Effective Date: August 18, 2026 Last Updated: August 18, 2026

Partner.io (“Partner.io”, “we”, “us”, or “our”) is operated by Unbeatable Group LLC, with an address at 2211 Michelson Dr, Irvine, CA 92612, United States.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we retain it, and the choices and rights available to individuals.

This Privacy Policy applies to information collected through www.partner.io, the Partner.io application and related services, portals, integrations, and communications that link to this Privacy Policy (collectively, the “Services”).

1. Our role and your relationship with Partner.io

Partner.io may act in different roles depending on how the Services are used.

When we collect and use information for our own purposes—for example, to operate our website, administer accounts, provide customer support, maintain security, communicate with users, and improve our Services—we act as a data controller.

When a Partner.io customer submits personal information to the Services and Partner.io processes that information on the customer’s behalf, the customer generally determines the purposes and means of processing and Partner.io acts as a data processor or service provider.

Our Data Processing Agreement governs processing of customer data where applicable.

If your personal information has been submitted to Partner.io by an organization that uses our Services, that organization may have its own privacy notice explaining how it uses your information. You should review that notice as well.

2. Personal information we collect

The information we collect depends on how you interact with Partner.io and which Services and features are used.

Information you provide directly

We may collect:

• name;

• email address;

• telephone number;

• company and job information;

• account and authentication information;

• information you provide when requesting a demo, trial, support, or other service;

• information contained in communications with us;

• information submitted through forms or other features of the Services; and

• other information you choose to provide to us.

Information processed through the Partner.io platform

Customers and their authorized users may submit information to Partner.io as part of using the Services.

Depending on the Services, configuration, and integrations being used, this may include:

• names and contact information of employees, customers, prospects, partners, and other business contacts;

• company and organization information;

• customer, account, and relationship information;

• partner and partnership information;

• referral and lead information;

• sales and opportunity information;

• account-mapping information;

• partner activity and engagement information;

• partner performance information;

• commission and incentive information;

• transaction-related records;

• communications and other content submitted by users;

• information imported from connected third-party systems;

• information transmitted through APIs, integrations, or webhooks; and

• other information that a customer or authorized user chooses to store in or make available to the Services.

Partner.io does not itself process customer payments. Where payment processing is required, payments are processed by Stripe. Partner.io may store commission, payment-related, or transaction records necessary to provide relevant functionality, reporting, and account management.

Information collected automatically

When you visit our websites or use the Services, we may automatically collect technical and usage information, including:

• IP address;

• browser type and version;

• device information;

• operating system;

• pages or screens visited;

• dates and times of access;

• time spent on pages or screens;

• referring and exit pages;

• usage and interaction information;

• server and application logs; and

• other technical information relating to your use of the Services.

We may collect this information through server logs, cookies, pixels, SDKs, and similar technologies.

3. Cookies and similar technologies

We use cookies and similar technologies to operate our websites and Services, remember preferences, maintain security, understand usage, and support analytics and communications.

Some cookies are necessary for the operation of the Services. Other cookies may be used for analytics or marketing purposes, depending on the website, product, and applicable law.

Where required by law, we will obtain consent before using non-essential cookies or similar technologies.

You can also control certain cookies through your browser settings. Disabling cookies may affect the availability or functionality of some parts of the Services.

4. How we use personal information

We use personal information for the following purposes, depending on the context in which it was collected.

Providing and operating the Services

We use information to:

• create and administer accounts;

• authenticate users;

• provide and maintain the Partner.io platform;

• manage partner relationships;

• support partner discovery;

• manage referrals and leads;

• support account mapping;

• operate partner portals and engagement functionality;

• store and manage commission and related records;

• provide reports and analytics;

• process information made available through integrations;

• provide customer support;

• communicate with users about the Services; and

• perform our contractual obligations.

Analytics and service improvement

We may use information to:

• understand how the Services are used;

• monitor performance and reliability;

• diagnose and troubleshoot problems;

• conduct standard analytics;

• improve existing functionality;

• develop and test improvements to the Services; and

• maintain the security and integrity of the platform.

We do not use customer data for unrelated purposes merely because it is available to us.

Where Partner.io processes customer data as a processor, we process that data in accordance with the customer’s instructions and applicable agreements.

Communications

We may use contact information to:

• respond to inquiries;

• provide customer and technical support;

• send service-related communications;

• provide account notices;

• communicate about changes to the Services; and

• where permitted by law, send newsletters, marketing, or promotional communications.

