Privacy
Last updated 17 October 2026. AppCut is run by a business registered with the Dutch Chamber of Commerce (KvK). Its name, KvK number and address are listed here before launch.
What we collect, why, for how long, and what you can ask of us. Written to be read, not skimmed past.
1. Who is responsible
The company named at the top of this page is the controller for the personal data in this policy. Questions or requests: email support@appcut.pro.
2. What we collect
| Who | What |
|---|---|
| Everyone with an account | Name, email address, password (only stored as a one-way hash), the role you signed up with, and when you log in. |
| Creators | Your handle, profile (bio, country, niche, audience size, channel links), the offers you joined, your clicks, sales and earnings. When you set up payouts, Stripe verifies your legal name, date of birth, address and bank account; we read your name, date of birth and address from Stripe for the yearly DAC7 report. Once you earn: your tax details (paid as yourself or a company, tax country, tax number, VAT and business registration number). |
| Brands and their team | Brand name, the email addresses of team members, offers, the keys your systems use to send us sales, and the type and last 4 digits of the payment method. Card and bank details stay with Stripe. |
| People who tap a creator’s link | The time, country, type of device (iOS, Android, desktop) and whether it looked automated. The IP address and browser are only stored as a one-way hash, to filter bots and fraud. No names, no email addresses, no tracking across other sites. |
| People who use a brand’s app | Brands send us a pseudonymous user ID they choose, which creator link or code the user came through, and their purchases (product, amount, refunds). We never receive their name or email address. |
| Anyone who emails us | Your email and what you write, to answer you. |
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Running your account, offers, tracking and earnings | Our contract with you |
| Payments to creators through Stripe | Our contract with you |
| DAC7 reporting to the Belastingdienst, bookkeeping and tax records | A legal obligation |
| Counting which creator brought a sale, filtering bots and fraud, keeping AppCut secure | Our legitimate interest in correct, fair commission and a safe service |
| Service emails (for example a failed payment or a payout) | Our contract with you |
4. Your tax number
- We ask for it only once you have earned something, and only because EU law (DAC7) requires it.
- It is encrypted before it is stored. The app only ever shows the last 4 digits back.
- We use it only for the yearly DAC7 report to the Belastingdienst, and send you a copy of what we report.
6. Data outside the EU
Stripe can process data in the United States. It does so under the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. Everything else stays in the EU.
7. How long we keep it
| Data | Kept for |
|---|---|
| Account and profile | As long as your account exists, then deleted within 30 days, except what the rows below require |
| Earnings, payouts, tax details and DAC7 reports | 7 years after the year they relate to, as Dutch tax law requires |
| Clicks and sales records | As long as commission can be based on them, and at most 7 years |
| Emails with us | 2 years after the last message |
9. Security
- Everything travels over an encrypted connection (HTTPS).
- Passwords are stored as one-way hashes (scrypt); tax numbers are encrypted.
- Only people who need it for their work can reach the data, and every money movement is kept in an append-only ledger.
- If a data breach puts your data at risk, we tell you and the Autoriteit Persoonsgegevens as the law requires.
10. Your rights
You can ask to see, correct, delete or export your data, to limit how we use it, or object to how we use it on the basis of our legitimate interest. Email support@appcut.pro; we answer within a month. Some data we must keep for tax law, even if you ask us to delete it; we tell you which.
Not happy with how we handle it? You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
11. Changes
When we change this policy in a way that matters, we tell you by email or in the app before it applies. The rules for using AppCut are in our terms.