Privacy policy

Who we are

AlgoSplit is operated by AlgoSplit Corp, a Delaware corporation. For privacy questions, write to hello@algosplit.com.

Two different roles

For a customer’s commission data, we are a processor. A company uploads deals and payee records in order to have commissions calculated. That data describes their employees, and they decide what it contains and how long it is kept. We act on their instructions.

For the account itself, we are a controller. The email address and name of the person who signs in, and the record of their sign-ins, are ours to explain.

What is held, and why

• Account data, name, email address, hashed password, workspace membership and role. Needed to sign you in and to decide what you may see. When you create a workspace or write in, we also keep the referring site and campaign labels from the link you followed, so we know how you found us.
• Session records, an opaque session identifier and its expiry, so you stay signed in.
• Commission data uploaded by a customer, payee names and identifiers, quotas and plan parameters, deals, credit allocations, calculated statements, draw balances and payroll export rows.
• Uploaded files, the CSV, JSON or spreadsheet as supplied, retained so an import can be re-read and explained.
• Audit entries, who approved which period, and when.
• Aggregate page counts, see “The website” below.

What is not held

No bank details or payment credentials, because the product never moves money, it exports to your payroll system, which does. No advertising or cross-site tracking identifiers. No special-category data. We do not sell data, and we do not use customer data to train machine-learning models.

The website

The public pages count views per page per day, the referring site where a browser sends one, and any campaign labels on the inbound link. That is the whole record: no cookie is set, no identifier is stored, and no IP address is written down, so the counts cannot be traced to a person or a visit. There is no third-party analytics on this site. The browser may remember those labels for the tab so a later signup or message can be attributed; we only keep them when you submit.

Signed in, one cookie is used: the session cookie. It is strictly necessary to keep you signed in, which is why there is no cookie banner to click.

Who else processes it

Cloudflare hosts the entire product, application, database, sessions and file storage. Stripe takes card details and processes the subscription; card numbers go to Stripe directly and never reach us. OpenRouter drafts a commission plan from a description, only when you ask it to, using a model provider that does not store or train on what it is sent. The text you type into that box and the names of your deal types and spreadsheet columns are sent, and nothing else. Your deals, amounts and people are never sent. We will give notice here before adding another.

How long it is kept

Account and commission data is kept for as long as the workspace exists, because pay history is a financial record; nothing deletes it automatically. Temporary records are deleted on a schedule: sessions and statement links 30 days after they expire, password reset links after a week, and abandoned sign-ups after a week. On request we delete a workspace and everything in it, its database rows and its stored files, within 30 days. There is not yet a self-service delete; asking is currently the mechanism, and it works.

The workspace owner can download every record the workspace holds, one spreadsheet per table, at any time from the Billing tab.

When someone who has left asks to be erased, an admin can pseudonymise them: their name and email are replaced with a reference like “Former payee 7KQ2ZD” everywhere the product stored them, including past statements and the stored copies of past calculations. The amounts they were paid stay, because commission history is a financial record the employer is required to keep. Two things are not rewritten: the deal owner identifier from your CRM, which is how a deal is linked to who was credited, and anything someone typed in free text, such as the reason on an adjustment.

Your rights

Depending on where you live you may have rights to access, correct, export, or delete your personal data, and to object to or restrict its processing.

If you are a payee, someone whose commission is calculated here, your employer controls that data. Ask them first; we will help them respond, and we will forward a request you send us directly.

For anything else, write to hello@algosplit.com. We aim to reply within 30 days. If you are in the UK or EU and are unsatisfied, you may complain to your data protection authority.

Security

Described in detail on the security page , including the parts we do not have yet.

Changes

If this policy changes materially, the date at the top changes and we email account holders. We will not quietly broaden what we do with data already collected.