Privacy policy
How CommissionGap processes personal data when you use the service.
Last updated: 2026-08-20
1. Controller
The controller for data processing is:
Noel Dario Andres – Digital Solutions (noel.marketing) Geschwister-Scholl-Straße 19 37434 Gieboldehausen Germany Email: info@noel.marketing
2. Overview
CommissionGap is a web SaaS product that helps you analyze owned or authorized websites and text for affiliate links, tracking issues, and monetization opportunities. We process personal data only as needed to operate, secure, bill, and support the service.
3. Data we process
Depending on how you use the product, we may process:
- Account data: email address, name, preferred language, authentication data
- Organization and workspace data: member roles, settings, notification preferences
- Website and scan data: approved domains, verification proofs, crawled URLs, findings, scan metadata
- Program and link data: affiliate programs you store, link patterns, and API key metadata
- Billing data: plan, subscription status, and payment events via Lemon Squeezy (payment details are processed by Lemon Squeezy)
- Security and usage data: timestamps, error logs, and IP addresses in ordinary server logs
- Communication data: contents of support emails
4. Purposes and legal bases
Processing is mainly for:
- Providing and administering your account and workspace features (Art. 6(1)(b) GDPR)
- Running scans and text analysis on content you authorize (Art. 6(1)(b) GDPR)
- Billing, plan management, and fraud prevention via Lemon Squeezy (Art. 6(1)(b) and (f) GDPR)
- Security, abuse prevention, and troubleshooting (Art. 6(1)(f) GDPR)
- Meeting legal obligations such as commercial and tax retention (Art. 6(1)(c) GDPR)
5. Website scans
Scans run only for websites you verify you own, or for text/HTML you paste. The crawler (CommissionGapBot) respects robots.txt, stays on approved hosts, and does not bypass access controls. Scanning third-party sites without authorization is prohibited.
6. Recipients and processors
We use service providers that process data on our behalf or as independent controllers:
- Web hosting and infrastructure
- Supabase for authentication and database
- Lemon Squeezy for checkout, subscriptions, and the customer portal
- Umami (umami.noel.marketing) for usage statistics without marketing cookies
- Email delivery for transactional and support messages
7. Retention
We keep account data while your account exists and longer where legal retention applies. Scan data and findings follow plan-dependent retention. You can revoke API keys at any time. Server logs are rotated or deleted on ordinary schedules.
8. Cookies and similar technologies
We use necessary cookies or comparable storage for session, authentication, and language preference. Without these, the service cannot be used securely. We do not currently set optional marketing cookies.
9. Your rights
Under the GDPR you may have rights of access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests, as well as the right to lodge a complaint with a supervisory authority. Contact info@noel.marketing for requests.
10. Requirement to provide data
Without a valid email address and the workspace data required for a given feature, we cannot provide account access, scans, or billing.
11. Changes
We update this policy when processing or legal requirements change. The current version is available under each language prefix, for example /en/privacy or /fr/privacy.