Platform agreement

MiddleMan user agreements

Version 2026-06-10. Effective June 10, 2026.

These agreements apply to every affiliate and seller account using MiddleMan. By creating an account, you confirm that you have read them, have authority to accept them, and agree to comply with the sections that apply to your role.

1. MiddleMan service terms

MiddleMan provides software for proposing and managing affiliate partnerships, generating referral links, recording eligible referral activity, reporting attributed conversions, and calculating commissions. MiddleMan is not the seller of the merchant's goods or services and is not a party to payments between a seller and its customers.

Users must provide accurate account information, protect their credentials, use the service lawfully, and promptly report suspected unauthorized access or inaccurate records. Users must not interfere with the platform, fabricate clicks or conversions, misuse personal data, or use MiddleMan for unlawful, deceptive, or infringing activity.

2. Affiliate agreement

Affiliates agree to:

• Promote sellers honestly and comply with advertising, endorsement, and consumer-protection laws.
• Clearly disclose the commercial or affiliate nature of promotions where required.
• Use only approved referral links and avoid misleading redirects, cookie stuffing, automated clicks, spam, or impersonation.
• Respect the commission rate, cookie window, permitted channels, and other terms accepted with each seller.
• Not make promises about a seller's products, pricing, availability, refunds, or services without authorization.

3. Seller and merchant agreement

Sellers agree to:

• Provide accurate store and business information and connect only stores they are authorized to manage.
• Review and honor accepted affiliate terms, including commission rates and attribution windows.
• Maintain appropriate customer-facing privacy and cookie notices and configure consent controls where required.
• Ensure their products, services, checkout, marketing, and affiliate arrangements comply with applicable law.
• Review conversion and commission records and promptly raise genuine disputes or suspected abuse.

4. Partnership and commission terms

The seller and affiliate are responsible for the commercial terms they accept through MiddleMan. A referral is eligible only when MiddleMan receives a valid tracked click and an attributed conversion within the agreed cookie window. Attribution may be unavailable when a visitor rejects tracking, clears site data, changes browser or device, uses private browsing, or completes a purchase after the window expires.

MiddleMan calculates commission from the conversion value and agreed rate recorded in the platform. Unless a separate payment service is introduced, the seller and affiliate remain responsible for invoicing, payment, tax, refunds, chargebacks, and resolving commercial disputes.

5. Privacy and cookie responsibilities

Each party must comply with applicable privacy and electronic-marketing laws. Sellers must tell store visitors about affiliate attribution and obtain consent where required. Affiliates must handle any personal data they collect independently under their own lawful basis and privacy notice.

When Shopify permits the MiddleMan Web Pixel to run, it stores a random referral token and expiry timestamp in first-party browser storage. On checkout completion, it sends MiddleMan the referral token, order reference, and order value. MiddleMan does not request Shopify customer names, email addresses, phone numbers, physical addresses, payment details, or customer profiles.

6. Merchant data processing addendum

Roles and instructions

For visitor and conversion data processed solely to provide a seller's referral attribution, the seller acts as controller and MiddleMan acts as processor. The seller instructs MiddleMan to process that data to operate attribution, calculate commissions, provide reporting, prevent duplicate or fraudulent activity, maintain security, and provide support. Each party acts as an independent controller for its own account, contractual, legal, and business-administration records.

Processing details

• Data subjects: store visitors and customers, seller users, and affiliate users.
• Data: referral token, expiry time, click timestamp, IP address, browser user-agent, order reference, order value, account details, partnership terms, and commission records.
• Purpose: referral attribution, reporting, commission calculation, security, support, and legal compliance.
• Duration: live attribution identifiers are retained only through the agreed cookie window; unconverted click records for up to 24 months; disconnected Shopify metadata for up to 30 days; and conversion, commission, and associated transaction records for up to seven years where required for accounting, disputes, fraud prevention, or law.

MiddleMan obligations

MiddleMan will:

• Process personal data only for the documented purposes above and the seller's lawful instructions.
• Use reasonable technical and organizational safeguards and restrict access to authorized personnel.
• Encrypt production data in transit and at rest using platform and infrastructure safeguards.
• Require service providers that process personal data to provide appropriate confidentiality and data-protection safeguards.
• Assist the seller, where reasonably possible, with valid access, correction, deletion, objection, or portability requests.
• Notify the seller without undue delay after becoming aware of a personal-data breach affecting the seller's processed data.
• Delete or anonymize live referral tokens, IP addresses, and browser user-agents when the agreed attribution window expires.
• Erase Shopify access tokens immediately on uninstall and apply the retention periods stated above.
• Provide information reasonably necessary to demonstrate compliance with these obligations.

Subprocessors and international transfers

MiddleMan may use infrastructure, email, database, monitoring, and commerce-platform providers to operate the service, including Railway, Resend, and Shopify. MiddleMan remains responsible for requiring appropriate safeguards from subprocessors. Where a restricted international transfer occurs, MiddleMan will use a legally recognized transfer mechanism where required.

Merchant obligations

The seller confirms it has a lawful basis for the processing it instructs, provides required notices, obtains consent where required, does not instruct MiddleMan to process unnecessary or unlawful data, and responds to customer rights requests for which it is responsible.

7. Intellectual property and acceptable use

MiddleMan and its software, branding, and documentation remain the property of the platform operator and its licensors. Users retain ownership of their own content and grant MiddleMan permission to host and process it only as needed to provide the service. Users may not copy, reverse engineer, resell, or misrepresent the service except where applicable law expressly permits.

8. Availability and liability

MiddleMan works to provide reliable records but does not guarantee uninterrupted service or attribution in every circumstance. To the fullest extent permitted by law, MiddleMan is not responsible for indirect or consequential loss, lost profits, merchant-customer disputes, unpaid commissions, or failures caused by third-party platforms, consent choices, network conditions, or inaccurate user-supplied information. Nothing in these terms excludes liability that cannot legally be excluded.

9. Suspension and termination

Users may stop using MiddleMan and request account deletion. MiddleMan may suspend or terminate access for material breach, abuse, security risk, unlawful activity, or non-payment under any future paid plan. Shopify uninstall and mandatory privacy webhooks disconnect the store and remove stored Shopify credentials and identifiers as required.

10. Changes and contact

MiddleMan may update these agreements as the service or law changes. Material updates will require a new version and, where appropriate, renewed acceptance. Questions, privacy requests, and legal notices should be sent to partners@middleman-platform.com.

See also the Privacy Policy, Terms of Service, and Support page.