Warmlink
Sign in

Privacy Policy

Wildeye, Inc. d/b/a Warmlink
Effective Date: July 16, 2026
Last Updated: October 27, 2026

1. Introduction

Welcome to Warmlink. This policy is issued by Wildeye, Inc., a corporation doing business as Warmlink (“Warmlink,” “we,” “us,” “our,” or the “Company”). Warmlink is a trading name; the entity responsible for your data, and the data controller where that term applies, is Wildeye, Inc. Warmlink is an AI-powered social commerce platform that enables content creators to build personalized affiliate stacks and earn commissions through product recommendations and endorsements. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, or interact with our platform (collectively, the “Service”).

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Registration Information: Name, email address, username, password, and profile information when you create an account.
  • Creator Profile Data: Social media handles, audience demographics, content niche categories, and platform preferences you provide when setting up your creator stack.
  • Payment and Financial Information: Banking details, PayPal or payment processor credentials, tax identification numbers (e.g., W-9/W-8BEN), and payout preferences necessary to process affiliate commissions.
  • Communications: Messages, support requests, feedback, and correspondence you send to us or through the platform.
  • Referral and Network Data: Information about members you refer to the platform and your position within the affiliate network structure.

2.1a Information You Provide About Other People

Some features let you give us information about someone other than yourself — most commonly a colleague’s email address when you invite them to join Warmlink. We use that information only to contact the person for the purpose you asked us to (for example, sending your invitation and attributing them to your referral network if they choose to join), and to prevent abuse. We do not sell it, and we do not use information you give us about another person to build a profile of them.

If you give us someone else’s personal information, you represent that you have a relationship with them that makes it reasonable to do so, and that you are permitted to share it with us. Please do not send us personal information about people who have not agreed to hear from you.

If someone gave us your information and you would rather we did not hold it, email privacy@warmlink.io and we will delete it. You do not need a Warmlink account to make that request, and we will not require you to create one.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, click-through activity, stack interactions, product views, and conversion events.
  • Device and Browser Information: IP address, browser type and version, operating system, device identifiers, screen resolution, and language preferences.
  • Cookies and Tracking Technologies: We use cookies, pixel tags, web beacons, and similar technologies to collect information about your browsing behavior and to facilitate affiliate link tracking and commission attribution.
  • Log Data: Server logs that record access times, referring URLs, and error logs.

2.3 Information from Third Parties

  • Google Contacts: If you connect them, the names, email addresses and photos in your Google contacts, as described in §2.3b below.
  • Social Media Platforms: When you connect an account (for example X/Twitter, Instagram, YouTube, TikTok, or LinkedIn), we may receive publicly available profile information, follower counts, content metadata, and engagement metrics to power our AI-driven stack generation features. We request the narrowest permissions that make the feature work, we use what we receive only to build and improve your own stack, and you can disconnect an account at any time from your dashboard. YouTube is covered in more detail in §2.3a below.
  • Affiliate Networks and Partners: Transaction data, conversion data, and commission information from affiliate network partners — currently PartnerStack, Impact, Rakuten, AWIN, CJ, ClickBank, and Digistore24, plus other networks we may integrate — to calculate and distribute earnings.
  • Analytics Providers: Aggregated and de-identified data from third-party analytics services.

2.3a YouTube and Google User Data

Warmlink uses YouTube API Services. Connecting a YouTube channel is optional. If you choose to connect one, Google asks you to grant Warmlink the youtube.readonly scope. We ask for it for two reasons: to confirm that you own the channel you are linking, and to show that channel on your stack so visitors can see whose recommendations they are reading.

With that authorization we make a single request to the YouTube Data API (channels.list with part=snippet,statistics and mine=true) and store five fields: your channel ID, channel handle, display name, subscriber count, and avatar image URL. Those fields can then appear on your own Warmlink stack. The token makes no other request. That token is never sent to any other YouTube endpoint: we do not use it to read your comments, watch history, private analytics, subscriptions, or messages, and it cannot post, upload, edit, or delete anything on your channel or on your behalf.

Limited Use. Warmlink’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, we do not use it to train generalized artificial intelligence models, and we do not permit humans to read it except where you have given explicit consent, where it is necessary for security purposes, or where we are required to by law.

Revoking access. You can disconnect your YouTube channel at any time from your Warmlink dashboard. Disconnecting deletes the stored Google token and unlinks the channel from your account. You can also revoke Warmlink’s access directly from your Google Account at myaccount.google.com/permissions, which works whether or not you still have a Warmlink account. To have the stored channel fields deleted as well, email privacy@warmlink.io.

