Where is the data kept? Is the server behind locked door? & What is the eta on updates to the Affiliate Sign In page to become secure?

Thanks for asking an important question. We have carefully chosen our servers to be hosted and managed by one of the oldest and most respected server hosts in the country. Our data center is kept under tight security, so yes, it's under lock and key.

On our end, only Regina and I have the authority to access merchant's accounts. Even so, we do not do it unless there's a need to e.g. problem with the account. On occasion, our programmer will need to access a merchant's account to troubleshoot or diagnose a problem but we do so with permission from the merchant first. Also, we do not shop for programmers. We consistently work with a handful who have demonstrated integrity and reliability.

As for the affiliate login and signup pages, they are secured. The merchant however needs to configure their account to use the secure URL. We can certainly walk them through that.