Privacy Policy

This policy explains what CommTrack collects, why, and what you can do about it. We’re an Australian service and we follow the Australian Privacy Principles. Short version: we collect what’s needed to run your account, we don’t sell it, and you can export or delete it whenever you like.

What we collect

• Account details — email address, password (stored hashed), and if you sign in with Google, Apple or Microsoft, the name and email those providers share.
• Profile — name, title, company, industry, currency, selling days, an optional photo and logo, and your display preferences.
• Your commission data — the plan rules you set, the deals and pipeline you enter, and the figures CommTrack calculates from them.
• Billing — your subscription status and a Stripe customer reference. Card details go directly to Stripe and never reach our servers.
• Technical — standard server logs (IP address, browser, pages requested) kept for security and debugging, and cookies needed to keep you signed in and remember your theme. We don’t use advertising trackers.

How we use it

• To run the Service: calculate your commission, show your dashboards, sync between the web and iPhone app.
• To bill you and send receipts.
• To send account emails — confirmation, password reset, important changes to the Service. We don’t send marketing email unless you opt in.
• To keep the Service secure and fix problems.

Who else sees it

Only the providers that host and operate CommTrack, each bound by their own privacy commitments: Supabase (database and authentication), Vercel (web hosting), Stripe (payments), Resend (transactional email), and Apple for purchases made in the iPhone app. Data may be stored or processed outside Australia by these providers. We never share your commission data with your employer, colleagues, or anyone else, and we don’t sell data.

Your data is yours

• Export everything as JSON from My Account at any time.
• Correct anything from My Account or by emailing us.
• Delete your account by emailing hello@commtrack.app; we remove your data within 30 days, except billing records we’re legally required to keep.

Security

Every record is locked to your user account at the database level, connections are encrypted, and passwords are hashed. No system is perfect; if we become aware of a breach affecting you, we’ll tell you as the law requires.

Children

CommTrack is for working adults and isn’t directed at anyone under 18.

Changes and contact

We’ll post updates here and email you about material changes. Questions or complaints: hello@commtrack.app. If you’re not satisfied with our response you can contact the Office of the Australian Information Commissioner.