Privacy Policy

We collect information you provide directly when creating an account or using our service, including your name, email address, and organization information (such as facility name, license number, and location). We also collect usage data automatically — including pages visited, features used, session duration, device type, and IP address — to help us understand how the product is used and where we can improve.

We use the information we collect to:

• Operate, maintain, and improve the ComplyNest service
• Send compliance reminders, deadline alerts, and account notifications
• Process billing and manage your subscription
• Respond to support requests and troubleshoot issues
• Analyze aggregate usage patterns to improve product features

We do not use your data to train third-party AI models or for advertising purposes.

We do not sell your personal data. We share information only with the third-party service providers necessary to operate ComplyNest, including:

• Stripe — payment processing and subscription management
• Clerk — user authentication and identity management
• SendGrid — transactional email delivery

These providers are contractually bound to use your data only to provide services to us and may not use it for their own purposes. We may also disclose information when required by law or to protect the rights and safety of our users.

We retain your account data for as long as your account is active. If you cancel your subscription or close your account, we will delete your personal data within 30 days, unless we are required by law to retain it longer. You may request an export of your data at any time before deletion.

ComplyNest employs security practices aligned with SOC 2 Type II standards. All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. Access to production systems is restricted to authorized personnel and logged. We conduct regular security reviews and vulnerability assessments. While we take reasonable measures to protect your data, no system is completely secure, and we cannot guarantee absolute security.

You have the right to:

• Access the personal data we hold about you
• Request a portable export of your data
• Request correction of inaccurate information
• Request deletion of your account and associated data

To exercise any of these rights, contact us at privacy@getcomplynest.com. We will respond within 30 days.

ComplyNest uses essential cookies only — those required for authentication, session management, and security. We do not use third-party advertising cookies or tracking pixels. You may disable cookies in your browser settings, but doing so may prevent certain features from working correctly.

If you have questions or concerns about this Privacy Policy, please contact us at privacy@getcomplynest.com.