Ancaster Pass 10: Traffic Permissions, Paid Amplification, Signup Attribution, Earnings Aggregation, In-House Program and Account Model

Chris's belief that he can't plug into PartnerStack is wrong. PartnerStack has a documented partner-side API (Actions, Customers, Partnerships, Payouts, Rewards, Transactions, authenticated with a partner-generated Bearer key) and partner postbacks, and Strackr already sells PartnerStack earnings aggregation built on exactly that key.[1][2] So Ancaster can show third-party earnings and customers for PartnerStack creators with consent. Ancaster still can't show the merchant's internal funnel beyond what the network exposes. Separately, Ancaster must treat "boosting your own post" as paid social, and for ElevenLabs that is prohibited outright.[3]

1Key Findings

1. PartnerStack partner data is accessible. PartnerStack's help center says the Partner API "allows you to return a list of Actions, Customers, Marketplace listings, Partnerships, Payouts (Withdrawals), Rewards (Commissions), or Transactions" and that it "uses API key to authenticate requests… via Bearer authentication." The article is explicitly written for partners who want "to access your partner data using external services."[1] Strackr's PartnerStack connector tells users to "Create a new key for Strackr and paste this API key on Strackr." Its PartnerStack docs page lists "Network ≈ 700 affiliate programs" (Strackr's own approximation). One limit: "If you are a member of a partner team, you will need to use the API Key generated by the partner team owner."[1]
2. ElevenLabs' free-signup rule. A "Referred Paying Subscriber" is "someone who clicks through a Participant's Affiliate Link, subsequently registers for and maintains a non-free-tier subscription… and is properly attributed to such Participant through our tracking system." Commission is 22% (Starter/Creator/Pro/Scale) or 11% (Business) on purchases "during the first 12 months of such Referred Paying Subscribers' subscription"; enterprise is excluded[7][8] (Program Terms, last updated 10 June 2026).[3] ElevenLabs' partner guide defines dashboard "Signups" as people "(both paid and unpaid) who signed up… within 90 days of clicking your link."[7] PartnerStack's attribution doc says that if a customer "signs up or completes a purchase within the 90-day window… all subsequent activities and actions will be attributed to that partner."[6] Inference (not stated verbatim by ElevenLabs): a free signup through the link within 90 days that upgrades later earns commission. The 12-month clock appears to start at the paid subscription, not at signup.
3. Boosting counts as paid placement under strict terms. ElevenLabs' Paid Media clause bans (a) targeting its marks "on a paid search, paid social, app store, or other paid advertising platform," (b) including its marks "in any component of a paid advertisement," and (c) "any paid placement to direct users, whether directly or indirectly, to any ElevenLabs website or property."[3] A boosted post is a paid placement. If it carries the link, it directs users at least indirectly, and naming ElevenLabs in it trips (b). Most other terms are silent on "boosting" and only address "PPC" or "search engine ads."
4. Few dev/AI programs offer a real consumer deal. In the sweep, only beehiiv (link-embedded "14-day free trial and 20% off of their first 3 months") and Runway (code: "Your followers get 25% off") had affiliate-facing consumer offers.[4][9] Descript ("discount codes are not available to affiliates") and Kinsta ("we don't provide exclusive discounts to specific affiliate partners") explicitly refuse.[10][11]
5. Several beachhead brands have no open cash program. Canva (Canvassador, "currently closed"), Cursor (none found), Bolt.new ("doesn't currently have affiliate or sponsorship programs"), Replit (credit-only referral), Vercel, Supabase (none found), Notion ("currently not accepting new affiliates") and Zapier (partners-only) are not viable v1 third-party offers.[12][13][14][15][16]
6. Ad API access is gated but possible for a solo developer on some platforms. Google's Access Levels doc says Explorer access lets a Cloud project "execute up to 2,880 operations per day against production accounts." You request it with an "Apply for access" button; PPC Land reports automatic grants only "in certain cases." Explorer also blocks billing, account creation and Keyword Planner. LinkedIn's Development tier allows edits on up to 5 ad accounts.[17] Meta needs Business Verification plus ads_management Advanced Access before other businesses' accounts can authorize an app.[18] X, TikTok and Reddit require separate approvals or allow-listing.[19][20][21]

2Traffic Permissions, Precisely

Taxonomy (the schema Ancaster should store per program)

Each program gets a traffic_policy with one state per class: allowed | prohibited | needs_approval | not_stated. Each state carries a conditions[] array (e.g., negative_brand_keywords_required, must_land_on_own_page, no_marks_in_ad_creative, platform_policy_compliance) plus source_url, source_quote and verified_at.

Key rule: T2 is paid social. A self-boost uses the ad platform's auction and billing. Under any clause banning "paid social," "paid placement," or "sponsored advertisements on social media platforms," it is covered. Where terms only ban "PPC"/"search engine ads," T2 is not_stated and should default to needs_approval, with a one-click "ask the program manager" template.

Program sweep

"NS" = not stated in the text read; "NR" = terms exist but full text wasn't readable in this pass. Sources are official vendor or network pages unless marked (secondary).

Other traffic classes: sub-affiliate rules did not appear in any SaaS terms read in this pass, except Shopify (requires "direct written permission")[38] and ElevenLabs (you may not let "any subcontractor, agency, sub-affiliate" use its marks without consent).[3] Email is generally allowed to opted-in lists; ElevenLabs bans unsolicited email in its older terms page on UpPromote.[47] That page appears to be a legacy program, so treat it as unverified.

What the sweep means:

• "No brand bidding" is universal.[48]
• "No search ads at all" is common: ElevenLabs, beehiiv, Descript, Riverside, Framer, Hostinger.
• "Paid social allowed" is rare. Only beehiiv states it plainly, and Webflow allows it conditionally.[5][22]
• Silence is the norm for self-boosts. So Ancaster's schema must default to not_stated → needs_approval and never to "allowed."

3Paid Amplification APIs for a Small Developer

Ad-platform destination policy. Google's "Insufficient original content" policy lists "Bridge pages, doorways, gateways, or other intermediate pages that are only used to link to other sites" as violations. It also advises "useful, unique, and original content."[55] Ancaster's interstitial (endorsement → try-it moment → code → CTA) is structurally a bridge page. It passes only if the page carries real original value: the creator's own demo, comparison or instructions. Meta, TikTok, X and Reddit affiliate-landing-page policies were not re-verified in this pass. Treat them as "must comply with platform policy" and don't claim compliance.

What Ancaster can offer without buying media or holding spend:

1. A permission gate: before any boost, check traffic_policy.T2/T3, the brand-keyword and marks-in-creative conditions, and the landing destination (T9b only).
2. A boost kit: pre-written, disclosure-correct copy; the creator's page URL with a boost-specific click ID/UTM (so paid traffic is measured separately); and deep links into the native X/Meta/TikTok boost flow.
3. A T4 broker: Ancaster already has a permission ledger for Spark/partnership codes, so in-house advertisers (Chris's products) can run creator content as their own ads, with spend on the advertiser's card.
4. Later, direct API writes on Google (Explorer) and LinkedIn (Development tier), the two platforms a solo developer can realistically be approved on.