Separately from any authorization you grant, Warmlink reads publicly available channel information through the YouTube Data API using an API key: a channel’s profile and public statistics, its topic and branding details, its public playlists, and the titles, descriptions and public view counts of its recent uploads. We use this to draft and improve stacks. That path uses no Google account authorization, works for channels whose owners have never signed in to Warmlink, and returns only information YouTube already publishes to any visitor. Because it is public and requires no permission from you, that information may be retained after you disconnect your channel.

By connecting a YouTube channel you also agree to the YouTube Terms of Service. Google’s own handling of your information is described in the Google Privacy Policy.

2.3b Google Contacts

Connecting your Google Contacts is optional. If you connect them, Google asks you to grant Warmlink two read-only scopes. contacts.readonly covers the contacts you have saved. contacts.other.readonly covers the “other contacts” Google keeps for people you have emailed. You can untick either one on Google’s screen. We also ask for your Google account’s email address and profile photo, only to show you which account is connected.

What we read and keep. Through the Google People API we read, for each contact, their name, their email addresses and their photo, and nothing else: no phone numbers, postal addresses, notes, birthdays, or groups. For each address we store a one-way fingerprint (a SHA-256 hash of the normalized address), the address itself encrypted at rest, the name as you saved it, and, if the contact has a photo (not the letter pictures Google draws for contacts without one), a small copy of it, 96 pixels square, stored by us. The photo is shown only to you, beside that contact, and its copy is deleted with the contact, when the photo changes, or when you disconnect. Contacts without an email address are not stored. We read your contacts again about once a month so the list stays current, and we delete any contact that is no longer in your Google account.

What we use it for. Only for features you see: to show you which of your contacts are already Warmlink members so you can follow them; to tell you, by notification or email, when one of your contacts joins Warmlink; and to show you your own contacts so you can invite someone. Warmlink does not email your contacts. When you press Invite for a person, your own email app opens with a suggested message and your invitation link filled in; you can change it, and it is sent from your address, by you, or not at all. We never invite your contacts in bulk, and never tell a contact, or any other member, that they are in your address book. If someone joins through your invitation link, you and they are connected (each follows the other) and you are credited for the referral, as with any referral link. We do not use contact data received from Google for anything else: not for advertising, and not to suggest your contacts to anyone but you. You can turn off contact notifications in your email settings.

People in a member’s contacts. If you received a Warmlink invitation, it came from the member’s own email account, not from Warmlink. We hold your name and address only as part of that member’s connected contacts, for the uses above, and delete them when the member disconnects. You can ask us to delete them sooner at privacy@warmlink.io without creating an account.

Limited Use. Warmlink’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell contact data, we do not use it for advertising, we do not use it to train generalized artificial intelligence models, we do not share it with third parties, and we do not permit humans to read it except where you have given explicit consent, where it is necessary for security purposes, or where we are required to by law.

Deleting and revoking. Disconnecting a Google account on the Your network page deletes the stored Google token and every contact we read from that account, immediately. Closing your Warmlink account does the same. You can also revoke Warmlink’s access at myaccount.google.com/permissions. We notice the next time we read your contacts, within about a month, and delete them then. Google’s own handling of your information is described in the Google Privacy Policy.

2.3c Google Calendar

Connecting your Google Calendar is optional and separate from your contacts. If you add it, Google asks you to grant Warmlink the read-only calendar.readonly scope. We use it to read the list of your calendars, so that calendars shared with you, such as a family or team calendar, are included, and then the events on them from the last five years. Holiday, birthday, weather and other public calendars are skipped.

What we read and keep. For each event we ask Google for only its start time, whether it was cancelled, its title, and its attendees’ names, email addresses and replies. We never request or receive an event’s description, location, attachments or conference links. We read the title only to tell what kind of meeting it was (for example a sales call, an investor meeting or an interview) and never store it. Events with more than 10 people, events you declined, cancelled events and future events are not counted. For each person you met we keep only the number of meetings, the dates of the first and last, and the kinds of meeting with how many of each and the date of the last, stored with that person’s contact entry as described in §2.3b (a one-way fingerprint of the address, the address encrypted at rest, and their name). Nothing else from your calendar is stored. We read it again about once a week.

What we use it for. Only for features you see: to show you the people you meet most, which of them are already Warmlink members, and to suggest whom to invite. Warmlink does not contact anyone on your calendar. Calendar data is shown only to you, is never sold or shared, and is never used for advertising or to train AI models. The Limited Use commitment in §2.3b applies to it in full.

Removing it. On the Your network page you can remove Calendar from an account, which deletes every meeting count we kept, or disconnect the account, which deletes its contacts and meetings together. You can also revoke Warmlink’s access at myaccount.google.com/permissions.

2.3d Microsoft contacts and calendar

Connecting a Microsoft account (Outlook.com, Hotmail, Live or Microsoft 365) is optional. Microsoft asks you to grant Warmlink read-only Contacts.Read, which covers the contacts you have saved, and People.Read, Microsoft’s list of the people you write to and meet, the counterpart of Google’s “other contacts”. If you add Calendar, it also asks for read-only Calendars.Read. We also read the account’s email address and, if it has one, its profile photo, only to show you which account is connected. We read and keep what §2.3b and §2.3c describe for Google, except photos: names and email addresses of contacts, and for meetings only their start time, subject and attendees, the subject read only to tell the kind of meeting and never stored, and never bodies or locations. The uses, the limits and deletion are the same. You can also revoke Warmlink’s access at account.live.com/consent/Manage or, for a work account, in your organization’s My Apps page.

2.4 AI-Processed Information

Warmlink uses artificial intelligence to analyze your publicly available content (posts, videos, captions, and engagement patterns) to generate personalized product recommendations for your stack. This analysis is performed on content you have made publicly available and is used solely to curate relevant product selections aligned with your audience and niche.

2.5 Information About Creators Who Do Not Have an Account

Warmlink identifies social media channels, including YouTube channels, whose owners have never contacted us or created an account. We do this so that members can find and follow creators they already watch, and so that a creator who later joins finds a stack already prepared for them rather than a blank page.

We obtain this information from commercially licensed datasets provided by third parties, from publicly accessible sources such as a creator’s own public profile or website, and from public APIs including the YouTube Data API. We do not obtain it from the creator. For a YouTube channel we hold its channel ID, handle, display name, subscriber count and avatar image, together with public information about recent uploads.

We process it on the basis of our legitimate interest in building a catalog of creators and preparing a stack a creator can claim. For a small number of channels we publish that prepared stack before anyone claims it. Those pages are unlisted and excluded from search engine indexing, and the creator can claim or remove them at any time.

We keep this information for as long as the channel remains listed. You have the right to object to this processing and to ask us to delete what we hold about your channel, and we will do so. Email privacy@warmlink.io. You do not need a Warmlink account to make that request, and we will not ask you to create one.

2.6 AI Assistants (the Warmlink Connector)

You can connect Warmlink to an AI assistant or chat app, such as Claude, ChatGPT, Gemini, or Grok, through the Warmlink connector (see warmlink.io/connector and Section 7C of our Terms of Service). When you do:

  • What the app sends us. Only what it passes to the connector’s tools: what you asked it to look up (for example, a product name or a need such as “CRM for a small agency”), and, when you ask it to, a vouch, recommend, or avoid with its reason and optional details. The app also identifies itself (for example, as Claude or ChatGPT). We do not receive the rest of your conversation, your other messages, or your account details with that app.
  • What we record. For each request: which tool was used, what was asked (up to 500 characters), which products were returned, which app sent it, your Warmlink account, and the time.
  • Sign-in. The app signs in to Warmlink with OAuth. We keep the app’s registration (its name and the address it returns to) and the access it was granted, stored as one-way hashes. The app never receives your Warmlink, Google, or other sign-in credentials.
  • What we send the app. Results: counts, a few members’ reasons, and links. Another member’s name appears only on a vouch or recommend they chose to sign; an avoid never shows a name. Your own signals and their details go to the app only when you ask it to list them. What the app does with results is governed by its own privacy policy.

We use these records to answer your requests, keep your signals up to date, prevent misuse, and improve results. We may also use them, combined across many members and in a form that does not identify you, to understand which software people are looking for, including in reports to brands. We do not sell them.

You can disconnect at any time: ask the assistant to sign you out of Warmlink, which ends that app’s access immediately, or remove the connector in the app’s settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Platform Operations: To create, maintain, and personalize your account, stack, and affiliate experience.
  • AI-Powered Stack Generation: To analyze your public content and generate product recommendations tailored to your audience and content niche.
  • Commission Tracking and Payments: To accurately track affiliate clicks, conversions, and sales; calculate commissions across direct and referral tiers; and process payouts.
  • Communication: To send transactional emails, platform updates, performance reports, and (with your consent) marketing communications.
  • Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, click fraud, commission manipulation, and other harmful or unauthorized activities.
  • Analytics and Improvement: To understand usage patterns, improve platform features, optimize AI recommendations, and develop new products and services.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Your Consent

We may share your information when you have given us explicit consent to do so.

