Privacy Policy

1. Overview

Compsheet ("we," "us," or "our"), operated by SaaSFlow Holdings, is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using Compsheet at compsheet.io, you agree to the practices described here.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address and password (administrators)
• Company or organization name
• Rep names and email addresses you add to your team

Sales and Commission Data

To provide the Service, we store data you enter including:

• Sales activities (meetings, deals, deal values, close dates)
• Compensation plan configurations (quotas, commission rates, tiers)
• Quota attainment and commission calculations
• CRM links and notes you choose to attach

Usage Data

We collect standard log data when you use the Service, including IP addresses, browser type, pages visited, and timestamps. This helps us maintain service reliability and improve the product.

3. How We Use Your Information

• Provide the Service — store and display your commission and activity data
• Process payments — handle billing via Stripe
• Send transactional emails — rep invite links, password resets, billing receipts
• Power AI features — your data may be sent to Anthropic's API to answer questions you ask in the AI Insights chat. We do not use your data to train AI models.
• Improve the product — analyze aggregated, anonymized usage patterns
• Comply with legal obligations — respond to lawful requests from authorities

4. Third-Party Services

We use the following trusted third-party providers to operate the Service. Each has their own privacy practices:

We do not sell your personal information to any third party.

5. Data Storage and Security

Your data is stored in Supabase's managed cloud infrastructure. We implement industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Encrypted storage at rest
• Row-level security to ensure organizations can only access their own data
• Access controls limiting which team members can see sensitive information

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@compsheet.io.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, after which it may be permanently deleted from our systems. You can request an export of your data at any time by contacting support.

7. Cookies

Compsheet uses only essential cookies required for authentication and session management. We do not use advertising, tracking, or analytics cookies. You cannot opt out of essential cookies as they are required for the Service to function.

8. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at support@compsheet.io. We will respond within 30 days.

9. Children's Privacy

Compsheet is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by posting a notice in the Service. The "last updated" date at the top of this page will always reflect the most recent revision.

11. Contact Us

If you have any questions or concerns about this privacy policy or how we handle your data, please reach out at support@compsheet.io.