Privacy policy

What we collect when you use /perks

When you visit a page under zamn.io/perks and click a referral link, our redirect endpoint at /api/perks/click/[slug] logs four things about that click:

• Your IP address
• Your browser's User-Agent string
• The HTTP Referer header (the page you were on when you clicked)
• A timestamp of the click

Why we log those four things

We log them for two reasons and only two reasons. First, de-duplication: one person hitting a referral link ten times in five minutes should not look like ten separate customers to us or to a partner. Second, abuse detection: bots and scripted click fraud on partner offers are a real thing, and the four fields above are what we use to spot them.

That is the full list of what /perks captures. We are not building a behavioural profile of you.

What /perks does not collect

The Zamn Perks directory does not ask you for, and does not capture:

• Your name
• Your email address
• Your phone number
• Any financial information (account numbers, card details, income, holdings, tax file numbers)
• Government-issued ID
• Login credentials

Cookies

As of the effective date at the top of this page, /perks sets no cookies. No first-party cookies, no third-party tracking pixels, no persistent local storage. If we ever add one (for example, a small flag so we can show you which offers you have already opened from this browser), we will disclose it here before it goes live.

What happens when you click through to a partner

The moment we redirect you to a partner (a bank, exchange, broker, insurer, or similar), our job is done. From that click onward you are on the partner's website. Their cookies, their analytics, their tracking, their forms, and their privacy terms all apply.

Read the partner's privacy policy if you care what they do with your data once you land on their side. We cannot see it, we cannot control it, and we cannot delete it on your behalf.

What Zamn keeps on its own side

We keep the click log described above so we can reconcile referrer payouts with each partner. If a partner tells us they received a certain number of signups from Zamn in a given month, we want to be able to check that against our own records.

Individual click log rows never appear in any dashboard, report, or feed that leaves Zamn. Any external reporting is aggregate only (for example, 'X clicks on offer Y in July').

How long we keep it

Individual click log entries are kept for up to 24 months. After that window we roll them up into per-offer, per-month aggregate totals and delete the raw rows. The aggregates carry no identifiers and cannot be linked back to any specific visit.

Who we share it with

We do not share individual click data with any third party. Not partners, not analytics vendors, not advertisers.

We may share aggregate click counts with a partner solely to confirm attribution, meaning: to verify that a signup they received was in fact sourced from a Zamn link. No IPs, no User-Agents, no per-click timestamps are included in those confirmations.

If we receive a lawful request from an Australian law enforcement agency or regulator that we are legally required to comply with, we will. Anything short of that, no.

Your rights under the Privacy Act

Under the Privacy Act 1988 (Cth) you have rights over personal information Zamn holds about you, including the right to access it, correct it, and have it deleted where the law requires deletion.

There is a practical wrinkle on /perks specifically. Because we only hold four fields per click and none of them is your name or email, we usually cannot match a request from you as a person to any particular row in our log without your help. If you can tell us the approximate time and the IP address you were using when you clicked, we can find your entries and act on them.

Send requests to help@zamn.io. We will respond within 30 days.

Complaints

If you think we have mishandled your privacy, tell us first at help@zamn.io so we can try to sort it out. If you are not satisfied with how we respond, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

When we change this policy we update the effective date at the top. Material changes (new categories of data collected, new recipients, longer retention windows) will also be called out at the top of the page for at least 30 days after they take effect.

Contact

Zamn Services (Australia), Victoria.

Email: help@zamn.io

Discord: https://discord.gg/hU6VMQRmDd