Privacy Policy

1. Introduction

CompliOne ("we", "our", "us") provides privacy and consent management tools. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform ("the Service").

3. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, organization name, and encrypted password
• Usage Data: Information about how you use the Service, including IP addresses, browser type, and access times
• Cookies: Essential cookies for Service operation. For details, see our Cookie Policy
• Project and Domain Data: Information about the projects and domains you manage through the Service

4. How We Use Your Information

We use your information for the following purposes:

• Providing and maintaining the Service
• Improving features and user experience
• Security and fraud detection
• Legal and regulatory compliance
• Communicating with you about your account and the Service

5. Data Storage and Security

We take comprehensive measures to protect your data:

• Full regional data isolation - EU (europe-west3) and US
• Encryption in transit (TLS) and at rest
• Managed Cloud SQL PostgreSQL databases
• Regular automated backups
• Access controls and audit logs

6. Data Sharing

7. Your Rights

Under applicable privacy laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Object to Processing: Object to the processing of your personal data in certain circumstances
• Withdraw Consent: Withdraw your consent to data processing at any time

To exercise your rights, please contact us at Contact privacy team.

8. Cookies

We use essential cookies only to operate the Service. We do not use analytics cookies by default, in keeping with our privacy-first approach.

For full details about our cookies, see our Cookie Policy.

9. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. Upon request to delete your account, all your personal data will be deleted within 30 days, except for information we are required to retain by law.

10. International Transfers

Your data is stored in the EU (europe-west3) or the US, based on your selection during registration. When international data transfers are required, we ensure appropriate safeguards through Standard Contractual Clauses (SCCs) and additional protective measures in accordance with GDPR requirements.

11. Children's Privacy

Our Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email to the address associated with your account. Your continued use of the Service after material changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us:

• Privacy: Contact privacy team
• Support: Contact support
• Data Protection Officer (DPO): Contact DPO