Privacy Policy

Effective Date: January 1^st 2026

1. Introduction

Welcome to StartComply. We are committed to protecting the privacy and confidentiality of the business information entrusted to us. This Privacy Policy explains how StartComply (“we”, “us”, or “our”) collects, uses, shares, and safeguards information when you or your organization accesses our platform and services.

By using StartComply, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms described herein, please discontinue use of our services.

2. Who We Are

StartComply provides compliance management software and services designed to assist businesses in meeting their regulatory and operational obligations. Our platform is intended exclusively for business users, including companies, organizations, and their authorized representatives.

For questions regarding this policy, please contact us at: info@startcomply.com

3. Information We Collect

We collect information necessary to provide and improve our services. The categories of data we collect include:

3.1 Account and Contact Information

When you register for or use our platform, we collect information such as:

Full name and job title of authorized users
Business email address
Company name and registration details
Login credentials (passwords are stored in encrypted form)

3.2 Usage and Analytics Data

We automatically collect data about how you interact with our platform, including:

Features accessed and actions taken within the platform
Login timestamps and session duration
Device type, operating system, and browser type
IP address and approximate geolocation (country/region level)
Error logs and performance data

This data is used to monitor platform health, improve functionality, and enhance the user experience.

3.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our platform. The types of cookies we use include:

Essential cookies: Required for the platform to function correctly (e.g., session management, authentication).
Analytics cookies: Used to understand usage patterns and improve our services (e.g., page views, feature usage).
Preference cookies: Used to remember your settings and customizations.

You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our platform. A detailed Cookie Policy is available on our website.

4. How We Use Your Information

We use the information we collect for the following purposes:

To create, manage, and maintain your account and provide access to our platform
To deliver, operate, and improve our compliance management services
To communicate with you regarding your account, updates, and service-related notifications
To process billing and manage subscription agreements
To analyze usage trends and conduct internal research to improve the platform
To detect, investigate, and prevent fraudulent or unauthorized activity
To comply with applicable legal obligations and respond to lawful requests from authorities
To enforce our Terms of Service and other agreements

5. Legal Basis for Processing

Where applicable under data protection law (including the General Data Protection Regulation – GDPR), we process personal data on the following legal bases:

Contractual necessity: Processing required to perform our contract with your organization.
Legitimate interests: Processing for analytics, platform security, and service improvement, where these interests are not overridden by your rights.
Legal obligation: Processing required to comply with applicable laws and regulations.
Consent: Where we rely on consent (e.g., for certain cookies), you may withdraw it at any time.

6. Data Sharing and Disclosure

We do not sell personal data to third parties. We may share data in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party vendors to assist in operating our platform (e.g., cloud hosting providers, analytics tools, customer support platforms). These providers are contractually obligated to process data only on our behalf and in accordance with our instructions.

6.2 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred as part of that transaction. We will notify affected users in advance where required by law.

6.3 Legal Requirements

We may disclose data when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, safety, or property of StartComply, our users, or the public.

7. Data Retention

We retain personal data for as long as your account is active or as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

Upon termination of your account, we will delete or anonymize your data within 90 days, unless a longer retention period is required by applicable law or agreed upon in your service contract.

8. Data Security

We implement appropriate technical and organizational measures to protect the information we hold against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS) and at rest
Role-based access controls and multi-factor authentication
Regular security assessments and vulnerability testing
Incident response procedures

While we strive to protect your data, no method of transmission or storage is completely secure. We encourage users to maintain strong, unique passwords and to notify us immediately of any suspected unauthorized access.

9. Your Rights

Depending on your jurisdiction and applicable law, your organization and its authorized users may have the following rights with respect to personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
Right to restriction: Request that we limit the processing of your data in certain circumstances.
Right to data portability: Request transfer of your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at privacy@startcomply.com. We will respond to verified requests within 30 days.

10. International Data Transfers

If your organization is located in the European Economic Area (EEA) or another jurisdiction with data transfer restrictions, please be aware that we may transfer personal data to countries outside your jurisdiction. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms.

11. Third-Party Links and Integrations

Our platform may contain links to third-party websites or integrate with external services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with StartComply.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify users via email or a prominent notice within the platform prior to the changes taking effect.

The updated policy will be identified by a revised effective date at the top of this document. Continued use of our platform after the effective date constitutes acceptance of the revised policy.