Privacy Policy

This Privacy Policy describes how ComplyNestly ("we," "us") handles information in connection with the ComplyNestly application. It is a general overview, not a substitute for legal advice — if you need a formally reviewed privacy policy for your organization's compliance purposes, consult qualified counsel.

Information we collect

• Account information: your name and email address when you create an account.
• Company data you enter: employee names, job titles, credential/license details, expiration dates, and related notes that you or your team add to track compliance. This data belongs to you and your company.
• Billing information: if you subscribe to a paid plan, payment details are collected and processed directly by Stripe — ComplyNestly never receives or stores your full card number.
• Usage information: basic technical information (such as login timestamps) needed to operate and secure the service.

How we use information

Information is used to provide and operate the ComplyNestly application, process subscription billing, communicate with you about your account, and maintain the security and reliability of the service. We do not sell your data.

Who can see your data

Company data is isolated per company at the database level — employees and administrators at one company cannot see another company's records. Within your company, access follows the roles your organization assigns (owner, admin, or manager).

Third-party service providers

ComplyNestly relies on infrastructure providers to operate: Supabase for authentication and database hosting, Stripe for payment processing, and Vercel for application hosting. Each processes data only as needed to provide their respective service to us.

Data retention

Your company's data is retained for as long as your account is active. If you close your account, you can contact us to request deletion of your data, subject to any records we're required to retain (for example, billing records).

Cookies

ComplyNestly uses cookies required for authentication (keeping you signed in) and does not use third-party advertising or tracking cookies.

Your choices

You can review and update the information in your account at any time while logged in. To request export or deletion of your data, contact us using the details on our Contact page.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy can be sent to the address listed on our Contact page.