Privacy Policy
Effective 2026-11-05
CommRows turns insurance commission PDFs into spreadsheets. It is built so that your statements stay in your browser. This policy explains what that means, and what we do receive.
The short version
- Your statements, the rows taken from them and your edits are processed in your browser. They are not sent to our server or to an AI service.
- There are no user accounts. Our order records do not contain your name or email address.
- Stripe handles payment on its own page. We never receive your full card number.
- We count anonymous usage steps ourselves. We also use Google Analytics to see how visitors find the site. It stops when you choose a statement, and you can decline it. We use no advertising cookies, and we do not sell personal information.
Who we are
CommRows is operated by Grainpeak LLC, 30 N Gould St, Suite # 29375, Sheridan, WY 82801, USA. You can reach us at support@commrows.com.
What stays on your device
PDF statements, companion CSV text, policy records, corrections, column mappings, checks and generated files are processed in your browser. Work is kept in memory by default, so closing or refreshing the page loses it. Two features can store it on your device, and neither sends it to us:
- Local saving keeps one batch in this browser, if you turn it on.
- Checkout copies let you return to your batch from Stripe, and paying requires one. A copy includes your PDFs, edits and purchase recovery code. Up to 5 recent copies are kept.
Both expire after 24 hours and are removed the next time you open CommRows. Until then they stay on this device, so use a device you trust.
Your statements can contain client information. You remain responsible for how you handle them and the files you download.
What we receive
| Information | What it is | Why |
|---|---|---|
| Order details | A random batch identifier, a salted fingerprint of your source files, processing versions, price, currency, order status, dates and a hash of your recovery code. The fingerprint cannot be turned back into a file. | To create your order, confirm payment and restore access. |
| Payment references | Stripe session, payment and charge identifiers, amounts, and refund and dispute status. | To confirm payment and apply refunds and disputes. |
| Usage counts | The step reached and when, whether the sample was used, the error type if a step failed, the file format, where a price was shown, the campaign tag in the link you followed, your approximate country, whether the visit was automated or our own, and a random number that links the steps of one page load. | To tell whether the tool works and where people get stuck. |
| Network information | Your IP address and standard request details reach our hosting provider when you visit. We use your IP address to limit abuse, and store it only as a short-lived hash. | To deliver the site and protect it. |
| Messages to us | Your email address and whatever you write, if you contact us. | To answer you and handle refunds. |
We do not receive statement content, file names, client names, policy numbers or commission amounts. If you ever choose to send us part of a statement, for example for a refund, we use it only for that request.
Who else is involved
- Stripe processes payments on its hosted checkout page and collects your payment details and email address there. Your order ID is attached to the payment, so the two can be matched. As the merchant we can see payment details in our Stripe account. When our server checks a payment, Stripe's response can include those details. We use the payment status and amounts and do not store the rest. Stripe may use its own cookies. See the Stripe Privacy Policy.
- Cloudflare hosts the site and our order database, and handles network traffic. See the Cloudflare Privacy Policy.
- Google Analytics shows us how visitors reach the site. It receives the page and campaign tag, the site you came from, your approximate location, your device and browser, and a few actions such as opening pricing, and it sets cookies to recognize a returning browser. It runs on the home page only, and it stops when you choose a statement or the sample, so it never receives statement content or file names. It does not run on our legal pages or when you return from checkout. We turn off Google signals and ad personalization. Visitors in the EU, EEA, UK and Switzerland, and visitors whose location we cannot determine, are asked first. See the Google Privacy Policy and how Google uses information from sites that use its services.
We may also disclose information if the law requires it, to protect our rights or users, or as part of a sale or transfer of the business. We do not sell personal information, and we do not share it for targeted advertising.
Cookies and browser storage
CommRows loads no advertising scripts. Unless you decline it, Google Analytics sets the cookies listed below. Our hosting provider may use a strictly necessary security cookie. We use cookies and browser storage as follows:
| Stored in your browser | Purpose | How long |
|---|---|---|
Google Analytics cookies (_ga and _ga_ followed by an ID) | Tell returning browsers apart and keep the pages of one visit together. | Up to 2 years, and deleted if you decline. Your browser may remove them sooner. |
| Analytics choice | Remembers whether you allowed or declined Google Analytics. | Until you clear site data. |
| Notice setting | Remembers that you dismissed the storage notice. | Until you clear site data or the notice changes. |
| Purchase details | Your order and recovery code, so this tab can recover a purchase. | Until the tab closes. |
| Saved batch | Local saving, if you turn it on. | Expires after 24 hours. Removed the next time you open CommRows. |
| Checkout copies | Your PDFs, edits and recovery code, so you can return from Stripe. | Up to 5 copies. Each expires after 24 hours and is removed the next time you open CommRows. |
| Owner visit marker | Marks a browser as ours, so our own visits are left out of usage counts. It is set only by opening a link containing internal=1. | Until you clear site data. |
How long we keep information
| Information | How long |
|---|---|
| Usage records | 7 days. After that only combined daily totals remain, with no link to a page load. |
| Daily totals | Until the current beta review is complete, when we delete them by hand. We keep the summary report from that review. |
| Abuse-limit hashes | A few minutes. |
| Google Analytics data | Up to 14 months, set in our Google Analytics account. |
| Order details and payment references, including unpaid orders | As long as we need them for accounting, tax, refunds and disputes. |
| Messages to us | As long as we need them to resolve your request. |
Your choices
- You can use the free tool without paying, and without giving us any contact details.
- You can decline Google Analytics in the cookie notice, which you can reopen from the footer of the tool.
- You can delete saved batches and checkout copies in the tool, or clear this site's data in your browser. Your browser may also clear it.
- To review, correct or delete information we hold about you, contact us at support@commrows.com. Our order records do not contain your name, so include your order ID. We may keep what the law requires us to keep.
Depending on where you live, you may have other privacy rights. We will respond to requests as the law requires.
Do Not Track disclosure
CommRows does not change its behavior in response to Do Not Track signals. If your browser sends a Global Privacy Control signal, we do not load Google Analytics. We do not track you across other websites. Stripe, Cloudflare and Google may collect information about you as described above, under their own policies.
Security
The site uses HTTPS and a strict content security policy, and we store your recovery code only as a hash. No system is perfectly secure. Use CommRows on a device you trust, and keep your recovery code private.
Where information is processed
Our order database is hosted in North America. Cloudflare, Stripe and Google operate internationally and may process information in other countries.
Children
CommRows is a business tool. It is not directed to children, and we do not knowingly collect information from children under 13.
Changes to this policy
If we change this policy, we will update it here and change the effective date. If a change is significant, we will say so on the site.
Contact
Questions about this policy can go to support@commrows.com.