Privacy Policy
CommissionsIQ – Powered by LoanX Effective Date: 20 July 2026 Last Updated: 24 July 2026
1. Introduction
Welcome to CommissionsIQ, commission tracking and reconciliation software designed specifically for Australian mortgage brokers and financial professionals (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
CommissionsIQ is operated by LoanX Solutions Pty Ltd (ABN: 36 684 087 965) with our registered office at 402/7 Maitland Place, Norwest NSW 2153, Australia.
Important: This platform is designed for business use by mortgage brokers and financial professionals. We are committed to protecting the privacy and confidentiality of your data and the data of your clients.
2. Information We Collect
2.1 Account Information
When you register for CommissionsIQ, we collect:
- Full name
- Email address
- Phone number
- Business name and ABN/ACN
- Job title and role
- Australian Credit Licence (ACL) number (if applicable)
- Aggregator affiliation
- Business address
2.2 Client Portfolio Data
To provide our services, you may upload:
- Client names
- Loan details (amounts, settlement dates, lenders)
- Commission information (upfront and trail amounts)
- Document metadata (file names, upload dates)
Note: You are responsible for obtaining appropriate consent from your clients before uploading their personal information to our platform.
2.3 Commission Data
We may collect and process:
- Commission statements you upload and the reconciliations derived from them
- Clawback notifications
- Settlement confirmations
2.4 Technical Information
We automatically collect:
- IP addresses and device identifiers
- Browser type and version
- Operating system
- Access times and pages viewed
- Location data (country/state level)
- Cookies and similar technologies
2.5 Usage Data
We collect information about how you use CommissionsIQ:
- Features accessed and frequency of use
- Search queries and filters applied
- Dashboard configurations
- Error logs and crash reports
2.6 Communications
We retain records of:
- Support tickets and inquiries
- Feedback and survey responses
- Email communications
- In-app messages
3. How We Use Your Information
3.1 Primary Purposes
We use your information to:
- Provide access to the CommissionsIQ platform and services
- Process and track commission payments
- Monitor loan portfolios and settlements
- Identify clawback risks and opportunities
- Generate analytics and insights
- Facilitate client management tools
3.2 Secondary Purposes
We may also use your information to:
- Improve platform functionality and user experience
- Develop new features and services
- Provide customer support and respond to inquiries
- Send important service updates and notifications
- Conduct research and analytics (aggregated and de-identified)
- Detect and prevent fraud and unauthorised access
- Comply with legal and regulatory obligations
- Enforce our Terms of Service
3.3 Marketing Communications
With your consent, we may send you product updates, educational content, industry news and offers. You can opt out at any time by clicking “unsubscribe” in our emails or contacting us.
4. Information Sharing and Disclosure
4.1 We DO NOT Sell Your Data
We never sell, rent, or trade your personal information or client data to third parties for marketing purposes.
4.2 Service Providers
We share data with third-party service providers who assist us in operating the platform — including our cloud hosting provider, Amazon Web Services (AWS), in Australia. All service providers are bound by confidentiality agreements and data protection clauses.
4.3 Booking a Demo (Calendly)
When you book a demonstration through our website, that booking is handled by Calendly, a third-party scheduling service hosted in the United States. If you book, the information you enter on the booking form — such as your name, email address, and answers to our booking questions (your aggregator and years broking) — is collected and processed by Calendly on our behalf to schedule and manage your appointment. Calendly may also set cookies and collect technical information (such as your IP address and browser details) as described in its own privacy policy. Because Calendly is hosted in the United States, your information may be transferred to, and stored on, servers outside Australia. We use this information only to arrange and conduct your demonstration and to follow up with you about it. You can find Calendly’s privacy practices at calendly.com/privacy.
4.4 Website Analytics (Google and Microsoft)
We use third-party analytics services on our public website to understand how visitors find and use it. These services do not have access to the CommissionsIQ platform itself or to any commission or client data you upload.
Google Analytics and Google Tag Manager. We use Google Tag Manager to load Google Analytics 4, operated by Google. These services collect technical and usage information such as your IP address, browser and device details, the pages you view, how you arrived at our site, and interactions with page features (for example, using the commission calculator or selecting a call-to-action). This information is collected using cookies and similar technologies. We have configured our analytics not to record the values you enter into the commission calculator — only that a feature was used.
Microsoft Clarity. We use Microsoft Clarity, operated by Microsoft, to understand how visitors interact with our pages through aggregated usage metrics, heatmaps and session replay. Clarity may record mouse movements, scrolling, clicks and page interactions, together with technical information such as your IP address, browser and device details.
Cross-border disclosure. Google and Microsoft are global providers, and information collected by these services may be transferred to, stored and processed on servers outside Australia, including in the United States.
Your choices. You can control cookies through your browser settings, opt out of Google Analytics using Google’s opt-out browser add-on, and use your browser’s “Do Not Track” or equivalent privacy settings. You can review these providers’ own privacy practices at Google’s privacy policy and Microsoft’s privacy statement.
4.5 Legal Requirements
We may disclose information when required by law:
- Court orders or subpoenas
- Australian Securities and Investments Commission (ASIC) inquiries
- Australian Transaction Reports and Analysis Centre (AUSTRAC) requirements
- Law enforcement investigations
- Protection of legal rights and safety
4.6 Business Transfers
If LoanX is acquired, merged, or undergoes restructuring, your information may be transferred to the new entity. You will be notified of any such change.
5. Data Security
5.1 Technical Safeguards
We implement the following security measures:
- Encryption: AES-256 encryption at rest, TLS 1.3 in transit
- Access Controls: Role-based access control (RBAC)
- Authentication: Multi-factor authentication (MFA)
- Activity Records: Complete activity tracking and audit trail
- Backups: Daily encrypted backups with point-in-time recovery
5.2 Your Responsibility
You are responsible for:
- Maintaining confidentiality of your login credentials
- Enabling MFA on your account
- Promptly reporting suspected security breaches
- Ensuring your devices and networks are secure
- Obtaining client consent before uploading their data
6. Data Retention
6.1 Active Account Data
We retain your data while your account is active and for legitimate business purposes.
6.2 Retention Periods
- Account Information: Duration of subscription + 7 years (ATO requirements)
- Client Portfolio Data: Duration of subscription + 7 years
- Commission Records: 7 years from date of transaction (tax compliance)
- Support Communications: 3 years from last interaction
- Usage Logs: 12 months (security and analytics)
- Backup Data: 90 days rolling retention
6.3 Legal Hold
We may retain data longer if required by legal proceedings, investigations, or regulatory requirements.
6.4 Account Deletion
Upon account cancellation, you may request data deletion. We will:
- Delete or anonymise your data within 30 days
- Retain certain records for 7 years as required by Australian law
- Provide you with a copy of your data before deletion (upon request)
7. Your Privacy Rights
7.1 Access and Correction (APP 12 & 13)
You have the right to:
- Access your personal information we hold
- Request correction of inaccurate or outdated information
- Receive a copy of your data (provided as a CSV export on request)
How to exercise: contact us with your request. We will respond within 30 days.
7.2 Data Portability
Need your data out? Contact us and we’ll provide a CSV export.
7.3 Deletion Requests
You may request deletion of:
- Specific client records
- Historical data older than required retention periods
- Your entire account and all associated data
Important: Some data must be retained for 7 years under Australian law (see section 6.2).
7.4 Objection and Restriction
You can:
- Opt out of marketing communications
- Restrict data processing for specific purposes
7.5 Lodge a Complaint
If you’re not satisfied with our privacy practices:
- Contact us marked for the attention of the Privacy Officer
- We will investigate and respond within 30 days
- If unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) — Phone: 1300 363 992 · Website: www.oaic.gov.au · Email: enquiries@oaic.gov.au
8. Data Storage
Your data is hosted in Australia on AWS infrastructure. Where any service provider processes data outside Australia, we ensure the transfer complies with APP 8 and includes appropriate safeguards.
9. Cookies
We use essential cookies required for platform functionality (login, session management), preference cookies that remember your settings, and security cookies that help detect fraudulent activity. On our public website we also use analytics cookies and similar technologies set by the third-party services described in section 4.4. You can control cookies via your browser settings; disabling essential cookies may impair platform functionality.
10. Children’s Privacy
CommissionsIQ is designed for business use by licensed mortgage brokers and financial professionals. We do not knowingly collect information from individuals under 18 years of age. If we discover we’ve collected data from a minor, we will delete it immediately.
11. Third-Party Links
CommissionsIQ may contain links to third-party websites, including lender websites and educational resources. We are not responsible for the privacy practices of third-party websites. Please review their privacy policies before sharing information.
12. AI Features and Automated Processing
CommissionsIQ uses an AI model to generate annualised commission projections from your own portfolio data. Projections are guidance only — you remain responsible for all business decisions. Your data is never shared with other users or used to build models for other accounts.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legal requirements, new platform features, industry best practice or user feedback. We will notify you of material changes via email to your registered address, an in-app notice, or an announcement on our website. Your continued use of CommissionsIQ after changes take effect constitutes acceptance of the updated Privacy Policy.
14. Contact Us
LoanX Solutions Pty Ltd — Privacy Officer Contact: via our contact page, marked for the attention of the Privacy Officer Address: 402/7 Maitland Place, Norwest NSW 2153, Australia
Office of the Australian Information Commissioner Phone: 1300 363 992 · Website: www.oaic.gov.au · Email: enquiries@oaic.gov.au
15. Definitions
- Personal Information: Information that identifies or could identify an individual
- Client Data: Information about your clients that you upload to CommissionsIQ
- Processing: Any operation performed on data (collection, storage, use, disclosure, deletion)
- Data Controller: LoanX Solutions Pty Ltd (determines purposes and means of processing)
- Data Processor: Third-party service providers who process data on our behalf
- APP: Australian Privacy Principles under the Privacy Act 1988
16. Record-Keeping Support
CommissionsIQ maintains retrievable commission records and audit trails that can support your own record-keeping practices. CommissionsIQ does not discharge your obligations under the National Consumer Credit Protection Act or your Australian Credit Licence — those remain yours, and this platform is not a substitute for your compliance framework.
17. Data Breach Notification
In the event of a data breach that is likely to result in serious harm, we will:
- Notify affected users promptly
- Report to the OAIC as required by the Notifiable Data Breaches (NDB) scheme
- Provide clear information about the breach and remediation steps
- Offer support and assistance
If you suspect your account has been compromised: change your password immediately, ensure MFA is enabled, contact us, and review your account activity.
Acknowledgment
By using CommissionsIQ, you acknowledge that you have read, understood, and agree to this Privacy Policy. You confirm that you have appropriate authority and consent to upload client data to our platform.
Last Updated: 24 July 2026 Version: 2.0