You may opt out of marketing communications at any time using the unsubscribe mechanism provided in the communication.

You may still receive transactional, service, security, or other non-marketing communications necessary to provide the Services.

Security and legal purposes

We may process information where reasonably necessary to:

• comply with applicable laws and regulations;

• respond to lawful requests from authorities;

• establish, exercise, or defend legal claims;

• enforce our agreements and policies;

• protect the rights, property, or safety of Partner.io, our customers, users, or others;

• investigate security incidents;

• detect and prevent fraud, abuse, or unauthorized access; and

• maintain appropriate business and security records.

5. Partner.io MCP integration and AI applications

Partner.io provides an MCP (Model Context Protocol) integration that allows authorized users to connect compatible AI applications and assistants to Partner.io.

The MCP integration changes how information can be accessed from Partner.io. When an authorized user connects an AI application to Partner.io through MCP, that AI application may request information from Partner.io through the MCP connection in order to provide functionality requested by the user.

In addition to retrieving information, an AI application may also submit new information to Partner.io through MCP tool calls (for example, creating or updating a lead, partner, or partner representative record). Information submitted this way is processed in accordance with this Privacy Policy and any applicable customer agreement, in the same manner as information submitted directly through the Partner.io platform.

What information can be accessed

The MCP integration does not automatically expose all information stored in a Partner.io account.

Only the information and functionality currently made available through the MCP integration may be requested through that connection. The scope of information available through MCP may change as we develop and expand the integration.

Depending on the MCP functionality available at the time, this may include authorized Partner.io information such as partner, account, relationship, referral, lead, activity, commission, or other records exposed through the integration.

How AI applications receive the information

Partner.io does not independently initiate a transfer of all customer data to an AI provider merely because a customer uses Partner.io.

Instead, when an authorized user connects an AI application to Partner.io through MCP, the connected AI application may request information from Partner.io. Partner.io then provides the requested information that the connected user is authorized to access and that is exposed through the applicable MCP functionality.

The connected AI application and its provider may process information received through the MCP connection according to their own privacy policies, terms, and data practices.

You should review the privacy and data-use policies of any AI application you connect to Partner.io before enabling the connection.

Customers are responsible for ensuring that their use of the MCP integration and any connected AI applications is appropriate for the information they make available and complies with applicable law and their own privacy obligations.

6. Integrations, APIs, and webhooks

Partner.io can connect with third-party services and systems through integrations, APIs, and webhooks.

When a customer enables an integration, information may be transmitted between Partner.io and the connected service according to the customer’s configuration and authorization.

The information exchanged depends on the particular integration and may include customer, partner, account, lead, referral, opportunity, activity, commission, or other business information.

The privacy practices of the third-party service also apply to information that the third party receives or processes.

7. Who we share personal information with

We may disclose personal information to the following categories of recipients.

Service providers and sub-processors

We use third-party service providers and sub-processors to operate and support the Services.

These providers may provide services such as:

• cloud hosting and infrastructure;

• customer relationship management;

• email delivery;

• customer support;

• communications;

• analytics;

• application monitoring;

• payment processing;

• accounting;

• marketing;

• security;

• software development; and

• other services necessary to provide and operate Partner.io.

Our current sub-processors are listed separately in our Sub-Processor List, which we maintain and update as our service providers change.

Customer-authorized third parties

Where a customer or authorized user connects Partner.io to another service—including CRM systems, business applications, payment services, or AI applications—we may exchange information with that service according to the customer’s or user’s authorization and configuration.

Stripe

Partner.io uses Stripe for payment processing. Partner.io does not itself process customer payments.

We may store commission, payment-related, and transaction records associated with Partner.io functionality, while payment card and payment processing activities are handled by Stripe.

Legal and safety disclosures

We may disclose information when reasonably necessary to comply with applicable law, legal process, governmental requests, court orders, or regulatory requirements, or to protect the rights, safety, and property of Partner.io or others.

Business transactions

If Partner.io is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

8. International data transfers

Partner.io is operated from the United States and may process personal information in countries outside the country where you live.

Where UK, EEA, or Swiss data protection law applies and personal information is transferred internationally, we use appropriate safeguards as required by applicable law. Depending on the circumstances, these safeguards may include adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism.

You may contact us using the details below to request further information about applicable transfer safeguards.

9. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business records, resolve disputes, enforce agreements, comply with legal obligations, and protect our legitimate interests.

