Privacy Policy

This Privacy Policy describes how ComplianceDL, Inc. (“ComplianceDL,” “we,” “us,” or “our”) collects, uses, and discloses information about you when you use our websites, applications, and services (collectively, the “Services”). By using the Services, you agree to the practices described in this policy.

1. Information we collect

We collect information in the following ways:

• Information you provide. This includes details you submit when requesting a demo, contacting us, or creating an account, such as your name, work email, company, and role.
• Information from your use of the Services. We collect usage data, device and browser information, and log data to operate, secure, and improve the Services.
• Information from connected systems. When you connect third-party systems to the platform, we access configuration and compliance evidence using the read-only, least-privilege permissions you grant.

2. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Services;
• Respond to inquiries and provide customer support;
• Monitor and secure the Services against fraud and abuse;
• Communicate with you about products, features, and updates; and
• Comply with legal obligations.

3. How we share information

We do not sell your personal information. We may share information with service providers who process data on our behalf, with your consent, in connection with a corporate transaction, or where required by law. Service providers are bound by contractual obligations to protect your information and use it only for the purposes we specify.

4. Data retention

We retain personal information for as long as necessary to provide the Services and for legitimate business or legal purposes. When information is no longer needed, we delete or de-identify it in accordance with our retention schedules.

5. Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. Data is encrypted in transit and at rest, and access is restricted on a least-privilege basis.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the details below. We will respond within the timeframes required by applicable law.

7. International transfers

We may process and store information in countries other than your own. Where we transfer personal information across borders, we use appropriate safeguards consistent with applicable data protection laws.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice.

9. Contact us

If you have questions about this Privacy Policy or our data practices, please reach out through our contact page.