Privacy policy
Last updated 1 September 2026.
Who we are
AlgoSplit is operated by AlgoSplit Corp, a Delaware corporation. For privacy questions, write to hello@algosplit.com.
Two different roles
For a customer’s commission data, we are a processor. A company uploads deals and payee records in order to have commissions calculated. That data describes their employees, and they decide what it contains and how long it is kept. We act on their instructions.
For the account itself, we are a controller. The email address and name of the person who signs in, and the record of their sign-ins, are ours to explain.
What is held, and why
- Account data, name, email address, hashed password, workspace membership and role. Needed to sign you in and to decide what you may see. When you create a workspace or write in, we also keep the referring site and campaign labels from the link you followed, so we know how you found us.
- Session records, an opaque session identifier and its expiry, so you stay signed in.
- Commission data uploaded by a customer, payee names and identifiers, quotas and plan parameters, deals, credit allocations, calculated statements, draw balances and payroll export rows.
- Uploaded files, the CSV, JSON or spreadsheet as supplied, retained so an import can be re-read and explained.
- Audit entries, who approved which period, and when.
- Aggregate page counts, see “The website” below.
What is not held
No bank details or payment credentials, because the product never moves money, it exports to your payroll system, which does. No advertising or cross-site tracking identifiers. No special-category data. We do not sell data, and we do not use customer data to train machine-learning models.
The website
The public pages count views per page per day, the referring site where a browser sends one, and any campaign labels on the inbound link. That is the whole record: no cookie is set, no identifier is stored, and no IP address is written down, so the counts cannot be traced to a person or a visit. There is no third-party analytics on this site. The browser may remember those labels for the tab so a later signup or message can be attributed; we only keep them when you submit.
Signed in, one cookie is used: the session cookie. It is strictly necessary to keep you signed in, which is why there is no cookie banner to click.
Who else processes it
Cloudflare hosts the entire product, application, database, sessions and file storage. It is our only subprocessor. We will give notice here before adding another.
How long it is kept
Account and commission data is kept for as long as the workspace exists. Sessions expire after 30 days. On request we delete a workspace and everything in it, by hand, within 30 days. There is not yet a self-service delete or an automated retention schedule; asking is currently the mechanism, and it works.
Your rights
Depending on where you live you may have rights to access, correct, export, or delete your personal data, and to object to or restrict its processing.
If you are a payee, someone whose commission is calculated here, your employer controls that data. Ask them first; we will help them respond, and we will forward a request you send us directly.
For anything else, write to hello@algosplit.com. We aim to reply within 30 days. If you are in the UK or EU and are unsatisfied, you may complain to your data protection authority.
Security
Described in detail on the security page , including the parts we do not have yet.
Changes
If this policy changes materially, the date at the top changes and we email account holders. We will not quietly broaden what we do with data already collected.