For customer data processed by Partner.io as a processor, the applicable customer agreement and Data Processing Agreement govern retention and deletion.

Under our current Data Processing Agreement, following termination of the applicable agreement, Partner.io will delete or return personal data within 90 days, unless retention is required by law. Backup copies are deleted through normal backup rotation cycles.

For website, account, communications, security, and other information for which Partner.io acts as controller, retention periods vary depending on the type of information and purpose. We consider factors including the nature of the information, the purpose for which it was collected, legal and contractual requirements, and legitimate business needs.

When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it in accordance with applicable law.

10. Data security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Our security measures include, where applicable:

• encryption in transit using TLS 1.2 or higher;

• encryption at rest using AES-256;

• role-based access controls;

• multi-factor authentication;

• vulnerability scanning and penetration testing;

• logging and monitoring;

• incident response procedures;

• data segregation;

• secure backups; and

• controls aligned with SOC 2 Type II requirements.

No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Your privacy rights and choices

Depending on where you live and the circumstances of the processing, you may have rights including:

• the right to know whether we process your personal information;

• the right to access your personal information;

• the right to correct inaccurate or incomplete information;

• the right to request deletion of your information;

• the right to restrict certain processing;

• the right to object to certain processing, including processing based on legitimate interests and, where applicable, direct marketing;

• the right to data portability;

• the right to withdraw consent where processing is based on consent; and

• the right to lodge a complaint with a relevant data protection supervisory authority.

These rights are not absolute and may be subject to applicable legal exceptions.

If Partner.io processes your information on behalf of one of our customers, we may direct your request to that customer because the customer is generally the controller responsible for determining the purposes and means of processing. We will assist the customer with applicable data-subject requests as required by our agreement and applicable law.

Marketing preferences

You may opt out of marketing emails at any time by clicking the unsubscribe link in the relevant email or contacting us at support@partner.io.

You may continue to receive transactional, service, security, or other non-marketing communications that are necessary to provide the Services.

Cookie preferences

You may control cookies through your browser settings and, where available, cookie controls provided on our websites.

12. How to exercise your rights

To submit a privacy request or ask a question about our handling of personal information, contact:

Email: support@partner.io

You may also contact us at:

Unbeatable Group LLC / Partner.io 2211 Michelson Dr Irvine, CA 92612 United States

We may ask for information reasonably necessary to verify your identity before responding to a request.

If you use Partner.io on behalf of an organization that is a customer, you may also contact that organization directly. Where that organization is the controller of your personal information, we may work with the organization to respond to your request.

13. Complaints

If you have concerns about our use of your personal information, please contact us first at support@partner.io so that we can try to resolve the issue.

Where applicable, you also have the right to lodge a complaint with the data protection supervisory authority in the country or jurisdiction where you live, work, or believe an infringement occurred.

For individuals in the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).

14. Children’s privacy

The Services are intended for business and professional use and are not directed toward children.

We do not knowingly collect personal information directly from children for the purpose of providing the Services. If you believe that a child has provided personal information to us improperly, please contact us so that we can investigate and take appropriate action.

15. Automated decision-making

Partner.io does not currently make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

Partner.io may use automated processes to organize, retrieve, analyze, or present information as part of providing the Services. These processes are used to provide functionality requested by customers and users and are not intended to independently make decisions about individuals that have legal or similarly significant effects.

16. Customer responsibilities

Customers using Partner.io are responsible for:

• determining the purposes and means for processing customer-controlled personal information;

• ensuring that their processing has an appropriate legal basis;

• providing appropriate privacy information to individuals where required;

• ensuring that information provided to Partner.io may lawfully be processed;

• configuring integrations and data-sharing settings appropriately;

• determining which information should be made available through connected services, APIs, webhooks, or MCP; and

• responding to data-subject requests where the customer is the applicable controller.

Our Data Processing Agreement contains additional provisions governing Partner.io’s processing of customer data.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, data practices, technology, legal requirements, or other circumstances.

When we make material changes, we will update the “Last Updated” date and, where required by applicable law, provide additional notice.

We encourage you to review this Privacy Policy periodically.

18. Contact us

Unbeatable Group LLC / Partner.io 2211 Michelson Dr Irvine, CA 92612 United States

Privacy inquiries: support@partner.io Data protection inquiries: gdpr@partner.io

Related privacy documents

• Terms of Service

• Data Processing Agreement

• Data Protection

• Sub-Processor List