4Signup Attribution and Free Tiers

• Customer-level vs purchase-time cookie. PartnerStack creates a customer at signup and ties all later transactions to that customer's partner: "you must create a customer to represent a referred sign up BEFORE triggering any commissions."[56] Payment webhooks (Stripe, Chargebee, Recurly, Chargify) then match on customer_key/provider_key.[57][58] Cookie failures (browser switch, cleared cache) lose the referral unless the vendor manually re-attributes it.[59] The cookie window therefore matters at signup, not at purchase.
• Dub, Impact, Rewardful, FirstPromoter, Tolt: their lead→sale models were not re-verified in this pass. Dub's partner postbacks (lead.created, sale.created, commission.created) indicate the same lead-then-sale customer model.
• Programs paying for free signups: Notion ("up to $50 per activated sign up," closed to new affiliates)[12] and Grammarly (qualified action "An Account Sign-Up and a Purchase," pairing a sign-up with a purchase).[41] No other program in the sweep pays CPL for free signups.
• ElevenLabs: see Key Finding 2. Free signup via link within 90 days → later paid upgrade → 22% for the first 12 months of paid subscription, payable after a 90-day hold.[3][7] The terms don't state a maximum gap between signup and upgrade. Chris should confirm with his ElevenLabs partner manager via PartnerStack and record the answer in the Endorsement Ledger.
• Freemium conversion evidence: ChartMogul/Growth Unhinged/ProductLed's "The Conversion Report" (Kyle Poyar, 4 Feb 2026; 200 B2B products, conversion within 6 months) reports "The median free-to-paid conversion rate across all products is 8%," and credit-card-required trials converting at 30%.[60] ChartMogul is a vendor, but the method is disclosed. For freemium specifically, the same report says "On average, 3%-5% is a GOOD conversion rate for a freemium self-serve product, and 8%-12% is GREAT." So a creator's 100 free signups plausibly yield single-digit paid customers. Ancaster's value is making sure those 100 signups are attributed.

Page design implication: For free-tier programs, the primary CTA should be "Start free with [creator]'s link." The code, if any, should be shown as "use at upgrade," and a secondary line should say "paid plans: [offer]." The single disclosed affiliate CTA stays the only exit. Send a post-signup nurture through the Publisher Funnel with the same tracked link, because a second click through the same partner link refreshes that partner's cookie on a new device.

5Real Consumer Offers

• How offers are issued: link-embedded (beehiiv: trial plus discount applied through the partner link), creator code (Runway 25% off; Descript's separate Cello referral gives 50% off Creator for 2 months), network promo codes (Impact/Awin; Hostinger forbids using other affiliates' codes), or none (Descript affiliate, Kinsta).[4][9][10][34][61]
• Frequency: In this sweep, 2 of the roughly 13 programs with readable terms offered an affiliate-facing consumer deal. Unique per-creator codes are the exception in dev/AI SaaS.
• Database recommendation: separate program (commission, cookie, network, traffic_policy) from offer (type: discount_pct | extended_trial | bonus_credits | free_tier_only; mechanism: link | shared_code | unique_code; eligibility; expiry; source_quote; verified_at; verification_method). A program with no offer rows is shown as "no deal — free tier" or "no deal." Only offers with a verified row get the "actual offer" badge.
• Keeping offers current: weekly re-fetch of source pages with diff alerts; creator-reported "code works" checks; and, for Dub/PartnerStack programs, offer fields read via API where exposed. Expire badges at 30 days without re-verification.

6Third-Party Earnings Aggregation (corrected belief)

Aggregators: Strackr connects via network API keys, offers a 30-day free trial, and has its own API module (paid).[65][66] wecantrack connects Amazon via Creators API credentials.[63] Affilimate, Affluent and Trackonomics were not re-verified in this pass.

Terms issue: PartnerStack's own documentation frames the partner API key as the way to use "external services," so a creator pasting a key into Ancaster is sanctioned use.[1] The ElevenAPI credential-sharing ban applies to ElevenLabs product API keys, not PartnerStack partner keys. Don't conflate them. Store keys encrypted (Workers secrets or envelope-encrypted in D1) with read-only scope and a revoke button.

Realistic display for third-party offers: earnings, customers and transactions (PartnerStack, Impact), plus Ancaster's own first-party page views, CTA clicks and code copies. Join them into "Ancaster clicks → network signups → paid." Merchant-side conversion rates beyond network signups are not visible. Say so in the UI.

