Privacy Policy

9.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register.
• Organization Data: Sales rep names, team structures, compensation plan parameters, order/revenue figures, and calculation results you enter or generate within the platform. This is your Customer Data as defined in Section 5.
• Payment Information: Billing details processed through our third-party payment processor (Stripe). We do not store full payment card numbers on our servers.
• Communications: Any information you provide when contacting support.

9.2 Information Collected Automatically

• Usage Data: Pages visited, features used, timestamps, and interaction patterns.
• Device Data: Browser type, operating system, IP address, and device identifiers.
• Cookies: Session cookies for authentication and preferences. We do not use third-party advertising or tracking cookies.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Perform commission calculations and generate reports based on data you provide.
• Authenticate users and manage access controls.
• Send transactional emails (account confirmations, security alerts).
• Respond to support requests.
• Monitor and analyze usage trends to improve the Service.
• Detect and prevent fraud, abuse, or security incidents.
• Comply with legal obligations.

We do not sell your personal information. We do not use your organization data to train machine-learning models or share it with third parties for their own commercial purposes.

We may share information only in the following circumstances:

• Service Providers: Third-party vendors who assist in operating the Service (hosting, payment processing, email delivery), bound by contractual confidentiality obligations. As of this writing, our primary sub-processors are Vercel (hosting), Stripe (payments), and Resend (transactional email).
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.
• With Your Consent: When you have explicitly authorized the disclosure.

We retain your account and organization data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law (e.g., billing records for tax purposes).

Depending on your jurisdiction (including under the GDPR, CCPA, and similar laws), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format (CSV).
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@earnestcomp.com. We will respond within 30 days (or as required by applicable law).

International Transfers

Your data may be processed in jurisdictions outside your country of residence (primarily the United States). We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses where required.

Children’s Privacy

The Service is not directed at individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.