Terms of Service & DPA

These Terms of Service govern your access to and use of Commission Sync. By creating an account, you agree to be bound by these terms.

1. Acceptable Use

You may only embed the Commission Sync widget on domains that you own or have explicit authorization to monetize. You agree not to manipulate click tracking, bypass rate limits, or attempt to reverse-engineer the LangGraph semantic routing engine.

2. Subscriptions and Billing (Stripe)

Services are billed on a subscription basis. By selecting a Pro or Agency tier, you authorize Stripe to charge your provided payment method on a recurring basis. Downgrading your plan may result in the loss of features, capacity, or routing volume.

3. Data Processing Agreement (DPA)

To comply with UK GDPR and global privacy standards, this section serves as the Data Processing Agreement between the Creator (Data Controller) and Pixel on Pixels (Data Processor).

• Scope: The Processor will only process hashed end-user IP data for the specific purpose of providing rate limiting and widget security as outlined in the Privacy Policy.
• Sub-processors: The Controller authorizes the Processor to utilize Upstash (Redis) for volatile memory rate limiting and MongoDB Atlas for encrypted storage of Creator configurations.
• Data Subject Rights: Because the Processor immediately pseudonymises IP addresses via one-way hashing and retains them for a maximum of 60 minutes, it is cryptographically impossible to retrieve a specific user's data to fulfill a Subject Access Request (SAR). The Controller acknowledges this technical limitation represents standard data minimization best practices.