# Chia Health — affiliate program boundaries

**Version 1.1 · Companion to `chia-s2s-v1`**

This companion covers traffic, creative, disclosure, patient-contact, and data
boundaries. Technical integration details live in the integration quickstart.
Rates, settlement basis, and payment schedule are agreed separately with your
Chia contact and are not described here. The tracking system calculates no
commission and moves no money.

## Approved traffic and creative

Violation may terminate the agreement, and affected traffic is excluded from
reporting.

**Program integrity**

- No cookie stuffing, iframe or pixel drops, forced redirects, or attribution
  not initiated by a visible, deliberate user click.
- No browser extension, toolbar, or other software that injects attribution at
  cart or checkout.
- No self-referral or referral of household members.
- No incentivized, rewarded, or bot traffic. Disclose traffic sources to Chia
  before launch.
- Do not bid on Chia brand terms, misspellings, or brand-plus-competitor terms.
  Chia trademarks may not appear in ad copy, display URLs, or landing headlines
  without written approval.
- Use only coupon codes Chia issued to you and do not alter their discount.

Paid search and paid social are allowed, like owned content, email, and organic
social. On any ad platform, follow that platform's own rules for healthcare ads.

Every creative, landing page, and email requires written Chia approval before
launch. Each approved asset gets its own `link_code`; post-hoc review is not
sufficient.

- Do not guarantee results, promise a cure, or imply a specific amount of
  weight loss in a specific timeframe.
- Do not claim Chia is affiliated with a brand-name drug or that a compounded
  product is one. Prohibited examples include “generic Ozempic,” “generic
  Wegovy,” “generic Mounjaro,” “same active ingredient as Ozempic/Wegovy,”
  “clinically proven,” “FDA-approved” for a compounded product, or “more
  cost-effective alternative to” a branded drug.
- No fabricated testimonials, incentivized reviews, unapproved before/after
  imagery, AI-generated endorsements, fake news formats, or “as seen on”
  network logos.
- Do not display LegitScript, Trustpilot, accreditation, or similar marks
  without written per-asset approval.
- No fake scarcity or misleading discounts.
- Do not market to minors.

## Required disclosures

**Auto-renewal disclosure is mandatory.** A page quoting a monthly price must
state on the same page and with equal prominence: the total charged today, the
exact billing period in days, that it renews automatically at that amount, and
how to cancel. Chia bills in 28-day months: six months is 168 days and four
months is 112 days.

**Material-connection disclosure is mandatory** on every placement. It must be
clear, conspicuous, above the fold, and in the visitor's language. Example:
“I earn a commission if you sign up through my link.”

## Patient-contact boundary

You may not collect medical history, assessment answers, or other health
information outside Chia's secure forms. You may not pre-screen or qualify on
health criteria, or call, text, or otherwise contact prospects. Send prospects
directly to the approved Chia link. This boundary is subject to audit.

Chia monitors placements, mystery-shops partner funnels, and operates a
24-hour takedown SLA on notified violations.

## Data-use boundary

Chia sends no email, hashed email, phone, name, IP address, user agent, patient
identifier, medication, dose, condition, questionnaire answer, or treatment-
revealing URL in a postback or report.

You may not attempt to re-identify Chia customers, join opaque conversion data
to identity or health datasets, or sell, license, or onward-transfer Chia data.
A data-processing addendum covering these obligations forms part of the
affiliate agreement.

## Reporting and support

Chia's click, purchase, renewal, refund, and delivery records are the system of
record for what happened. Your tracker records what it received. If they
disagree, request a trace by click ID or transaction ID; Chia will provide the
exact attempted postback URL, HTTP status or fixed transport error, elapsed
milliseconds, and the retained first 512 decoded response characters for each
attempt. Response headers and the remainder of a larger body are not retained.
Because the attempted URL contains your tracker credential, Chia transfers
trace output only through an approved secure channel, not ordinary email.

Request integration help at `support@chia.health` with subject
`[Affiliate integration]` and only an opaque click ID or transaction ID. Never
send patient identity, health information, questionnaire answers, medication,
or other clinical context through the support channel.

Commercial terms are agreed separately. When agreed, they settle against the
same purchase and renewal facts retained from day one. The integration report
is not an invoice, statement, or balance.