Plain language version first: your CRM data is yours, we do not sell it, we do not run ad trackers, and you can export or delete everything whenever you want. The details follow. Effective August 11, 2026.
CommissionIQ is built and operated by Beyond Think Tank LLC, Austin, Texas. Questions about this policy: support@commissioniq.io.
Account information. Your name, email address, and sign-in credentials (passwords are hashed by our authentication provider; we never see them). If you sign in with Google or Apple, we receive your name and email from them.
The business data you enter. Accounts, contacts, deals, tasks, notes, projects, expenses, and receipt images you add to your workspace. This data exists so the product can work for you; it is never sold, rented, or used for advertising.
Payment information. Payments are processed by Stripe. Your card number goes to Stripe, not to us; we store only your subscription status and plan.
Technical basics. Standard server logs and authentication events needed to run and secure the service. We do not run third-party advertising or cross-site tracking scripts.
To provide the service: storing your workspace, calculating your commissions, sending the emails you ask for (like task reminders), and support when you contact us.
AI features. When you use an AI feature (SidekickIQ commands, email drafts, receipt scanning, the Morning Brief), the relevant text or image is sent to Anthropic's Claude API to process that request. Under Anthropic's commercial API terms, this data is not used to train their models. We only send what the feature needs.
Enrichment. If you click enrich on a contact or account, the name, company, or domain you provided is sent to Apollo.io to look up business contact details. This only happens when you trigger it.
Calendar. If you connect Google or Outlook Calendar, we read your calendar events solely to display them inside ProjectIQ. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements. We do not store your calendar data beyond what is needed to display it, and disconnecting removes our access.
Supabase (database, authentication, and hosting; encrypted at rest), Anthropic (AI request processing), Stripe (payments), Vercel (web hosting), Resend (transactional email delivery), Apollo.io (enrichment, only when you trigger it), Google and Microsoft (sign-in and calendar, only if you connect them). Each receives only what its job requires.
Your workspace is isolated with row-level security, data is encrypted at rest and in transit, and access to production systems is limited to the operator of the service.
Export: download your data as CSV from the app at any time.
Delete: delete your account and all associated data from Settings, or email support@commissioniq.io and we will do it for you. Deletion is permanent.
Correct: every record you entered is editable in the app.
If you are in a jurisdiction with specific privacy rights (such as GDPR or CCPA), we honor access, correction, deletion, and portability requests through the same channels.
We keep your data while your account is active. When you delete your account, your data is deleted. CommissionIQ is a business tool and is not directed at children under 16.
If this policy changes materially, we will note it on this page and, for significant changes, notify you by email. Continued use after a change means acceptance.