Privacy Policy

1. Data we collect

When you use ComplyraOne, we collect data that you or your organization provide, including:

• Account details (name, email address, authentication metadata).
• Organization information (name, country, settings).
• Company records and compliance obligations configured in the platform.
• Documents you upload to the document vault.
• Audit logs of key actions (for example, license changes, role updates, filings).

2. How we use your data

We use your data to:

• Provide and secure access to the ComplyraOne platform.
• Generate filing periods, reminders, and compliance insights.
• Support your organization through our support channels.
• Improve reliability, performance, and user experience.

We do not sell your data. Access to your tenant data is restricted to authorized team members within your organization and, where necessary, platform support operating under strict audit logging.

3. Data storage & security

ComplyraOne is built on Supabase (Postgres, Auth, and Storage) with Row Level Security (RLS) and organization-based access control. Documents are stored in a private bucket and are only accessible to members of your organization via signed access paths. Platform operators cannot directly browse your documents; any support access uses controlled flows with audit logging.

4. Data retention

We retain your data for as long as your organization maintains an account with ComplyraOne, and for a reasonable period thereafter for backup, audit, and legal purposes. License expiry places tenants in read-only mode but does not immediately delete data. You may request deletion of certain data subject to applicable legal and regulatory retention obligations.

5. Third-party services

We use third-party providers to operate ComplyraOne (for example, cloud hosting and email). These providers process data on our behalf under contractual obligations and do not have permission to use your data for their own purposes.

6. Your choices

• You can update account and company data directly in the platform.
• You can control which team members have access to your organization through the Team settings.
• You can contact us to request more information about data retention or to exercise applicable privacy rights.

7. Contact

For privacy questions, please contact privacy@complyra.com.