Privacy Policy

1. Introduction

CompliPost ("we," "our," or "us") operates the CompliPost web application at complipost.com. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform.

By using CompliPost, you agree to the collection and use of information as described in this policy.

2. Information We Collect

• Account Information: When you create an account, we collect your name, email address, and password. If you sign up through a third-party service, we receive your name and email from that provider.
• Profile and Brand Information: To personalize your content, we collect information you provide in your brand kit including your headshot photo, company name, NMLS number, phone number, office address, brand colors, and logo.
• Content You Create: We store the social media posts, graphics, copy text, and calendar plans you generate through our platform.
• Exported Assets and Saved Templates: We store the graphics, templates, and exported post assets you choose to save so you can reuse them later.
• Usage Data: We collect information about how you use CompliPost, including pages visited, features used, generation counts, and timestamps. This helps us improve the product and enforce usage limits.
• Payment Information: Payment processing is handled by our third-party payment processor. We do not store your credit card number or bank account details on our servers. We receive only a transaction confirmation and the last four digits of your card for display purposes.
• Technical Data: We automatically collect your IP address, browser type, device type, and operating system for security, analytics, and troubleshooting purposes.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the CompliPost platform
• Generate personalized social media content using your brand kit details
• Store your saved posts, templates, and exported assets
• Process your subscription payments
• Send transactional emails (account confirmations, password resets, usage alerts)
• Enforce usage limits and subscription tiers
• Monitor for abuse, fraud, and security threats
• Comply with legal obligations including mortgage advertising regulations

4. AI-Generated Content

CompliPost uses artificial intelligence (OpenAI for copy, KIE.AI for graphics) to generate social media content. When you create content, the following information may be sent to our AI providers: your content topic or prompt, brand kit details (name, NMLS number, company name), and selected style preferences. We do not send your email, password, payment information, or social media access tokens to AI providers.

AI-generated content is created for your use. We do not claim ownership of content you generate. You are responsible for reviewing all generated content for accuracy and regulatory compliance before publishing.

5. How We Share Your Information

We do not sell your personal information to third parties. We share information only in these circumstances:

• Service Providers: We use third-party services to operate our platform including Supabase (database and authentication), OpenAI (content generation), Vercel (hosting), and Stripe (payments). These providers access only the data necessary to perform their services and are bound by their own privacy policies.
• Compliance and Legal: We may disclose your information if required by law, regulation, legal process, or government request. Given the regulated nature of mortgage advertising, we may also share information with regulatory bodies if required.
• Business Transfers: If CompliPost is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Future Social Integrations

CompliPost v1 is focused on content creation, storage, and export workflows. If we later introduce direct social media connections:

• We will request only the permissions needed for the feature you enable
• We will update this Privacy Policy before collecting or storing platform access tokens
• We will describe what data is shared with each platform and how you can revoke access

7. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), encrypted storage for sensitive data like access tokens, secure authentication through Supabase, and regular security reviews. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your account information and content for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain data for legal or regulatory purposes. Generated content and associated metadata may be retained in anonymized form for analytics.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information in your profile
• Delete your account and associated data
• Export your content and data
• Opt out of non-essential emails

To exercise these rights, contact us at support@complipost.com.

10. Cookies

CompliPost uses essential cookies for authentication and session management. We use analytics cookies to understand how the platform is used. We do not use advertising or tracking cookies.

11. Children's Privacy

CompliPost is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. Your continued use of CompliPost after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, contact us at: