Effective date: 2026-08-26 Last updated: 2026-09-01
Account information: email address and password (hashed, never stored in plain text) if you create an account. Agency accounts additionally store an agency/business display name.
Payment information: we never see or store your card details — Stripe processes and stores payment methods directly. We store a reference to your Stripe Customer ID and your order/subscription history (what you bought, when, for how much).
Input Content: the website URL you submit, or the information you type into our questionnaire, used to generate your profile. We store this (as "source material") so we can regenerate or revise your profile later without asking you to resubmit it.
Usage data: when your generated profile's shareable preview link is viewed, we log a timestamp and (where available) the referring page — this powers the view-count feature on your account/agency dashboard. We don't log IP addresses or device fingerprints for this.
Logs: standard server logs (IP address, timestamp, endpoint) for security, rate-limiting, and debugging, kept for a limited period and not used for profiling or advertising.
To generate and deliver your profile and related assets; to process payments and manage subscriptions/credits; to send transactional email (order confirmations, password resets, Keep-It-Fresh refresh notifications) via Resend; to detect and prevent abuse (rate limiting); and to improve the Service.
We do not sell your personal information. We do not use your Input Content to train AI models.
We don't share your data with anyone else, including advertisers, unless required by law.
The app (compaino.com and www.compaino.com). Your account session (customer or agency) is handled with a JSON Web Token stored in your browser's local storage, not a cookie. The only cookies this site sets are analytics cookies, and only if you allow them.
We use Google Analytics 4 (measurement ID G-GLW2QKQF5Z) to understand how people find and use Compaino — which pages get visited, roughly where visitors are, what device and browser they use, and which site referred them. It sets _ga and _ga_* cookies in your browser, which last up to two years and let Google recognise a returning browser.
Analytics is switched off by default. We use Google Consent Mode, which means no analytics cookie is written and no identifier is stored until you press Accept on the cookie banner. If you decline, or simply ignore the banner, the site works exactly the same and no cookie is set. We never grant Google's advertising or personalisation permissions from this site — we run no advertising or remarketing tags on it.
Your answer is remembered in your browser's local storage (not a cookie), so we don't have to ask again. You can change or withdraw it at any time using the "Cookie preferences" control at the bottom of this page. Clearing your browser's site data for compaino.com also clears both the answer and any analytics cookies.
The blog (blog.compaino.com). Our blog runs on WordPress and is a separate system from the app. It currently loads Google Analytics (feeding the same property as above) and a Meta (Facebook) advertising pixel, which sets an _fbp cookie scoped to compaino.com for up to 90 days and is used for advertising measurement. Unlike the app, the blog does not currently ask before setting these. If you'd rather it didn't, you can block third-party scripts or cookies for compaino.com in your browser settings or with a content blocker, and you can opt out of Google Analytics everywhere using Google's browser opt-out add-on. We're aligning the blog with the app's consent banner; until we do, this paragraph is the accurate description of what it does.
If any of this changes, we'll update this section, move the "Last updated" date and policy version, and ask you to review it the next time you sign in.
You can request deletion of your account at any time from your account settings. When you do:
If you're in a jurisdiction with a legal right to request a copy of your data (portability) rather than just deletion, contact us at support@compaino.com and we'll provide it manually — this isn't yet a self-service feature.
We keep your data for as long as your account is active, or as needed to provide the Service, comply with legal obligations (e.g., tax/accounting records tied to payments), resolve disputes, and enforce our agreements.
We use industry-standard practices (encrypted connections, hashed passwords, access-controlled infrastructure) to protect your data, but no system is 100% secure — we can't guarantee absolute security.
Compaino serves customers worldwide, so this section applies broadly:
If you're in the European Economic Area or UK (GDPR): our lawful basis for processing your data is performance of a contract (delivering the Service you paid for) and legitimate interest (fraud prevention, rate limiting). You have rights to access, correct, delete (see Section 5), and port your data, and to object to or restrict certain processing.
If you're a California resident (CCPA/CPRA) or in another US state with a comprehensive privacy law (20+ states now have one): you have rights to know what data we collect, request deletion, and opt out of the sale of personal information — we don't sell personal information, so that opt-out is moot in practice, but the right still applies.
Cross-border transfers: because our infrastructure and team operate outside the EU, using the Service from the EU/UK involves transferring your data internationally.
Compaino is not directed at anyone under 18, and we don't knowingly collect data from children.
We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and version, tracked the same way as Terms of Service acceptance (see Section 11 of the Terms).
Questions about this Policy or your data: support@compaino.com.