Privacy Policy

9.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register.
• Organization Data: Sales rep names, team structures, compensation plan parameters, order/revenue figures, and calculation results you enter or generate within the platform. This is your Customer Data as defined in Section 5.
• Payment Information: Billing details processed through our third-party payment processor (Stripe). We do not store full payment card numbers on our servers.
• Communications: Any information you provide when contacting support.

9.2 Information Collected Automatically

• Usage Data: Pages visited, features used and timestamps, from server logs and our hosting provider’s cookie-free web analytics.
• Device Data: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session cookies for authentication and preferences. We do not use third-party advertising or tracking cookies.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Perform commission calculations and generate reports based on data you provide.
• Authenticate users and manage access controls.
• Send transactional emails (account confirmations, security alerts).
• Respond to support requests.
• Monitor and analyze usage trends to improve the Service.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal information. We do not use your organization data to train machine-learning models or share it with third parties for their own commercial purposes.

Business contacts and sales outreach

We may contact people at businesses we think could benefit from Earnest. For this we use business contact details (name, work email address, job title and company) from public sources and business-data providers such as Apollo.io, on the basis of our legitimate interest in telling businesses about our product. Every such email says how to opt out: reply "no", or email privacy@earnestcomp.com, and we will stop contacting you and keep only what we need to honour that request.

We may share information only in the following circumstances:

• Service Providers (sub-processors): Third-party vendors who help us operate the Service, under their own confidentiality and data-protection terms. As of the date at the top of this page, they are:
  • Vercel, Inc. — application hosting and content delivery (United States).
  • Neon, Inc. — PostgreSQL database hosting; this is where your Customer Data is stored (United States, AWS us-east-2).
  • Stripe, Inc. — subscription billing and payment processing (United States).
  • Resend, Inc. — transactional email delivery (United States).
  • Upstash, Inc. — rate-limiting counters keyed by account identifier and IP address; no Customer Data.
  • Functional Software, Inc. (Sentry) — error monitoring; IP addresses, cookies and authorization headers are stripped before transmission (United States).
  • Google LLC (Google Workspace) — our business email, including support requests you send us (United States).
  If you choose to sign in with Google, Google LLC processes that sign-in as an independent identity provider under its own privacy policy. Our exchange-rate provider (ExchangeRate-API) receives no personal data. We will update this list when we add or replace a provider that handles personal data.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
• With Your Consent: When you have explicitly authorized the disclosure.

We retain your account and organization data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law (e.g., billing records for tax purposes).

Depending on your jurisdiction (including under the GDPR, CCPA, and similar laws), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format (CSV).
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@earnestcomp.com. We will respond within 30 days (or as required by applicable law).

International Transfers

Your data may be processed in jurisdictions outside your country of residence (primarily the United States). Where the law requires a transfer safeguard, such as standard contractual clauses, we provide one on request.

Children’s Privacy

The Service is not directed at individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.