Privacy Policy
Last updated: February 2026
Who We Are
ComplyOne is a compliance intelligence platform operated from Switzerland.
- Data controller: ComplyOne (legal entity registration pending)
- Address: Switzerland (registered address to be confirmed)
- Contact: ops.manager@complyone.io
- Data Protection Officer: No Data Protection Officer has been appointed as we are below the statutory threshold.
What Data We Collect
| Category | What specifically | When collected |
|---|---|---|
| Business profile | Company name, website URL, employee count, countries of operation, headquarters, industry, data processing activities, AI usage, data types handled, compliance approach, top concern | Compliance health check form |
| Contact information | Email address | All forms (waitlist, compliance check, newsletter) |
| Waitlist data | Email, company name, employee count, countries, top concern, founding customer flag | Waitlist signup |
| Newsletter preference | Opt-in/out | Compliance check form checkbox |
| Marketing attribution | UTM source, medium, campaign, referral source | Captured from URL parameters on all form submissions |
| Analytics data | Page views, click events, scroll depth, form interactions, device type, browser, approximate location (country-level) | PostHog analytics (only after cookie consent) |
| Technical data | IP address (anonymised), browser user agent | Server logs |
Legal Basis for Processing
| Processing activity | Legal basis | GDPR Article |
|---|---|---|
| Delivering compliance report | Legitimate interest — providing the service you requested | Art. 6(1)(f) |
| Waitlist management | Legitimate interest — communicating about product availability | Art. 6(1)(f) |
| Newsletter | Consent — opt-in checkbox (pre-unchecked) | Art. 6(1)(a) |
| Analytics (PostHog) | Consent — cookie banner acceptance | Art. 6(1)(a) |
| Website hosting and security | Legitimate interest — maintaining a secure service | Art. 6(1)(f) |
Sub-Processors
| Service | Purpose | Location | Data processed |
|---|---|---|---|
| Supabase | Database (PostgreSQL) | EU region | All form submission data |
| Postmark | Transactional email delivery | US (SCCs in place) | Email addresses, email content |
| PostHog | Privacy-focused analytics | EU Cloud | Anonymised usage data, only with consent |
| Vercel | Website hosting | Frankfurt, Germany | Page requests, server logs |
Cookies
| Cookie | Type | Purpose | Duration | Loaded without consent? |
|---|---|---|---|---|
| PostHog analytics | Analytics | Page views, funnels, A/B tests | Session / 1 year | No — only after “Accept” |
| Cookie consent choice | Essential | Remembers your cookie preference | 1 year | Yes (essential) |
| Form state | Essential | Saves compliance check progress | Session | Yes (essential, localStorage) |
We do not use advertising cookies. We use Google Analytics with anonymised IP addresses for website performance monitoring only. We do not share your data with advertisers or third-party tracking networks.
Data Retention
| Data | Retention |
|---|---|
| Compliance check submissions | Until product launch + 12 months after last interaction, then deleted |
| Waitlist signups | Until product launch + 12 months, then deleted |
| Newsletter subscribers | Until you unsubscribe |
| Analytics data | PostHog default (typically 12 months) |
Your Rights
Under GDPR and the Swiss Federal Act on Data Protection (FADP), you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing
- Data portability (receive your data in machine-readable format)
- Object to processing
- Withdraw consent at any time (without affecting prior processing)
- Lodge a complaint with the FDPIC (Switzerland) or your relevant EU supervisory authority
Contact: ops.manager@complyone.io — we respond within 30 days.
International Transfers
All primary infrastructure is EU/Swiss-based. Where sub-processors operate outside the EU/EEA (Postmark — US), EU Standard Contractual Clauses (SCCs) are in place.
Governing Law
Swiss law. Jurisdiction: courts of Zurich, Switzerland.
Updates
Last updated: February 2026. We will notify users of material changes via email or website notice.
Questions about your data? ops.manager@complyone.io · Terms of Service · Imprint