Legal
Privacy
Effective July 19, 2026 · Written in plain language.
ComplianceGPSexists to turn your documents into cited answers — not to collect your data. This page explains, in plain language, what we hold, what we never do with it, and the choices you have.
What we collect
- Account details — your name, email, and organization, so we can sign you in and bill you.
- Documents you upload — the statutes, rules, and policy manuals you choose to add to your workspace.
- Your questions and their cited answers — kept as your compliance record and to meter usage.
- Billing details — handled by our payment processor. We never see or store your full card number.
- Basic technical data — the minimum needed to keep the service secure and running.
What we never do
- Your data is never used to train AI models — yours or anyone else’s.
- If you connect your own AI key (BYOK), it is encrypted and never logged.
- We do not sell your data, and we do not share it for advertising.
- One organization can never see another’s data — isolation is enforced at the database, on every request.
How we use your data
Only to provide the service: to answer your questions from your documents, keep your audit record, meter usage against your plan, secure your account, and handle billing. We do not use it for anything else.
Who we share it with
We rely on a small set of vendors strictly to run the product — cloud hosting and database, our payment processor for billing, our email provider for sign-in and notifications, and the AI provider that generates answers (under a no-training arrangement). Each handles only what it needs to. We do not sell or rent your data to anyone.
How we protect it
Data is encrypted at rest, uploaded files live in a private store reachable only through short-lived signed links, and tenant isolation is enforced by the database and tested on every change. The full list of invariants is on our security page.
How long we keep it
Your documents and records stay until you delete them or close your account. We keep your question-and-answer log as your compliance audit trail and for usage metering. When you ask us to delete your data, we do — email us at support@compliancegps.com.
Your choices
You can access, export, correct, or delete your data at any time. Reach us at support@compliancegps.comand we’ll take care of it.
Cookies
We use only the essential cookies needed to keep you signed in and the service secure. We do not run advertising trackers.
Changes to this policy
If we change how we handle your data, we’ll update this page and its effective date. For material changes we’ll give you reasonable notice.
Contact
Questions about privacy? Email support@compliancegps.com.