Privacy Policy

1. What we collect

We collect information you provide when creating an account (name, work email, company name), information about your AI systems that you input for compliance assessment (system descriptions, use cases, data subjects), usage data (pages visited, features used, session duration), and technical data (IP address, browser type, device identifiers).

We do not collect sensitive personal data beyond what is necessary for compliance assessment. We do not sell your data to third parties.

2. How we use it

We use collected data to: (a) provide and improve the CompliVibe platform, including AI system classification and obligation mapping; (b) send you regulatory updates and product notifications (with your consent); (c) respond to support requests; (d) comply with legal obligations; and (e) conduct internal analytics to improve platform accuracy and performance.

We process your data on the legal bases of contract performance (to provide the service you subscribed to), legitimate interests (platform improvement and security), and consent (marketing communications).

3. Data retention

We retain account data for as long as your account is active, plus 30 days after deletion to allow recovery. Compliance assessment data (AI system descriptions, classifications, obligation mappings) is retained for the duration of your subscription and deleted within 60 days of account closure upon request.

Anonymised and aggregated analytics data may be retained indefinitely as it cannot identify individuals. You may request deletion of your personal data at any time by emailing legal@complivibe.in.

4. Your rights

Under India's Digital Personal Data Protection Act 2023 (DPDP), you have the right to: access your personal data; correct inaccurate data; erase your data (subject to legal retention obligations); nominate a person to exercise rights on your behalf in case of death or incapacity; and grievance redressal.

Under EU GDPR (applicable to EU residents), you additionally have rights to: data portability; restriction of processing; object to processing based on legitimate interests; and lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at legal@complivibe.in. We respond within 30 days.

5. Third-party processors

We work with carefully selected processors to operate the platform. Current processors include: Vercel (infrastructure hosting, US/EU), Supabase (database, EU region), Resend (transactional email, US), and PostHog (product analytics, EU). All processors operate under Data Processing Agreements and are bound to handle data only per our instructions.

We do not use third-party processors for advertising purposes. A full list of sub-processors is available on request from legal@complivibe.in.

6. Contact

For privacy-related queries, requests, or complaints, contact:

CompliVibe (operated by ValersAI Connect Pvt. Ltd.) Email: legal@complivibe.in Location: Gurugram, Haryana, India

If you are an EU resident and are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority.