Privacy Policy

CommandMSP plays two distinct roles depending on the data involved. For account and billing information about our direct customers, and for general usage data about how the Service is used, CommandMSP acts as a data controller.

For information that a customer imports, uploads, or otherwise submits into the Service about its own clients, contacts, devices, and end users (“Customer Data”), the customer is the data controller and CommandMSP acts solely as a data processor, processing such data on the customer’s behalf and under its instructions. Customers are responsible for ensuring they have a lawful basis and any necessary consents to collect and submit Customer Data to the Service.

Account information. Name, email address, company name, role, login credentials, and billing details necessary to create and maintain your account.

Usage data. Log data, device and browser information, IP address, feature usage, performance metrics, and diagnostic data generated as you interact with the Service.

Customer Data. Information our customers import about their own clients, contacts, tickets, devices, financial records, and related records. CommandMSP does not control the categories of personal data customers choose to import.

Communications. Information you provide when you contact support, respond to surveys, or otherwise communicate with us.

We use the information we collect to provide, maintain, secure, and improve the Service; to authenticate users and prevent fraud; to process payments; to provide customer support; to communicate service-related notices; to comply with legal obligations; and to develop new features. We process Customer Data only as needed to deliver the Service and in accordance with the customer’s instructions.

We engage trusted third-party vendors (“sub-processors”) to host infrastructure, process payments, send communications, and provide analytics. These sub-processors process data only as necessary to perform services for us and are bound by confidentiality and data-protection obligations. A current list of sub-processors is available on request to support@commandmsp.com.

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure the Service, and understand how it is used. You can control cookies through your browser settings, though disabling certain cookies may affect functionality.

We retain account and usage information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained according to the customer’s configuration and is deleted or returned following termination as described in the applicable customer agreement, subject to legal retention requirements.

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict the processing of your personal data, and to object to certain processing. Where CommandMSP acts as a processor for Customer Data, requests from data subjects should be directed to the relevant customer (the controller). To exercise rights with respect to data for which CommandMSP is the controller, contact support@commandmsp.com.

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, and alteration. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Customers are responsible for safeguarding their account credentials and for configuring access controls appropriately within the Service.

The Service may integrate with third-party platforms at the customer’s direction. Information shared with those platforms is governed by their own privacy policies, and CommandMSP is not responsible for the practices of third parties. We encourage you to review the privacy terms of any integrated service.

Your information may be processed and stored in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers. [International transfer mechanism — to be specified.]

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy with a revised effective date or by other reasonable means. Continued use of the Service after changes take effect constitutes acceptance.

If you have questions about this Privacy Policy or our data practices, contact us at support@commandmsp.com.