Commission Logger

Privacy Policy - Draft

Last updated: July 12, 2026

1. Purpose

Commission Logger helps authorized staff and administrators track commission claims related to invoices, products, labor, returns, bundles, pay periods, and commission reports.

The application may connect to QuickBooks Online through Intuit's official OAuth and API process when authorized by the business.

2. Information The Application Processes

Commission Logger may process:

• staff names, usernames, roles, and account status;
• password hashes and authentication/session data;
• commission claims, claimed dates, staff assignments, split details, and payout amounts;
• invoice numbers, invoice dates, SKU/item details, descriptions, quantities, sale amounts, costs, and commission calculations;
• pay periods, reports, admin adjustments, and audit logs;
• QuickBooks Online connection status, company/realm ID, OAuth tokens, and API diagnostics;
• backup metadata and application settings.

3. QuickBooks Online Data

If QuickBooks Online is connected, Commission Logger accesses QuickBooks data only through official Intuit-authorized APIs and OAuth flows.

The application is intended to retrieve invoice and item data needed for commission workflows, cache relevant invoice data locally, and avoid repeated API calls for the same information where practical.

Commission Logger is not intended to scrape, crawl, harvest, index, or broadly archive QuickBooks Online data.

4. How Information Is Used

Information is used to:

• allow staff to claim eligible commission items;
• allow administrators to review, edit, approve, report, and audit commission activity;
• calculate commission amounts based on configured business rules;
• support pay period reporting and printable commission summaries;
• troubleshoot QuickBooks Online integration and cost-at-sale validation;
• maintain security, access control, backups, and audit history.

5. Access And Disclosure

Commission Logger is intended for authorized internal users of the operating business.

Information may be visible to administrators and to staff only as needed for the application's commission workflows.

The application does not sell personal information or QuickBooks Online data.

Information may be disclosed if required by law, business recordkeeping obligations, payroll/accounting review, security investigation, or authorized business administration.

6. Data Storage And Security

Commission Logger stores its application data in a local database controlled by the operating business.

Recommended protections include:

• restricting application access to authorized users and trusted devices;
• using strong administrator passwords;
• disabling or removing access for users who no longer need the application;
• protecting the host computer and database backups;
• using encrypted disk storage such as BitLocker where appropriate;
• using HTTPS before remote or internet access;
• protecting QuickBooks Online tokens, client secrets, and developer credentials;
• reviewing audit logs for sensitive actions.

7. Data Retention

The operating business is responsible for deciding how long to retain commission records, cached invoice data, audit logs, backups, and related reports.

Records should be retained only as long as needed for commission tracking, payroll review, accounting reconciliation, legal obligations, dispute resolution, and business operations.

8. User Responsibilities

Users must use only their own authorized account and must not share passwords, impersonate other users, bypass controls, or access data they are not authorized to view.

Administrators are responsible for managing staff access, reviewing commission reports, protecting backups, and ensuring the application is configured appropriately.

9. Third-Party Services

QuickBooks Online and other third-party services are governed by their own terms, privacy policies, permissions, and security requirements.

The operating business is responsible for maintaining any required accounts, authorizations, consents, and compliance reviews.

10. Changes

This privacy policy may be updated as Commission Logger changes, especially if the application is moved from local/LAN use to remote access, public hosting, or broader distribution.

11. Contact

Questions about Commission Logger data handling should be directed to the operating business administrator responsible for the application.