PaidLens
← Back to Home
Privacy PolicyTerms of ServiceData Processing AgreementCookie PolicyData RetentionSecurity

Privacy Policy

Last updated: May 16, 2026

PaidLens Inc. (“PaidLens,” “we,” “us,” or “our”) operates the PaidLens commission intelligence platform (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, company name, job title, and password when you register for an account.
  • Organization Data: Commission data, compensation plans, employee records, sales performance data, and other business data you upload or connect to the Service (“Customer Data”).
  • Payment Information: Billing address and payment method details. Payment processing is handled by our third-party payment processor; we do not store full credit card numbers.
  • Communications: Information you provide when you contact us for support, submit feedback, or participate in surveys.
  • Demo Requests: Name, email, company name, and role when you book a demo through our website.

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
  • Device Information: Browser type, operating system, device type, and screen resolution.
  • Log Data: IP address, access times, referring URLs, and error logs.
  • Cookies: Essential cookies for authentication and session management. See our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Authenticate users and manage access controls
  • Process and canvas commission data as directed by your organization’s administrators
  • Send transactional communications (account verification, password resets, security alerts)
  • Provide customer support and respond to inquiries
  • Monitor and analyze usage patterns to improve performance and user experience
  • Detect, prevent, and address security incidents, fraud, and technical issues
  • Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • Within Your Organization: Customer Data is accessible to authorized users within your organization based on roles and permissions configured by your administrator.
  • Service Providers: We use third-party providers for hosting, email delivery, payment processing, and analytics. These providers are contractually bound to protect your data and may only use it to perform services on our behalf.
  • Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data becomes subject to a different privacy policy.

4. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Multi-factor authentication (MFA) support
  • Role-based access controls with organizational isolation
  • Regular security assessments and monitoring
  • Audit logging of administrative actions
  • IP allowlisting capabilities for enterprise customers

We take the security of your data seriously and accept responsibility for maintaining robust protections. While no system can eliminate all risk, we continuously invest in our security infrastructure and practices to safeguard the information entrusted to us. In the event of a security incident affecting your data, we will notify you and relevant authorities in accordance with applicable law.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account Data: Retained while your account is active. Upon account deletion, we remove personal data within 30 days, except where retention is required by law.
  • Customer Data: Retained as directed by your organization’s administrator. Upon termination of your organization’s subscription, Customer Data is deleted within 90 days. You may request earlier deletion.
  • Usage & Log Data: Retained for up to 12 months for analytics and security purposes.
  • Audit Logs: Retained for up to 24 months for compliance and security.
  • Backup Data: Purged from backups within 90 days of deletion from production systems.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention obligations.
  • Portability: Request your data in a structured, commonly used, machine-readable format.
  • Objection: Object to processing of your personal data for certain purposes.
  • Restriction: Request restriction of processing in certain circumstances.
  • Withdraw Consent: Where processing is based on consent, withdraw consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.

8. Children’s Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: