Privacy Notice
Last updated: September 19, 2026
1. Who is responsible for your data
Commission Guardian LLC is the data controller for the personal data processed through the CommissionGuard service. Contact us about this notice at notify@commissionguardian.com.
2. What we collect
- Account data — your name, email address, agency name, and login credentials.
- Business data you upload — carrier commission statements, policy records, and commission rate schedules, which may contain policyholder names and policy numbers belonging to your clients.
- Usage and device data — log data, IP address, device identifiers, and product telemetry.
- Support messages — anything you send us when you ask for help.
Payment details are collected and processed by Paddle, our Merchant of Record; we never see or store your card numbers.
3. Why we use it and our legal basis
- To create and manage your account and provide the service (performance of our contract with you).
- To scan statements, generate findings, and send your weekly summaries and dispute letters (performance of the contract).
- To keep the service secure and prevent fraud (our legitimate interests).
- To improve the product (our legitimate interests).
- To meet legal and tax obligations (legal obligation).
- Where required, we rely on your consent, which you may withdraw at any time.
4. Who we share it with
- Service providers and subprocessors that host the service, provide analytics, and power support and email delivery.
- Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, and invoicing.
- Carriers you choose to send dispute letters to, using the contact details you provide.
- Professional advisers (legal, accounting) and authorities where required by law.
We do not sell your personal data.
5. Retention
We keep personal data for as long as your account is active and as needed afterward for legal, tax, and dispute purposes. When data is no longer needed, it is deleted or anonymised.
6. Your rights
Depending on your state or country, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any of these rights, email notify@commissionguardian.com — we respond within one month. You may also have the right to complain to your data protection authority.
7. Security
We apply appropriate technical and organisational measures, including encryption in transit and at rest, strict access controls, and row-level isolation so each account can only see its own data.
8. Cookies
We use essential cookies and browser storage to keep you signed in and the service functioning, and limited analytics storage to understand product usage. You can control cookies through your browser settings; disabling essential cookies will prevent sign-in.