7The In-House "Ancaster Official Program"

Tracking architecture (Cloudflare-native):

1. Click: a Worker at the creator's sayable link mints anc_click_id (ULID), writes the click to D1 via Queue, sets a first-party cookie on the landing page and appends ?anc= to the product's signup URL.
2. Signup: Chris's product stores anc_click_id and partner_id on the Stripe customer (metadata) at account creation. This is customer-level lock-in, with a configurable window (default 90 days, matching industry norms).
3. Coupon attribution: each partner gets a Stripe promotion code. A redemption with no click ID attributes by code, and code beats cookie when they conflict (the code-first reconciliation already specified).
4. Conversion: Stripe webhooks (customer.created, invoice.paid, charge.refunded, customer.subscription.updated/deleted) → Queue → ledger in D1. Paddle/Lemon Squeezy use equivalent webhooks. Each ledger event emits a signed Referral Receipt.
5. Outbound Partner/Postback API: (a) HMAC-signed JSON webhooks per event (click, signup, trial_started, sale, renewal, refund, commission.approved); (b) templated S2S GET postbacks so any tracker (Everflow, Voluum, RedTrack, Binom) can receive conversions. Ancaster substitutes macros such as {click_id}, {sub1..sub5}, {event}, {payout}, {revenue}, {currency}, {txn_id} into the partner's URL. Accept an inbound sub_id/external click ID on the link so the partner's tracker ID round-trips. (Macro names follow common tracker conventions; exact per-tracker syntax was not verified in this pass.)
6. Publisher analytics: clicks, unique visitors, signups, trials, paid conversions, MRR attributed, refunds, commission states, and EPC by link/code/placement (including boost-tagged traffic).

Fraud controls: block self-referral (partner email/domain or Stripe card fingerprint matches the buyer); hold commissions 30–60 days past first payment (ElevenLabs uses 90 days for chargeback risk);[7] velocity and ASN/datacenter-IP checks on clicks; disposable-email and duplicate-device checks on free signups; code-leak detection (redemptions from coupon-site referrers).

Payout precedents: Dub pays partners through Stripe Express (PayPal fallback), and "Commissions are payable only after the applicable Client has paid Dub in full." Its terms also require that commissions from its clients "must be processed through Dub," a platform-collected, custody model.[67] Dub's own comparison says Rewardful doesn't run payouts and has merchants mark payouts paid; that is a competitor's claim.[68] Dub's partner payout thresholds differ between its help page ($10 auto-deposit) and blog ($100 default, with $2 fee for lower custom amounts), which suggests configurable thresholds. International bank payouts carry a 1% FX fee.[68][69]

Adapting "no custody": For Chris's own products, paying his own affiliates from his own business account isn't custody of anyone else's money, so the principle survives intact. For outside advertisers, collecting their money to pay partners would make Ancaster a funds intermediary. That raises money-services and KYC questions in Canada and the US that were not researched in this pass and need a lawyer. Tax forms (W-9/W-8BEN for US-linked payees, 1099-NEC for US persons, Canadian T4A/slip obligations) also were not verified here. Get an accountant's answer before paying non-Canadian affiliates at scale.

8One Account vs Roles

Precedents (from documentation read): PartnerStack separates Partner API (Bearer key) from Vendor API (Basic auth),[70] and Dub runs a distinct partner portal and Partner Terms from its workspace product.[67] Both split roles at the data and contract layer. The unified-product precedents (beehiiv Boosts, SparkLoop, Passionfroot, Stripe, Shopify Collabs, Linktree) were not re-verified in this pass. They're cited as general design patterns, not sourced facts.

Trade-offs:

• Unified: one signup, a creator can also be an advertiser (Chris himself), agencies can hold many workspaces.
• Split: cleaner trust boundaries, separate controller/processor roles (the advertiser is controller of buyer data; Ancaster is processor), and simpler fraud rules.

Recommendation: one identity, many workspaces. Each workspace has capabilities (publish, advertise, manage_clients) switched on by an intent question at onboarding ("Promote products / Sell my product / Manage clients"). Keep separate ledgers per capability. Hard-block self-referral across capabilities: a workspace can't earn commission on its own advertised offer from its own users. Agencies get membership in client workspaces with scoped roles.

9Synthesis: Decisions

D1. Traffic-permissions schema

• A: Binary allowed/prohibited per program.
• B (recommended): 12 classes × 4 states + conditions + verbatim source quote + verified_at; unknown defaults to needs_approval.
• C: Free-text notes.
• Decide for me: B.

