Privacy Policy

1. Information We Collect

When you use our policy generator service, we collect the following information:

Business Information

• Company name and contact details
• Compliance officer information (name, title, contact information)
• Business services and operations details
• Compliance tool and system information
• Policy configuration preferences

Payment Information

Payment processing is handled securely by Stripe. We do not store your credit card information on our servers. Stripe collects and processes payment data according to their privacy policy.

Technical Information

• IP address and browser type
• Pages visited and actions taken
• Session data and timestamps

2. How We Use Your Information

We use the information you provide to:

• Generate customized compliance policy documents for your business
• Process your payment and deliver your purchased policies
• Send order confirmations and download links
• Provide customer support and respond to inquiries
• Improve our service and user experience
• Comply with legal obligations and prevent fraud

3. Third-Party Services

We work with the following third-party service providers:

Stripe (Payment Processing)

All payment transactions are processed through Stripe, a PCI-compliant payment processor. Stripe handles all sensitive payment information according to industry standards. We never see or store your full credit card details.

Supabase (Data Storage)

Your business information and generated policies are stored securely on Supabase, a cloud database platform. Supabase employs industry-standard encryption and security measures to protect your data.

These third-party providers are contractually obligated to protect your information and use it only for the purposes we specify.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• All data transmission is encrypted using SSL/TLS
• Access to your information is restricted to authorized personnel only
• We use secure, industry-standard cloud infrastructure
• Regular security assessments and updates
• Secure authentication and access controls

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to:

• Provide you access to your purchased policies
• Comply with legal and accounting requirements
• Resolve disputes and enforce our agreements

Your generated policy files remain available for download indefinitely after purchase. Business information is retained for accounting and legal compliance purposes.

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request corrections to inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Data Portability: Request a copy of your data in a machine-readable format
• Object: Object to certain processing of your information

To exercise these rights, please contact us at compliance@complynorth.com.

7. Sharing Your Information

We do not sell, rent, or trade your personal information. We only share your information:

• With third-party service providers necessary to deliver our service (Stripe, Supabase)
• When required by law or to protect our legal rights
• With your explicit consent
• In connection with a business transfer or acquisition (with notice to you)

8. Cookies and Tracking

We use essential cookies and session data to:

• Maintain your session as you complete the form
• Remember your selections during the policy creation process
• Ensure secure payment processing
• Analyze site performance and user experience

9. Children's Privacy

Our service is intended for business use only and not directed at individuals under the age of 18. We do not knowingly collect information from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date. Your continued use of our service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your information:

Email: compliance@complynorth.com
Website: complynorth.com

12. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal privacy laws of Canada, including the Personal Information Protection and Electronic Documents Act (PIPEDA).