Privacy Policy

1. What we collect

• Account information: your name, email address, and profile photo from Google sign-in.
• HubSpot data: deal records (name, amount, stage, close date, owners, and the commission properties we create), and your portal's owner list — only what is needed to calculate commissions.
• QuickBooks data (if connected): your chart of accounts, vendor list, and the bills we create on your behalf.
• Billing information: handled entirely by Stripe. We never see or store card numbers — we store only your Stripe customer reference and subscription status.
• Usage data: standard server logs needed to operate and secure the Service.

2. How we use it

We use your data solely to provide the Service: syncing deals, calculating commissions, showing statements to your reps, exporting payouts, and billing your subscription. We do not sell your data, use it for advertising, or share it with third parties except the service providers below.

3. Where your data lives

• Supabase (PostgreSQL hosting) — application database, encrypted at rest.
• Vercel — application hosting.
• Stripe — payment processing.
• Google — authentication only.
• HubSpot / Intuit — we hold OAuth tokens to access the accounts you connect; you can revoke them anytime from Settings or from the provider directly.

4. Data isolation

Every record is scoped to your organization. Reps see only their own commission data. Our platform team accesses customer accounts only for support, and every such access and change is recorded in an audit log.

5. Retention and deletion

We retain your data while your account is active. Disconnecting HubSpot or QuickBooks stops all syncing immediately and revokes our tokens. To delete your organization and all associated data, email support@commissioniq.tech — deletion is completed within 30 days.

6. Security

All traffic is encrypted in transit (TLS). OAuth tokens are stored server-side and never exposed to the browser. Webhooks are signature-verified. Access to production systems is restricted to the platform team.

7. Your rights

You may request a copy of your data, correction of inaccurate data, or deletion at any time by contacting support. If you are in a jurisdiction with specific data-protection rights (such as the GDPR or CCPA), we will honor requests consistent with those laws.

8. Changes and contact

We will post any material changes to this policy here and update the date above. Questions: support@commissioniq.tech.