Privacy policy
Last updated : July 2026
Controller
Compliade processes customer account data (identity, email, organisation) to provide the service.
DPO contact: dpo@compliade.com
Purposes and legal bases
Processing relies on contract performance and legitimate interest in security.
- Account creation and authentication
- Console and audit Gateway delivery
- Support, billing and fraud prevention
Data processed
Account data (name, email, organisation), technical logs, agent audit events (metadata — no cleartext business PII by design).
Processors
OVHcloud (database, France) and Scaleway (compute, France).
Retention
Active accounts: duration of the contract. Audit logs: per plan (e.g. 365 days Starter) then deletion or anonymisation.
Your rights
Access, rectification, erasure, restriction, portability, objection — via dpo@compliade.com. You may lodge a complaint with a supervisory authority.
Transfers outside the EU
Compliance data is hosted in France. No extra-EU transfer is planned for the MVP service.