Privacy Policy
This policy explains what data ComplyRadar collects, why, and your rights. We keep it deliberately plain — the same way we write everything.
1. What we collect and why
| Data | When | Why |
|---|---|---|
| Quiz answers (country, size, invoicing method, etc.) | When you take the readiness quiz | To generate your score and action plan |
| Email address | When you request your plan or subscribe | To deliver your report, alerts, and service emails |
| Business profile (country, size) | When you use the plan page or subscribe | To match the rules that apply to you |
| Billing details (name, payment method, billing country) | At checkout | Collected and processed by our third-party payment provider — we never see or store your full card details |
| Basic usage data (page requests, approximate region) | Automatically via our hosting | Site operation, performance, and abuse prevention |
We do not sell personal data, run third-party advertising, or use tracking cookies. Checklist progress on the plan page is stored in your own browser (localStorage), not on our servers.
2. Who processes data on our behalf
- Netlify — website hosting
- Supabase — database hosting for our rules content and, for subscribers, business profiles
- Formspree — quiz form submissions (email + answers)
- Paddle (Paddle.com Market Ltd) — checkout, billing, invoicing, and payment data, acting as reseller and Merchant of Record (Paddle's name appears on your invoice and card statement)
- Email providers — to send reports and alerts
Each provider processes data under its own security and privacy commitments; we share only what each needs to perform its function.
3. Legal bases (for readers in the EU/EEA and UK)
We process data to perform our contract with you (delivering reports, plans, and alerts), on your consent (quiz email capture, which you may withdraw), and for our legitimate interests (site security, service improvement). You are not profiled for automated decisions with legal effects.
4. Retention
Quiz submissions are kept while we operate the related lead list, and deleted on request at any time. Subscriber profiles are kept for the life of the subscription plus normal accounting retention on billing records (held by our payment provider). You can ask us to delete your data whenever you like.
5. Your rights
Wherever you are, you can email hello@complyradar.net to access, correct, export, or delete your personal data, withdraw consent, or object to processing. If you are in the EU/EEA/UK you additionally have the right to complain to your local data protection authority. We answer all requests within 30 days, usually much faster.
6. Security
Data in transit is encrypted (HTTPS everywhere). Database access is restricted by row-level security policies; write access requires secret credentials held only by the operator. Payment data is handled entirely by our payment provider's PCI-compliant systems.
7. International transfers
Our processors host data primarily in the EU and US under their standard safeguards. ComplyRadar is operated from Bangladesh; we access personal data only as needed to run the service.
8. Children
ComplyRadar is a business tool and not directed at anyone under 18.
9. Changes
If we materially change this policy, we'll note it here and email subscribers before the change takes effect.