Privacy Policy
Effective date: July 2026
This Privacy Policy explains how Cardiff Reef Ventures LLC ("we", "us", or "our"), the operator of ComplianceOS (the "Service"), collects, uses, and protects your information when you use the Service.
1. Information We Collect
Account information: your email address and password (stored securely via AWS Cognito).
Business profile: business name, type, state, and other details you enter in your profile.
Compliance data: checklists, deadlines, workflow progress, and documents you upload.
Billing information: payment details are handled directly by Stripe. We store only your Stripe customer ID — we never see or store your card number.
Usage data: basic logs of Service interactions used to diagnose issues and improve the product.
2. How We Use Your Information
- To provide and operate the Service
- To send compliance deadline reminders you have enabled
- To process subscription payments via Stripe
- To respond to your support requests
- To improve the Service and fix bugs
We do not sell your data to third parties. We do not use your compliance data for advertising.
3. Third-Party Services
We use the following third-party providers to operate the Service:
- AWS — cloud infrastructure, database, and file storage
- Stripe — payment processing (governed by Stripe's Privacy Policy)
- Vercel — web hosting and content delivery
- Resend — transactional email delivery (reminders, reports, and notifications)
- Anthropic (Claude) — AI features; your queries are processed to generate responses but not used to train AI models
- PostHog — product analytics and session replay for signed-in users, to improve the Service (governed by PostHog's Privacy Policy)
4. Data Retention
We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 60 days to allow reactivation, then permanently deleted. You may request immediate deletion by contacting us. Free accounts retain data indefinitely while the account exists.
5. Data Security
We use industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. No system is 100% secure; if you believe your account has been compromised, contact us immediately.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data
To exercise these rights, contact support@mycomplianceos.ai.
7. Children's Privacy
The Service is not directed at children under 18. We do not knowingly collect personal information from minors.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the Service after changes take effect constitutes acceptance.
9. Contact
Privacy questions: support@mycomplianceos.ai
Cardiff Reef Ventures LLC
2108 N St, Ste N
Sacramento, CA 95816