Privacy Policy

We may collect information submitted through Partner applications and profiles, including organization name, contact name, email address, phone number, website, social media profiles, mailing address, EIN or nonprofit status information where provided, organization description, requested slug, application status, and related review information.

We may process account and authentication information such as email address, account ID, login status, password reset activity, authentication tokens or session data, user role or authorization status, and admin or Partner access permissions. Authentication may be handled through Supabase Auth or similar service providers.

For approved Partners, we may collect and store Partner profile and dashboard-related data, including organization name, Partner status, approval status, Partner slug, donation rate, referral URL, QR code, marketing material access, profile information, onboarding checklist activity, referred order records, estimated donation records, pending donation records, paid/manual payout history, payout period records, dashboard activity, and administrative notes.

We use this information to operate the Partner Portal, generate referral links and QR codes, calculate estimated donations, review payouts, communicate with Partners, and administer the program.

Supporters purchase BaxterDog products through BaxterDog's Shopify storefront, not through the Partner Portal. When a Shopify order includes referral information connected to an approved Partner, Shopify may send order data to the Partner Portal through verified server-side webhooks.

For matched referred orders, the Partner Portal may store limited normalized order attribution data, including Shopify order ID, Shopify order number, Partner ID, referral slug, SHA-256 hash of customer email, subtotal, discounts, tax, shipping, refunds, net eligible revenue, estimated donation amount, currency, order status, financial status, and redacted Shopify payload for audit, debugging, and attribution review.

The Partner Portal is designed not to store raw Shopify customer email addresses in plain text. Customer email values used for attribution may be hashed, and email-looking fields in stored Shopify payloads may be redacted.

The Partner Portal may process referral and technical data related to Partner links, QR codes, landing pages, or dashboard activity. This may include Partner slug, referral URL, QR code activity, landing page, referring page, browser or device information, user agent, approximate technical location information, hashed IP address, timestamps, click or referral activity, and system logs.

We use this information to support referral attribution, analytics, fraud prevention, security, debugging, and program administration.

Approved Partners may access BaxterDog marketing materials through the Partner Portal. We may collect information about marketing asset activity, including which assets were viewed or downloaded, Partner account associated with the activity, timestamps, asset titles, URLs, or categories, and administrative status of assets.

We may send transactional Partner Program emails, including messages related to application received, new application notifications, approval, rejection, pause, reactivation, payout marked paid, account access, password resets, program administration, and support requests.

Transactional emails may be sent using DreamHost SMTP, server-side email systems, or other email service providers. Email delivery failures may be logged, but an email failure may not prevent the underlying database action from being completed.

We use Partner Portal information to receive and review Partner applications, verify eligibility, approve or manage Partners, create and manage accounts, provide login and account access, generate referral links and QR codes, track supporter purchase attribution, calculate estimated donations, review pending donations, create and manage payout records, provide marketing materials, send transactional emails, respond to support requests, detect fraud or security issues, debug technical issues, maintain audit records, comply with legal obligations, and improve the Partner Program.

We may share information with service providers and processors that help us operate the Partner Portal and Partner Program, including Supabase for authentication and database services, Vercel for hosting and deployment, Shopify for storefront purchases and order data, DreamHost SMTP or email services for transactional emails, Stripe if Stripe Connect or payout onboarding is added in the future, Klaviyo if lifecycle or marketing communications are added in the future, and legal, tax, accounting, compliance, security, or professional advisors.

We do not sell Partner Portal account information as part of the current Partner Program. We do not provide Partners with raw Shopify customer email addresses through the Partner Portal.

The Partner Portal is designed so Partner users can access their own linked Partner records, referral information, attributed order records, estimated donation information, payout records, and related dashboard information.

Administrators may access Partner records to review applications, manage Partner status, review attribution, review payouts, manage marketing assets, troubleshoot issues, and administer the Partner Program.

Security features may include role-based access controls, Supabase Row Level Security, admin access restrictions, server-side handling of sensitive actions, Shopify webhook HMAC verification, redaction of email-looking fields from stored Shopify payloads, hashing of customer email values for attribution, secure hosting infrastructure, and limited access to administrative functions.

The Partner Portal does not currently collect or store Partner bank account information. If BaxterDog later implements Stripe Connect or a similar payment provider, Partners may be redirected to hosted payment provider pages to complete payout onboarding. BaxterDog may store limited payment provider identifiers or onboarding status information if needed to administer payouts.

We may retain Partner Portal information for as long as reasonably necessary to operate the Partner Program, maintain records, resolve disputes, prevent fraud, comply with legal obligations, and support tax, accounting, audit, and compliance needs.

We may retain certain records after a Partner account is paused, rejected, terminated, or deleted where necessary for legal, tax, accounting, fraud prevention, audit, or legitimate business purposes.

Partners may be able to update certain organization, contact, website, social media, mailing address, and profile fields through the Partner Portal. You may also contact BaxterDog to request corrections or updates to Partner information.

Supporters purchase through BaxterDog's Shopify storefront. The Partner Portal processes limited order attribution data to determine whether a supporter purchase may be connected to an approved Partner referral link or QR code.

The Partner Portal does not provide Partners with raw supporter email addresses or full customer profiles. Customer purchase information may also be governed by BaxterDog's storefront privacy policy, Shopify's processing, and checkout-related terms or notices.

The Partner Portal is intended for use by adult representatives of Partner organizations. It is not intended for use by children under 13. We do not knowingly collect personal information from children through the Partner Portal.

Depending on where you live and how applicable privacy laws apply to BaxterDog, you may have rights regarding your personal information, such as the right to request access, correction, deletion, portability, or information about certain data practices.

We may need to verify your identity or authority before responding to a request. Certain information may be exempt from deletion or correction requests where we need to retain it for legal, tax, accounting, fraud prevention, security, dispute resolution, or legitimate business purposes.

The Partner Portal is operated by BaxterDog Media LLC from the United States. If you access the Partner Portal from outside the United States, you understand that your information may be processed in the United States or other locations where our service providers operate.

We may update this Privacy Policy from time to time. When we make changes, we may update the Last Updated date above and may provide notice through the Partner Portal, by email, or by other reasonable means.