ConvertOut is built to be GDPR compliant.
We don't use cookies to attribute sales. All tracking happens through the ambassador's discount code — when an order comes in with that code on it, we credit the sale. There's nothing following your customers around the web.
The personal data we do hold is what ambassadors enter themselves when they sign up for your portal: their name, email address, and the payment details you ask them for. Deleting an ambassador in the app removes their account and their data.