Privacy Policy

Scope

This policy applies to information submitted through the CompliSense-AI website, direct demo requests, and business communications initiated through the public contact channels.

Information We Collect

We may collect names, work email addresses, company names, and the contents of messages submitted through demo requests or support inquiries. We may also collect routine technical information such as browser metadata, referral data, and basic website analytics necessary to operate and improve the site.

How We Use Information

• Respond to demo requests, support inquiries, and commercial discussions.
• Operate, secure, and improve the public website and related communications.
• Understand demand for product features, workflows, and positioning.
• Maintain business records related to website-originated communications.

Sharing and Disclosure

We do not sell personal information submitted through the public website. Information may be shared with service providers involved in website hosting, analytics, communications, or infrastructure operations where reasonably necessary to run the business.

The Hosted App: What We Collect From You

This section covers app.complisenseai.com specifically — dogfooded from the same template our platform generates for customers' own privacy notices, because we hold ourselves to the standard we sell.

• Account data — your name, work email, company name, and a hashed (never plaintext) password, collected when you register.
• Readiness and questionnaire answers — what you tell our readiness check and scope check about your organisation. Anonymous answers are never stored; signed-in answers are stored only if you tick the explicit consent box offered at that point.
• Generated and uploaded documents — compliance documents you generate or approve, and any artefacts you connect a source to or upload for assessment.
• Lead and contact emails — if you request a demo or email support, we keep that correspondence to respond to you and for our own records.
• Usage and audit logs — the actions you take in the app (scans run, documents approved), kept for security and to show you your own history.

Why, and Who Else Sees It

We use this data to operate your account, score your readiness, generate and store your documents, and respond when you contact us. Where you explicitly consent to it (a visible checkbox before the request is sent), a document draft may be sent to Anthropic's Claude API to help write it — never your raw personal data, only the cited rule and the confirmed facts needed. Our infrastructure runs on Render and MongoDB Atlas as our hosting sub-processors. See our DPA for the full sub-processor list and the terms on which we handle data you hold as a Data Fiduciary.

Retention

We keep account, questionnaire and document data for as long as your account is active, and for a reasonable period after closure to meet legal and accounting obligations. Lead emails from the public website are retained per our published retention window and can be deleted early on request.

Data Rights and Contact

To request access, correction, or deletion of information provided through the website or the app, contact us below. We will review requests in line with applicable law and reasonable business recordkeeping needs. Our Grievance Officer / privacy contact is reachable at the email address below and aims to respond within the period our own product tells customers to commit to.