4.2 Service Providers and Partners

We share information with trusted third-party service providers who assist us in operating the platform, including:

  • Payment Processors: To facilitate commission payouts and financial transactions.
  • Affiliate Networks: To track conversions, attribute sales, and calculate commissions.
  • Cloud Hosting and Infrastructure Providers: To store and process data securely.
  • Email and Communication Services: To deliver transactional and marketing emails (e.g., MailerLite or similar providers).
  • Analytics Providers: To help us understand platform usage and performance.

4.3 Creator Stacks and Public Information

Your creator stack, display name, profile image, niche categories, and curated product selections are publicly visible. Aggregate performance metrics may be visible to brands and partners on the platform.

4.4 Affiliate Network Structure

Creators who refer other creators to the platform may have limited visibility into the activity of their referral network as necessary for the operation of the referral commission structure. This visibility is limited to aggregate earnings data and does not include personal information of referred creators.

4.5 Legal and Safety Reasons

We may disclose your information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Warmlink, our users, or the public.

4.6 Business Transfers

In connection with a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for the following purposes:

  • Essential Cookies: Required for the platform to function properly, including authentication and session management.
  • Affiliate Tracking Cookies: Used to attribute product clicks and purchases to the correct creator for commission calculation. These cookies may persist for up to 30 days (or as specified by individual affiliate program terms).
  • Analytics Cookies: Used to collect aggregated usage data to improve platform performance.
  • Preference Cookies: Used to remember your settings and preferences.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service, including affiliate tracking and commission attribution.

5.1 Click Identifiers (“SubIDs”)

When you click an affiliate link on a Warmlink stack, we generate a random reference code (an “SubID”) and pass it to the affiliate network as part of the outbound link. The network returns that code to us if a purchase results, which is how we know which click earned a commission and which member to credit. The SubID is a random string; it does not contain your name, email address, or account details. We store it alongside the click record so we can match it to a later purchase.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specific retention periods include:

  • Account Data: Retained for the duration of your account and for up to 24 months after account closure, unless a longer retention period is required by law.
  • Google Contacts: Kept while they are connected, refreshed about monthly, and deleted as soon as you disconnect them or close your account. If you revoke access at Google instead, they are deleted the next time we try to read them, within about a month. Not kept in the post-closure window above.
  • AI Assistant Requests: The record of each connector request (Section 2.6) is kept for 24 months and then deleted, unless the law requires us to keep a particular record longer. Deleting your account deletes the records tied to it, along with the connector’s sign-in access.
  • Transaction and Commission Data: Retained for a minimum of 7 years to comply with tax and financial reporting obligations.
  • Usage and Analytics Data: Retained in aggregated or de-identified form indefinitely for analytical purposes.

You may request deletion of your account and personal data at any time, subject to our legal and regulatory obligations.

7. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Secure authentication mechanisms and access controls.
  • Regular security assessments and vulnerability monitoring.
  • Fraud detection systems to identify and prevent commission fraud and click manipulation.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

8.1 Access and Portability

You may request a copy of the personal information we hold about you in a structured, machine-readable format.

8.2 Correction

You may request that we correct inaccurate or incomplete personal information.

8.3 Deletion

You may request deletion of your personal information, subject to applicable legal exceptions (e.g., tax record retention).

8.4 Opt-Out of Marketing

You may opt out of marketing communications at any time by clicking the “unsubscribe” link in any email or by contacting us directly.

8.5 Cookie Management

You may adjust your cookie preferences through your browser settings or through any cookie consent mechanism provided on the platform.

8.6 Do Not Track

The platform currently does not respond to “Do Not Track” browser signals.

To exercise any of these rights, please contact us at the address provided in Section 13.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You may request details about the categories and specific pieces of personal information we have collected, the purposes for collection, and the categories of third parties with whom we share information.
  • Right to Delete: You may request deletion of your personal information, subject to applicable exceptions.
  • Right to Opt-Out of Sale/Sharing: We do not sell your personal information. If this changes, we will provide a “Do Not Sell or Share My Personal Information” link.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request, please contact us using the information in Section 13. We will verify your identity before processing any request.

10. International Data Transfers

If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States, where our servers and operations are located. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we do so only where a lawful transfer mechanism applies, and we require our service providers to protect that information under terms consistent with this Policy. If you would like details of the safeguards that apply to your information, contact us at privacy@warmlink.io.

11. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on the platform with an updated “Last Updated” date, and where required by law, by providing additional notice (such as email notification). Your continued use of the Service after any changes constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Wildeye, Inc. d/b/a Warmlink
Email: privacy@warmlink.io

This Privacy Policy is provided for informational purposes and does not constitute legal advice. We recommend consulting with a qualified attorney to ensure compliance with all applicable privacy laws and regulations.