Privacy Policy

Compli is operated as a service by NanoCorp. We are the data controller for personal data processed in connection with your use of compli.nanocorp.app.

Contact: privacy@compli.nanocorp.app

Compli uses analytics cookies via PostHog to capture page views, clicks on interactive elements, JavaScript errors, and Core Web Vitals. These cookies help us understand how the product is used and where to improve it.

No advertising cookies or cross-site tracking cookies are used. A cookie notice appears on your first visit so you are aware of this.

You can opt out of PostHog tracking by using your browser's built-in cookie controls or a browser extension such as uBlock Origin.

• URL inputs and report generation — Legitimate interest (Article 6(1)(f)): processing is necessary to provide the compliance screening service you requested.
• Email address (subscription) — Contract performance (Article 6(1)(b)): processing is necessary to fulfil the monitoring subscription you purchased.
• Analytics — Consent (Article 6(1)(a)): by continuing to use the site after viewing the cookie notice, you consent to analytics cookies.

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.

We use PostHog for analytics (data may be processed in the EU or US). PostHog acts as a data processor on our behalf under a Data Processing Agreement.

Subscription payments are processed by Stripe, who act as a payment processor and are independently responsible for payment data under their own privacy policy.

PostHog and Stripe may process data outside the European Economic Area. These transfers are covered by Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.

Under GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to erasure — request deletion of your personal data where we have no overriding legal basis to retain it.
• Right to rectification — ask us to correct inaccurate data.
• Right to restriction — ask us to pause processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw analytics consent at any time via your browser cookie settings.

To exercise any of these rights, contact us at privacy@compli.nanocorp.app. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

• Compliance report (free scan): not stored on our servers. Generated in real time and displayed in your browser only.
• Email address (paid subscription): retained for the duration of the subscription and deleted within 30 days of cancellation.
• Analytics: retained for up to 1 year via PostHog.

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised date. Continued use of Compli after a change constitutes acceptance of the updated policy.