D2. v1 program shortlist

• A (recommended): ElevenLabs (free tier, organic only), beehiiv (real offer plus paid social allowed), Webflow (conditional paid social), Runway (25% code), Descript (free tier, no Google ads), plus Chris's own products.
• B: Add HeyGen and Make (search allowed with negative keywords; no consumer offer).
• C: Wait for Cursor/Lovable/Bolt programs.
• Decide for me: A.

D3. Paid amplification

• A (recommended): Boost kit plus permission gate plus deep links; T4 partnership-code broker for in-house offers only.
• B: Add Google Explorer and LinkedIn Development-tier API writes in month 2.
• C: Managed media buying (rejected: custody of spend).
• Decide for me: A now, B after 10 active creators.

D4. Signup-first page design

• A (recommended): "Start free" primary CTA where a free tier exists; code shown as "use at upgrade."
• B: Discount-first for paid-only programs.
• Decide for me: A with B automatically for programs with no free tier.

D5. Earnings aggregation

• A (recommended): Native PartnerStack Partner API plus postbacks first, Dub postbacks second, Impact third.
• B: Resell Strackr's API.
• C: CSV upload only.
• Decide for me: A, with CSV as a fallback for every other network.

D6. In-house program and payouts

• A (recommended): First-party click ID, Stripe webhooks, D1 ledger, signed webhooks and S2S postbacks; Chris pays his own affiliates monthly from his business account (PayPal/Wise/Stripe), with Ancaster generating statements.
• B: Stripe Connect Express from Chris's company platform account.
• C: Ancaster-collected funds for outside advertisers (defer until legal review).
• Decide for me: A.

D7. Account model

• A (recommended): One account, capability workspaces, intent onboarding.
• B: Split publisher/advertiser signups.
• C: Split plus agency tier.
• Decide for me: A.

30-day build plan

• Days 1–5: traffic_policy and offer tables; seed the 18 programs above with quotes and dates; permission-gate UI.
• Days 6–10: PartnerStack Partner API connector (Rewards, Customers, Transactions) plus postback receiver; earnings view joined to Ancaster click data.
• Days 11–15: Signup-first page variant; ElevenLabs page rebuilt with organic-only boost warning; beehiiv page with link-embedded offer.
• Days 16–22: In-house tracking. Click Worker, Stripe webhook ledger, promotion-code attribution, Referral Receipts, outbound webhooks and S2S postbacks with macros.
• Days 23–27: Boost kit (copy, boost-tagged links, native deep links); fraud rules; statement generation for Chris's own affiliates.
• Days 28–30: Onboarding intent screen; 5 pilot creators; email ElevenLabs via PartnerStack to confirm the free-signup upgrade window.

Kill criteria (at day 30–45)

• Fewer than 3 of 5 pilot creators connect a PartnerStack key → drop native aggregation and use CSV.
• Ancaster-attributed signups don't match network-reported signups within ±20% for 2 programs → fix attribution before adding programs.
• Zero in-house conversions posted end-to-end through the webhook/postback API → pause the outside-advertiser roadmap.
• Any program manager rejects Ancaster pages as bridge/look-alike pages → pause that program and redesign.

10Caveats

• Several program cells rely on secondary sources (Semrush, Lovable restrictions, Hostinger SEM list, Riverside cookie). They're marked in the table and need re-verification before being shown to creators as fact.
• The ElevenLabs free-signup→upgrade rule is inferred from its terms, partner guide and PartnerStack docs, not stated as one sentence. The guide's FAQ "Can I run Google Ads with this affiliate link?" answer was not visible in the fetched text.[7]
• Meta's rate-tier threshold is 500 calls in 15 days, lowered from 1,500 per Meta's developer blog; secondary sources date the change to 4 May 2026. Dub's payout threshold also differs between its help page and blog.[68][69]
• Not researched in this pass: Microsoft Advertising API, ChatGPT Ads, Rewardful/FirstPromoter/Tolt payout mechanics, CJ/Awin/Rakuten APIs, tax-form and money-transmission law, and per-platform affiliate ad policies other than Google's.

