Privacy Policy

Last updated: 2026-02-27

1. Data controller

CommissionOps ApS (Denmark) is the data controller for personal data processed through this website and product. Contact: privacy@commissionops.com.

2. What we collect

We process account email addresses for authentication, HubSpot OAuth tokens (encrypted at rest), HubSpot deal data (including amounts, owner names, and close dates), commission calculation results, and usage analytics data when analytics consent is granted.

3. Why we collect it

We process personal data to authenticate users, calculate and present commissions, and improve product quality through aggregate analytics.

4. Legal basis

Contract performance applies to commission processing and workspace operation. Legitimate interest applies to product measurement and improvement. Consent applies to analytics cookies (GA4).

5. Data retention

Authentication tokens are deleted on disconnect. Synced deal data is retained until a workspace is deleted. Locked commission run snapshots are retained indefinitely for financial record-keeping.

6. Third parties

We use SendGrid for email delivery, HubSpot as the source system, Google Analytics (where consented), and Microsoft Azure for hosting in an EU region.

7. International data transfers

Where third-party processing involves transfers outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs).

8. Your rights

You may request access, rectification, erasure, portability, or object to processing, subject to applicable law. To exercise these rights, contact privacy@commissionops.com.

9. Cookies

CommissionOps uses only essential cookies and optional analytics cookies. Analytics cookies are enabled only after consent. We do not use advertising or cross-site tracking cookies.

10. Contact

For privacy questions or requests, email privacy@commissionops.com.