Privacy Policy
This Privacy Policy explains what personal information CommissionLog collects, how we use it, and the choices you have. We aim to collect only what we need to run the Service.
Free tool vs. paid accounts
The free tool runs in your browser with no account and no login. The data you enter there stays on your own device and is not stored on our servers, and we do not receive it. You are responsible for backing it up (for example with the CSV export). The rest of this policy mainly concerns paid company accounts, which are stored on our servers.
1. Who we are
CommissionLog is operated from Pakistan and is available to customers worldwide, including in the European Economic Area, the United Kingdom and North America. For personal information you enter about your company, reps and sales, you (the company) decide what to enter and we process it on your behalf to provide the Service. For account, billing and usage information about you, we are the controller. Contact: support@commissionlog.com.
2. Information we collect
- Account information: name, email address, company name, and a securely hashed password (we never store your password in readable form).
- Data you enter: reps' names and emails, sales records, commission rates and calculated commissions.
- Usage and technical data: IP address, browser type, and basic server logs used for security and troubleshooting.
- Cookies: we use only essential cookies, such as the session cookie that keeps you logged in. We do not use advertising or tracking cookies.
- Payment information: payments are handled entirely by Paddle (our Merchant of Record). We do not receive or store your card details. Paddle may share limited information with us, such as subscription status, plan, country and email, so we can provide your paid features.
3. How we use information
- To create and operate your account and provide the Service.
- To send service emails, such as rep invitations and password reset links.
- To process subscriptions and manage plan access.
- To secure the Service, prevent abuse, and fix problems.
- To respond to your questions and requests.
We do not sell your personal information and we do not use it for advertising.
4. Legal bases (EEA / UK users)
Where GDPR applies, we rely on: performance of a contract (providing the Service you signed up for), legitimate interests (security, preventing abuse, and improving the Service), legal obligations, and consent where we ask for it.
5. Who we share information with
- Paddle – payment processing, taxes and billing (see Paddle's Privacy Policy).
- Hosting and email providers – we use Hostinger to host the Service and send service emails.
- Legal requirements – if required by law or to protect rights and safety.
Within a company account, admins can see all of that company's data, and reps can see their own sales and commissions.
6. International transfers
Because we operate from Pakistan and use international providers, your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.
7. Retention and deletion
Data in the free tool stays on your device, so you can delete it at any time by clearing your browser data. For paid accounts, we keep your information while your account is active. If a paid subscription ends (cancelled, not renewed or refunded), paid features are switched off and the account and its data are kept for 30 days; if you do not subscribe again within that time, the account and all its data are automatically and permanently deleted. A company admin can permanently delete the company account from account settings, which removes the company's reps, sales and commission records from our live system immediately; copies in our server backups may remain for a short additional period before they are overwritten. When an admin removes a rep, the rep can no longer login, but their past sales and commission history is kept for the company's records until the account is deleted or you ask us to erase it. We may keep limited information longer where required by law or for security and dispute purposes. Payment records (invoices, taxes, refunds) are held by Paddle as Merchant of Record under its own legal obligations.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal information, to object to certain processing, and to complain to your local data protection authority. To exercise these rights, email support@commissionlog.com. If you are a rep and your data was entered by your employer, we may direct your request to the company admin.
9. Security
We use reasonable measures to protect your information, including hashed passwords and encrypted connections (HTTPS).
10. Children
The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy from time to time. We will change the date at the top of this page and, for significant changes, notify you by email or in the app.
12. Contact
Email: support@commissionlog.com