11Sources

1. Using the Partner API and Postbacks
2. PartnerStack API - Strackr.com
3. ElevenLabs — ElevenLabs Creator Affiliate Program - Terms
4. Getting started with the beehiiv Partner Program
5. Partner Program FAQ | beehiiv Help
6. Cookie windows and attribution logic – PartnerStack
7. Getting started as an ElevenLabs Affiliate Partner
8. ElevenLabs Affiliate Program: Commission & Cookie Details
9. Apply to the Runway Affiliate Program
10. Kinsta's Affiliate Program — FAQ
11. The Descript affiliate program - Descript Help Center
12. Join Notion's Affiliate Program
13. Become a Canva affiliate through the Canvassador Program - Canva Help Center
14. Corporate and commercial - Bolt
15. April 11, 2025 - Replit
16. Does Zapier Have an Affiliate Program? | Zapier Community
17. Increasing Access - LinkedIn | Microsoft Learn
18. GitHub - amster93/meta-ads-api-notes: Meta Marketing API from zero: app setup, system users, Business Verification, Full Access, rate limits — beginner guide + field notes
19. How to Get Your X Ads (Twitter Ads) API Key | Unified.to
20. How to Get Your Reddit Ads API Key | Unified.to
21. How to Get Your TikTok Ads API Key | Unified.to
22. Webflow's affiliate program overview
23. HeyGen Technology Inc.
24. Become a Make Affiliate | Make
25. Affiliate program - Help Center
26. Kit Affiliate Program
27. Descript Affiliate Program | Terms & Conditions
28. Riverside | Sign up
29. Riverside Affiliate Program
30. Riverside Affiliate Program 2025 | Details & Promotion Ideas - Affiliate Yoco
31. Framer: Affiliate Terms
32. Kinsta Inc. Affiliate Program Terms and Conditions
33. Hostinger Affiliate Program with Payout 36% Per Sale | June 2026
34. Affiliate program agreement
35. Hostinger Affiliate Program - Trakaff
36. Semrush Affiliate Program Review: 2026 Commission Rates & Gu
37. Semrush Affiliate Program Review 2026: \$200 Per Sale | EarnifyHub
38. shopify affiliate program compliance guidelines
39. Affiliate partners | Lovable
40. Lovable vs Base44 Affiliate Programs Compared 2026
41. Terms Of Service | Grammarly
42. Affiliates | Grammarly
43. NordVPN Affiliate Program | Uncovered By Referral Rock
44. Join our VPN Affiliate Program & Make Money Now | NordVPN
45. NordVPN Affiliate Program | Affiliate & Performance Marketing DCMnetwork
46. NordVPN Affiliate Program: Commission, Review and How to Join
47. ElevenLabs | Affiliate Register
48. How Do You Do Affiliate Marketing with PPC? Complete 2025 Guide | Post Affiliate Pro
49. Meta Adds New Facebook and Instagram Management Options for Third-Party Platforms
50. Facebook Ads API Permission App Review: 2026 Guide
51. Accessing Ads accounts - X
52. Ads API Standard Access Request - App ID 32964128 - Advertiser Tools and APIs / Ads API Access - X Developers
53. How to create Spark Ads for Manual and Search Campaigns in TikTok Ads Manager
54. LinkedIn API Partner Support - LinkedIn | Microsoft Learn
55. Insufficient original content - Advertising Policies Help
56. Integration overview – PartnerStack
57. Introduction to payment webhooks
58. Adding a customer, creating a transaction and changing customer attribution – PartnerStack
59. Potential cases where link tracking fails – PartnerStack
60. The SaaS Conversion Report: A new look at free-to-paid conversion | ChartMogul
61. <https://help.descript.com/hc/en-us/articles/40556901728013-Refer-others-and-earn-rewards>
62. Amazon.com Associates Central - Creators API Documentation
63. Amazon Associates Creators API Integration
64. Affiliate networks - Strackr.com
65. Affiliate API - Strackr.com
66. 1\. Start Here - Strackr.com
67. Partner Terms of Service | Dub
68. Dub vs Rewardful: SaaS Affiliate Program Comparison (2026) | Dub
69. Connecting your payout method to receive payouts - Dub
70. PartnerStack Python API Docs | dltHub