ComplyBar is operated by 30A Technologies, LLC, a Wyoming limited liability company ("ComplyBar," "we," "us," or "our"). This Privacy Policy describes what information we collect, how we use it, and the choices you have.
What We Collect
ComplyBar collects information necessary to provide you with our service and improve your experience:
- Account Registration: When you create an account, we collect your name, email address, and organization name.
- Usage Analytics: We use PostHog to track how you interact with ComplyBar—which pages you visit, which features you use, and how long you spend on tasks. This helps us understand where to improve.
- Error and Performance Data: We use Sentry to capture error logs and performance metrics, including your IP address and browser information, to keep the service stable.
- Billing Data: Stripe processes and stores your payment information. We do not store full credit card numbers; Stripe handles all PCI compliance.
How We Use Your Data
We use the data you provide for the following purposes:
- Service Delivery: To authenticate your account, store your tasks and documents, and deliver the core close management features.
- Product Improvement: To understand which features are used most, identify bottlenecks, and decide what to build next.
- Transactional Email: To send you password resets, invitation links, task notifications, and billing updates. These are not marketing emails.
- Security Monitoring: To detect and prevent unauthorized access, fraud, and abuse of the platform.
Data Retention
We retain your account data (tasks, documents, settings) for as long as your organization is active. When you cancel your subscription or delete your organization, we retain your data for 90 days to allow recovery. After 90 days, all data is permanently deleted.
Analytics data (PostHog) and error logs (Sentry) are retained according to their respective retention policies, typically 30–90 days.
Sub-Processors
ComplyBar relies on third-party services to operate. Each processor has committed to protecting your data:
- Supabase – Hosts our database and manages authentication. Privacy Policy
- Vercel – Hosts the web application. Privacy Policy
- Stripe – Processes payment information and billing. Privacy Policy
- Resend – Sends transactional emails. Privacy Policy
- PostHog – Provides product analytics. Privacy Policy
- Sentry – Captures error and performance data. Privacy Policy
Your Rights
Depending on where you live, you have specific privacy rights. ComplyBar respects both GDPR (Europe) and CCPA (California) regulations.
- GDPR Rights (EU residents): You have the right to access, correct, delete, and port your data; the right to restrict processing; and the right to object to processing.
- CCPA Rights (California residents): You have the right to know what data we collect, delete your data, and opt out of the "sale" of your data (we don't sell it, but you have the right to request non-sale).
To exercise any of these rights, email privacy@complybar.com with a description of your request. We will respond within 30 days.
Cookies
ComplyBar uses minimal cookies—only those required for authentication and session management. We do not use cookies for tracking or advertising. For more details on how we use cookies and your options to manage them, see our Cookies Policy.
Contact Us
If you have questions about this privacy policy or how we handle your data, contact us at privacy@complybar.com. We will respond to your inquiry within 5 business days.