Privacy Policy

1. Overview

Gordon ("we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using Gordon at trygordon.io, you agree to the practices described here.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address and password (administrators)
• Company or organization name
• Rep names and email addresses you add to your team

Sales and Commission Data

To provide the Service, we store data you enter including:

• Sales activities (meetings, deals, deal values, close dates)
• Compensation plan configurations (quotas, commission rates, tiers)
• Quota attainment and commission calculations
• CRM links and notes you choose to attach

Usage Data

We collect standard log data when you use the Service, including IP addresses, browser type, pages visited, and timestamps. This helps us maintain service reliability and improve the product.

Marketing Site Analytics

On our public marketing pages (trygordon.io and the "/for-reps", "/for-leaders", and "/about" routes), we use Apollo.io and RB2B to understand which companies are visiting our site so we can prioritize follow-up. Both use cookies and IP-based identification to match anonymous visitors against business databases; neither identifies you personally. This analytics is not loaded inside the logged-in product (no admin or rep dashboard pages run third-party tracking). See "Your Choices" below to opt out.

3. How We Use Your Information

• Provide the Service — store and display your commission and activity data
• Process payments — handle billing via Stripe
• Send transactional emails — rep invite links, password resets, billing receipts
• Power AI features — your data may be sent to Anthropic's API to answer questions you ask in the AI Insights chat. We do not use your data to train AI models.
• Improve the product — analyze aggregated, anonymized usage patterns
• Sales and marketing — identify which companies visit our marketing site so we can reach out about Gordon
• Comply with legal obligations — respond to lawful requests from authorities

4. Third-Party Services

We use the following trusted third-party providers to operate the Service. Each has their own privacy practices:

We do not sell your personal information to any third party.

5. Data Storage and Security

Your data is stored in Supabase's managed cloud infrastructure. We implement industry-standard security measures including:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Encrypted storage at rest
• Row-level security to ensure organizations can only access their own data
• Access controls limiting which team members can see sensitive information

No system is completely secure. If you believe your account has been compromised, contact us immediately at hello@trygordon.io.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days, after which it may be permanently deleted from our systems. You can request an export of your data at any time by contacting support.

7. Cookies and Tracking

Gordon uses two categories of cookies and similar technologies:

• Essential — authentication and session management inside the logged-in product. These are required for the Service to function and cannot be disabled.
• Marketing analytics — on our public marketing pages only, we load the Apollo.io and RB2B visitor-tracking scripts to identify visiting companies. We do not run advertising cookies, retargeting pixels, or behavioral profiling.

Neither tracker is loaded on the admin app or rep dashboard pages, so logged-in customer use of Gordon is not tracked by third parties.

8. Your Choices

You can opt out of marketing-site analytics in any of these ways:

• Enable "Do Not Track" or Global Privacy Control (GPC) in your browser settings.
• Use a browser extension that blocks third-party trackers (uBlock Origin, Privacy Badger, etc.).
• Submit a data subject request directly to Apollo at apollo.io/privacy-policy or to RB2B at rb2b.com/privacy-policy.
• Email us at hello@trygordon.io and we will exclude your IP / domain from our Apollo and RB2B workspaces.

Opting out of marketing analytics has no effect on your ability to use the product.

9. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at hello@trygordon.io. We will respond within 30 days.

10. Children's Privacy

Gordon is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by posting a notice in the Service. The "last updated" date at the top of this page will always reflect the most recent revision.

12. Contact Us

If you have any questions or concerns about this privacy policy or how we handle your data, please reach out at hello@trygordon.io.