Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support. This may include:

• Name and email address
• Account credentials (encrypted)
• Payment information (processed securely through Stripe)
• Company name and business information
• Marketing materials and content you upload for compliance analysis
• Communications with our support team
• Usage data and analytics (pages visited, features used, time spent)
• Device information and IP addresses

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our compliance checking services and AI models
• Process transactions and send related information (invoices, confirmations)
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve our AI models, templates, and services
• Protect against fraudulent, unauthorized, or illegal activity
• Personalize your experience and recommend relevant features
• Send marketing communications (with your consent, where required)
• Comply with legal obligations and enforce our terms

3. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy:

Service Providers

We share information with third-party service providers who assist us in operating our platform, including:

• Stripe: Payment processing and subscription management
• Supabase: Database hosting and authentication
• Resend: Email delivery services
• Vercel: Application hosting and deployment
• AI Service Providers: Processing compliance analysis requests

These providers are bound by contractual obligations to keep your information confidential and use it only for the services they provide to us.

Other Disclosures

We may also share your information:

• With your consent or at your direction
• To comply with laws, regulations, court orders, or legal requests
• To protect our rights, property, or safety, or that of our users or others
• In connection with a business transaction such as a merger, acquisition, or sale of assets
• With law enforcement or regulatory authorities when required by law

4. Data Security

We take data security seriously and implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication measures (row-level security)
• Employee training on data protection and confidentiality
• Secure coding practices and regular security updates
• Monitoring and logging of suspicious activities

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Data is retained while your account is active
• After Cancellation: Account data may be retained for up to 90 days for recovery purposes
• Marketing Materials: Uploaded content is retained only as long as needed to provide compliance results
• Financial Records: Transaction records retained for 7 years for tax and legal compliance
• Support Communications: Retained for quality assurance and dispute resolution

After the retention period, we will securely delete or anonymize your personal information.

6. Your Rights and Choices

You have certain rights regarding your personal information, including:

Access and Correction

• Access to your personal information stored in your account
• Correction of inaccurate or incomplete information
• Update your account settings at any time

Data Portability

• Download your marketing assets and projects
• Export your account data in a machine-readable format

Deletion

• Request deletion of your personal information (subject to certain legal exceptions)
• Delete your account through account settings or by contacting support
• Note: Some information may be retained for legal or legitimate business purposes

Marketing Communications

• Opt out of marketing emails using the unsubscribe link in any email
• Update your email preferences in account settings
• You will continue to receive transactional emails (receipts, security alerts) even if you opt out of marketing

How to Exercise Your Rights

To exercise any of these rights, please contact us at gethelp@komplier.co. We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your use of our services. This helps us:

• Remember your preferences, settings, and login status
• Provide personalized content and features
• Analyze site traffic and usage patterns
• Improve our services and user experience
• Detect and prevent fraud or security issues

Types of Cookies We Use

• Essential Cookies: Required for the service to function (authentication, security)
• Performance Cookies: Help us understand how users interact with our service
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Collect aggregated usage statistics

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service.

8. Third-Party Services and Links

Our service may contain links to third-party websites or integrate with third-party services (such as Stripe for payments). We are not responsible for the privacy practices of these third parties.

We encourage you to review their privacy policies before providing them with any information. This Privacy Policy applies only to information collected by Komplier.

9. Children's Privacy

Our service is not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child, please contact us immediately at gethelp@komplier.co.

10. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, including the United States where our servers and service providers are located.

We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with our service providers
• Encryption and security measures during transfer and storage

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt out of the sale of your personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at gethelp@komplier.co. We will verify your identity before processing your request.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing your information includes: performance of our contract with you, compliance with legal obligations, your consent, and our legitimate interests in providing and improving our services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Effective Date" at the top of this policy
• Notify you via email if the changes significantly affect your rights
• Post the updated policy on our website
• Provide at least 30 days' notice for significant changes

Your continued use of our services after the updated policy becomes effective constitutes acceptance of the changes. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: