fbm affiliate program

Overview

The fbm affiliate program provides affiliates with a comprehensive dashboard to track their performance across a suite of AI chatbot products. Affiliates can monitor clicks, conversions, rebills, upsells, and commissions in real-time. The unique tracking system allows affiliates to send traffic to any page of any partner app simply by appending /aff/{id} to any URL - all traffic is automatically tracked with detailed statistics available in the dashboard.

A key feature is the whitelabel solution that lets any affiliate create their own custom AI chatbot app within minutes - no coding required. This enables affiliates to build and brand their own products while leveraging the existing infrastructure.

Multi-Schema Architecture

PostgreSQL schema separation provides logical data isolation without multiple databases. The affiliate schema holds core business data (affiliates, clicks, conversions, payments), while logs stores the audit trail. Active Record models use table name prefixes for schema routing.

The tracking system spans multiple applications - partner apps (podruga.ai, etc.) handle click recording and conversion tracking, while this dashboard provides read-only reporting and payout management.

# PostgreSQL schema configuration
schema_search_path: "affiliate,logs,public"

# Model table routing
class Click < ApplicationRecord
  self.table_name = 'affiliate.clicks'
end

class ApplicationLog < ApplicationRecord
  self.table_name = 'logs.application_logs'
end

# Tracking flow
1. Affiliate gets link: https://podruga.ai/aff/{code}
2. User clicks -> partner app records click, sets cookie
3. User converts -> partner app records conversion
4. Affiliate views stats on fbmhdl.com (read-only)

Defense-in-Depth Security

Six-layer security architecture from network to application level:

Layer 1: Network      - UFW firewall + SSL/TLS
Layer 2: Rate Limit   - Rack::Attack (IP + username)
Layer 3: Validation   - CSRF tokens
Layer 4: Auth         - BCrypt hashing, secure sessions
Layer 5: Authorization - before_action guards
Layer 6: Audit        - ApplicationLog trail

Technical Challenges