1. Who we are
CompliAgency (“we”, “us”) is the controller of the personal data you provide when you create an account and use the Service. If you have questions, contact support@compliagency.com.
2. Information we collect
- Account data: your name, email address, and agency profile details.
- Customer Content: the client, vendor, and compliance information you enter to generate documents and run the Service.
- Billing data: processed by our payment provider, Paddle. We receive limited transaction details (such as plan, status, and country) but not full card numbers.
- Usage and device data: log data, IP address, browser type, and actions taken in the app, used to operate and secure the Service.
3. How we use your data
- to provide, maintain, and improve the Service;
- to process subscriptions and billing through Paddle;
- to generate the documents and outputs you request;
- to send service, security, and account communications;
- to detect, prevent, and address fraud, abuse, or technical issues; and
- to comply with legal obligations.
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where required, such as certain cookies), and legal obligation.
5. Service providers (sub-processors)
We use trusted providers to run the Service, including:
- Supabase — database, authentication, and file storage.
- Vercel — application hosting.
- Paddle — payment processing and Merchant of Record.
- OpenAI — AI-assisted classification of regulatory updates.
These providers process data on our behalf under appropriate agreements and safeguards.
6. Cookies
Our website uses essential cookies required for sign-in and security. We use non-essential cookies (such as analytics) only where permitted, and where required, with your consent.
7. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account data as described below.
8. International transfers
Your data may be processed in countries other than your own. Where required, we and our providers rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@compliagency.com. You may also have the right to complain to your local data protection authority.
10. Security
We use industry-standard measures, including encryption in transit and access controls, to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.
11. Children
The Service is intended for businesses and is not directed to children under 18.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, where appropriate, notify you of material changes.