Privacy Policy

Last updated: 15 May 2026 · Version 1.1.0

This Privacy Policy explains what data Earnqo collects, why, how we share it, and how you can control it. We try to keep this in plain English; if a section is unclear, email [email protected].

1. Data we collect

You give us: email, password (hashed), age range, gender (optional), interests (optional), country, display name, payout details (PayPal email / crypto address / phone for mobile money / etc) when you withdraw, KYC documents (ID + selfie) only if you reach the verification threshold.

We collect automatically: IP address, device fingerprint, browser metadata, session timestamps, page views, button clicks (event-level analytics), referral codes, conversion postbacks from advertising partners.

From partners: offer-completion postbacks (advertiser id, offer id, conversion amount, anti-fraud signals).

2. Why we collect it

• Account & service: authenticate you, credit your balance, send payouts.
• Fraud prevention: detect multi-accounting, bot traffic, geo-spoofing.
• Compliance: meet KYC/AML obligations for high-value withdrawals.
• Product improvement: see which features users actually use.
• Communications: transactional emails (security alerts, withdrawal confirmations), optional marketing emails if you opt in.

3. Legal bases (GDPR Article 6)

• Contract: processing necessary to deliver the Service you signed up for.
• Legitimate interest: fraud prevention, security, product analytics in aggregate.
• Consent: marketing emails, analytics cookies (revocable any time from /settings/privacy).
• Legal obligation: AML/KYC retention windows.

4. How we share data

• Service providers (payment processors, hosting, email delivery, fraud signals) under contract that restricts them to processing on our behalf.
• Advertising partners receive a salted hash of your user id when you complete their offer — they need this to credit conversions. They never receive your email, name, or payout details.
• Authorities when we're legally compelled (subpoena, court order, AML report).
• Successors if Earnqo is acquired or merges (with notice to you).

We do not sell your personal data. We do not share your data with data brokers. We do not allow advertising partners to track you across other sites.

5. Cookies & similar tech

See our Cookie Policy. Short version: necessary cookies are always on (session, security, fraud). Analytics, marketing, and preferences cookies are opt-in via the consent banner.

6. Retention

• Account data: while the account is active, plus 30-day deletion grace window.
• KYC documents: 5 years after account closure (AML obligation).
• Withdrawal records: 7 years (tax/audit obligation).
• Server logs: 90 days.
• Marketing email lists: until you unsubscribe.

7. Your rights

Depending on your jurisdiction, you can:

• Access the data we have on you — export from /settings/privacy or email [email protected].
• Correct inaccurate data — most fields editable directly in /settings.
• Delete your account and data — /settings/privacy → request deletion.
• Port your data — export as JSON from /settings/privacy.
• Object to processing — email [email protected].
• Withdraw consent for marketing/analytics — toggle in /settings/notifications.
• Complain to a supervisory authority (EU: your national DPA; California: AG's office).

We respond to verifiable requests within 30 days.

8. Security

• All passwords hashed with bcrypt.
• All traffic over TLS 1.2+.
• Database encrypted at rest.
• Quarterly third-party penetration testing.
• Bug bounty: [email protected].

No system is 100% secure. We'll notify affected users within 72 hours of confirming a breach.

9. Children

The Service is 18+. We do not knowingly collect data from children. If you believe we have data from a minor, email [email protected] and we'll delete it.

10. International transfers

Your data may be processed outside your country (typically US/EU). We use Standard Contractual Clauses (SCC) where required.

11. Changes

We'll notify you in-app and via email if we materially change this policy. The latest version always lives at /legal/privacy.

12. Contact

[email protected] · DPO (EU users): [email protected]