Privacy Policy (Affiliate Program)
Last updated: November 3, 2026
This policy explains how Sibu Ventures Ltd ("we", "us") uses the personal data of people who join the Machined.ai Affiliate Program. It covers your data as an affiliate. If you also use Machined.ai, or visit our website, our main Privacy Policy covers that.
Who we are
Sibu Ventures Ltd, the controller of your data. Registered office: Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. Company number: 14958943. Questions: privacy@machined.ai.
You sign up and manage your affiliate account in a portal run by Tolt. Tolt processes your data for us, as our processor, under a data processing agreement.
What we collect
- Your name, email address, and the websites or social channels where you promote us
- Payout details: your PayPal email address or your Wise payout details, depending on how you choose to be paid
- Your affiliate link, and the clicks, customers and commissions credited to you
- Messages between you and us about the program
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Running the program: your account, crediting referrals, paying commission | To perform our contract with you (Art. 6(1)(b)) |
| Emailing you about the program, including changes to its terms | To perform our contract with you (Art. 6(1)(b)) |
| Keeping payment and tax records | Legal obligation (Art. 6(1)(c)) |
| Preventing fraud and enforcing the program rules, for example spotting self-referrals | Our legitimate interests (Art. 6(1)(f)) |
We don't use your affiliate data for marketing. If you want our marketing emails, you can sign up for them separately.
What you see about your referrals. The affiliate portal shows activity on your links, such as clicks, customers and commissions. For each customer, it shows a masked version of their email address, with most of it hidden, so you can tell them apart.
Who we share it with
- Tolt (US), which runs the affiliate portal
- PayPal or Wise, whichever you choose, to send your payouts. They use your details under their own privacy policies
- Professional advisers and authorities, where the law requires it, and a buyer if the business is sold
Providers outside the UK and EU are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. Email privacy@machined.ai for a copy.
How long we keep it
- While you're in the program
- After you leave, payment and tax records for 7 years, which covers what tax and accounting law requires
- Everything else is deleted within 12 months of you leaving
- If we don't accept your application, we delete your data within 12 months
Your rights
You can ask to see, correct or delete your data, to restrict or object to how we use it, or to get a copy to take elsewhere. Email privacy@machined.ai and we'll reply within one month. We may need to keep payment and tax records even if you ask us to delete them. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Our EU representative
Our representative in the EU, for regulators and anyone in the EU with a question or request about their data, is Data Privacy and Security Services Ltd (trading as Data Privacy Services), at info@dataprivacyservices.co.uk.
Changes to this policy
If we make a change that matters, we'll email you and update the date at the top.