Privacy Policy

1. Introduction

CommissionGuard ("we", "our", or "us"), a product of Seven Alpha Labs, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our commission-statement reconciliation service.

2. Information We Collect

We collect the following types of information:

• Account Information: your name, agency name, and email address when you create an account
• Statement Data: the carrier commission statements you upload and the commission and policy line items extracted from them
• Usage Data: information about how you interact with the Service
• Billing Information: handled by our payment processor (Stripe); we do not store your full card details

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Extract and reconcile your commission data
• Send account, security, and support communications
• Improve and optimize the Service
• Comply with legal obligations

4. AI Processing

To extract data from your statements, the contents of the statements you upload are transmitted to our AI provider (Anthropic) solely to convert them into structured commission data. This content is processed to provide the Service and is not used to train AI models.

5. Data Storage and Security

Your data is stored securely using industry-standard encryption with trusted providers (Supabase and Vercel) that maintain SOC 2 compliance. Each agency's data is access-scoped and isolated using row-level security, so other customers cannot see it. We do not retain the original uploaded statement files after processing — we store the extracted commission data and a content fingerprint used to detect duplicate uploads.

6. Data Sharing

We do not sell your data. We may share information with:

• Service Providers: trusted third parties that help us operate the Service, including Supabase (database and authentication), Vercel (hosting), Anthropic (AI extraction), Stripe (payments), and Amazon Web Services (transactional email)
• Legal Requirements: when required by law or to protect our rights
• Business Transfers: in connection with a merger or acquisition

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Withdraw consent at any time

8. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use advertising or tracking cookies.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your data within 30 days, except where we are required to retain it for legal purposes.

10. Children's Privacy

CommissionGuard is a business service and is not intended for users under 18. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

12. Contact Us

For privacy-related questions, please contact us at support@commissionguard.app.