collect
We collect the name, email address, organization, role, and account status you provide when an account is created. Passwords are stored only as hashes. This application does not collect payment card details.
How We Use Your Information
We use account information to sign you in, operate the organization benefits platform, and link a member to the current affiliate provider when that organization is configured for it. We do not sell personal data.
Sharing Your Information
When a member is created, the platform can create or link an affiliate account at the current provider using name and email. A separate setup credential is generated for that provider and is not your Universal Perks password. Offer and click totals are retrieved from that provider. Merchants handle their own checkout.
Cookies & Tracking
The website sign-in cookie is named up_session. It is set by the API, marked HttpOnly, and expires after 24 hours. Logout and deactivation revoke the session. The Chrome extension stores its own sign-in session in extension storage until logout. The application does not include an analytics SDK, advertising pixel, or tag manager.
Data Retention
Account records remain while the account exists. Deactivation keeps the record and blocks the next login. Permanent deletion is done by an organization administrator and is not a self-service button. Fixed retention periods are not published until they are approved and operating.
Your Rights
You can ask for access, correction, or deletion using the form on this page. An administrator can export a member file and permanently delete a member, including a request to delete the linked affiliate-provider account. There is no automatic self-service export.
Children's Privacy
Universal Perks is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
Security
Passwords are hashed. Sign-in tokens expire after one day. Logout and deactivation revoke the current session. Multi-factor authentication and a formal security-audit program are not in place.
Third-Party Links
Our platform contains links to partner stores and third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the platform or by email. Continued use of the platform after changes indicates your acceptance.
California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of its sale.
International Transfers
Your information may be transferred to and processed in countries other than your own. We ensure such transfers comply with applicable data protection laws and that adequate safeguards are in place.
Contact Us
Submit a privacy or support request with the form below. A postal address and monitored privacy@ or support@ mailbox are not confirmed in the product yet, so this form is the working channel.