Privacy notice

Last updated 1 August 2026

This notice explains what personal data Compliancy processes, why, and how long we keep it.

What we collect

Account data such as name, work email and organisation, provided when an account is created or a demo is requested.

Usage data about how the platform is used, for security, support and product improvement.

Content you upload, including policies, evidence and records that may contain personal data about your workforce.

Why we process it

To provide and secure the platform under our contract with your organisation.

To respond to enquiries and demo requests.

To meet legal obligations and defend legal claims.

Sharing

We share data with the subprocessors listed on our subprocessor page, each engaged under written terms. We do not sell personal data.

Retention

Account data is retained for the life of the subscription and a limited period afterwards. Customer content is deleted or returned according to the data processing agreement.

Your rights

Depending on where you live, you may have rights of access, correction, deletion, portability and objection. Contact privacy@compliancy.example.com. Where we process data on behalf of a customer, we direct requests to that customer.

This page is a summary of our current position. Contact legal@compliancy.example.com for the executed contractual documents that apply to your organisation.