Privacy Policy

Compass frontier group ltd, operating the SafePassage platform, is the data controller for personal data processed through the Service. This policy explains what we collect, why we use it, who receives it, how long we retain it, and your rights.

1. Personal data we collect

• Account data — email, login credentials, and authentication identifiers.
• Submitted content — contracts, job offers, document images, extracted text, self-check answers, notes, and reports.
• Purchase records — plan, purchase status, access period, expiry, and payment event metadata; we do not store full card details.
• Usage data — consented analytics events, feature interactions, and error logs.
• Technical data — IP address, device, browser, and timestamps.
• Support data — messages and information you provide when requesting help.

2. Purposes and legal bases

• Account administration, contract analysis, reports, and paid access — performance of a contract.
• Security, fraud prevention, abuse detection, and service reliability — legitimate interests.
• Product analytics and improvement — consent.
• Customer support — contract performance and legitimate interests.
• Legal, tax, and accounting requirements — legal obligation.

3. Data sharing

• Paddle.com, Merchant of Record — for product sales, payment processing, subscription management, tax compliance, invoicing, customer service, and refunds.
• Service providers and subprocessors — hosting, database, AI analysis, analytics, error monitoring, and support providers acting under contract.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where disclosure is required by law.

We do not sell your personal data.

4. International transfers

Where data leaves the UK or EEA, we rely on applicable adequacy decisions or Standard Contractual Clauses and appropriate safeguards.

5. Retention

• Account and entitlement records — while active, then up to 24 months.
• Uploaded documents, extracted text, and reports — until you delete them or close your account.
• Purchase and audit records — as required by tax and accounting law, typically 6–7 years.
• Analytics and error logs — up to 12 months.

Data is deleted or anonymised when no longer needed.

6. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time and complain to your supervisory authority. We respond to requests within one month.

7. Security

We use appropriate technical and organisational safeguards, including encryption in transit, access controls, owner-scoped database rules, and least-privilege administration.

8. Cookies and local storage

Essential storage keeps you signed in and remembers language and local drafts. Analytics storage is used only after consent. You can manage or clear it in your browser.

9. Contact

Contact Compass frontier group ltd through the support options in your account for privacy requests. See our Terms & Conditions and Refund Policy.