Privacy policy.

Last updated · April 2026

1. Who we are

ComplyAura, Inc. ("ComplyAura", "we", "us") provides a unified compliance management platform. This policy explains how we handle personal data across our marketing site, our product, and our communications with you.

2. Data we collect

• Account data — name, email, role, organization, and authentication identifiers when you sign up or are invited.
• Customer content — frameworks, controls, policies, evidence, risks, vendors, incidents, and any other compliance program data you bring into ComplyAura.
• Usage data — pages viewed, features used, and basic device/browser metadata for product analytics and security.
• Communications — messages you send us through demo requests, support, or sales conversations.

3. How we use it

• To operate, secure, and improve the ComplyAura product.
• To provide support and respond to your requests.
• To send transactional messages (account, security, billing) and — with consent where required — product updates.
• To meet our own legal, accounting, and compliance obligations.

4. Customer content

Customer content is owned by your organization. We process it on your behalf to deliver the product. We do not sell it, and we do not use it to train third-party models without your explicit instruction.

5. Subprocessors

ComplyAura uses a small set of vetted subprocessors for hosting, email delivery, error monitoring, and AI inference. A current list is available on request.

6. Retention

We retain account and customer content for the life of your subscription and for a limited period afterward to allow for export and recovery, unless you ask us to delete it sooner.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data we hold about you. Contact us at privacy@complyaura.com and we'll help.

8. Contact

Questions about this policy? Email privacy@complyaura.com.

---

← Back to home