Skip to content
complianceofficer

Privacy policy

Effective 9 July 2026. This policy covers complianceofficer.ai while the product is in early access.

Who we are

Complianceofficer is built and operated by ComplianceOfficer. For anything in this policy, write to [email protected].

What we collect, and when

Early-access signup. If you request access we store your email address, the moment you confirmed it, the page the request came from, marketing parameters in the address bar (utm tags and referrer), and the IP address of the confirming request. We use this to run the early-access list, measure which pages convert, and email you about your spot. Nothing else is done with it and it is never sold or shared for advertising.

The compliance scan. The industry, framework and region selections you make in the demo are used to generate your result and are not stored: they are not written to a database and not recorded in application logs (failure logs carry counts only). Generating the result sends your selections, never your identity, to Google's Gemini API; Google's API terms govern that processing. Results render in your browser and are gone when you close the page.

Analytics. We use aggregate, page-level analytics to see what gets read. Before launch we plan to add a Microsoft (Bing) UET tag for measuring signups from campaigns; this policy will name every such tag in use.

What we do not do

  • No selling or renting of personal data, to anyone, ever.
  • No advertising profiles built from your usage.
  • No storage of demo inputs, as described above.
  • No payment data: nothing is on sale yet, so none is collected.

Your rights

Email [email protected] and we will show you what we hold about you, correct it, or delete it, including removing you from the early-access list, within 30 days. If you are in the EU/UK, GDPR gives you these rights formally; we honor them for everyone.

Retention and security

Early-access list data is kept until launch plus twelve months, or until you ask us to delete it, whichever comes first. It lives on access-controlled infrastructure in the EU, transmitted only over TLS.

Changes

If this policy changes materially before launch, everyone on the early-access list gets the diff by email, in plain language.