This Privacy Policy explains how Complli collects, uses, stores and otherwise processes personal data when you visit our website, create or use a Complli account, use the Complli platform, communicate with us, or otherwise interact with our services.
Where you use Complli on behalf of an organisation, some personal data processed through the platform may be provided or controlled by that organisation. In those circumstances, the organisation may determine the purposes for which the information is processed, and Complli may process that information on the organisation's behalf.
This Privacy Policy should be read together with our Terms of Service, Cookie Policy, and, where applicable, our Data Processing Agreement.
1. Who We Are
Complli is operated by:
Legal company name: Complli Technologies Ireland Limited
Trading name: Complli
Registered address: Dublin, Ireland
Company registration number: IE-789412
Email: privacy@complli.com
Website: https://complli.com
For the purposes of applicable data protection law, including the General Data Protection Regulation (EU) 2016/679) ("GDPR"), Complli may act as either a data controller or a data processor, depending on the nature of the processing involved.
A controller determines the purposes and means of processing personal data. A processor processes personal data on behalf of a controller and in accordance with the controller's documented instructions. The appropriate role depends on the particular processing activity.
For example, Complli may act as a controller in relation to information necessary to operate and administer customer accounts, manage subscriptions, communicate with customers, maintain platform security and comply with applicable legal obligations.
Where an organisation uses Complli to process personal data relating to its employees, customers, suppliers, members, contractors or other individuals, Complli may act as a processor on that organisation's behalf.
2. Personal Data We Collect
The personal data we collect depends on how you interact with Complli and how the platform is used.
2.1 Information You Provide
We may collect information that you provide when you:
- create an account;
- create or manage an organisation;
- invite or manage users;
- complete your profile;
- subscribe to a paid service;
- contact us;
- request customer support;
- provide feedback;
- communicate with us;
- configure account or organisation settings; or
- otherwise use our services.
This may include:
- name;
- email address;
- telephone number;
- organisation name;
- job title or role;
- account information;
- authentication information;
- billing and subscription information;
- communication records;
- support requests;
- account preferences; and
- other information you choose to provide.
3. Information Provided by Organisations
If you access Complli through an organisation, that organisation may provide information about you or manage information relating to your account.
This may include:
- name;
- work email address;
- job title;
- department;
- organisation membership;
- role and permissions;
- account status;
- access information; and
- other information managed by the organisation through Complli.
Where the organisation determines the purposes and means of processing that information, the organisation may be the relevant data controller and Complli may process the information on its behalf.
If you use Complli through an organisation and have questions about how that organisation uses your personal data, you may need to contact the organisation directly.
4. Documents and Other Content
Complli allows organisations and authorised users to upload, store, organise and manage documents and other content.
Depending on how the platform is used, uploaded content may contain:
- documents and files;
- document names;
- descriptions;
- metadata;
- compliance records;
- comments;
- annotations;
- dates and other document information;
- access permissions;
- sharing information; and
- personal data contained within uploaded content.
Complli does not generally determine the content of documents uploaded by customers.
Where an organisation controls the processing of personal data contained in customer content, Complli processes that information on the organisation's behalf and in accordance with the applicable agreement and documented instructions.
Customers are responsible for ensuring that information uploaded to Complli is appropriate for their intended use of the service and that they have the necessary authority to provide that information.
5. Technical and Usage Information
When you access or use Complli, we may automatically collect certain information about the device, browser and interaction with the service.
This may include:
- IP address;
- browser type;
- operating system;
- device type;
- login and authentication events;
- dates and times of activity;
- pages or features accessed;
- technical logs;
- error information;
- security-related events; and
- information necessary to maintain and troubleshoot the service.
We use this information primarily to operate, secure, maintain and improve Complli.
6. How We Use Personal Data
We may process personal data for the following purposes.
6.1 Providing the Service
We may use personal data to:
- create and manage accounts;
- authenticate users;
- provide access to Complli;
- manage organisations and users;
- provide platform functionality;
- store and manage customer content;
- manage permissions;
- process subscriptions;
- provide customer support;
- communicate with customers; and
- maintain the operation of the service.
6.2 Security
We may process information to:
- protect accounts;
- detect unauthorised access;
- investigate suspicious activity;
- prevent misuse of the service;
- investigate security incidents;
- protect our systems and infrastructure; and
- protect customers and users.
6.3 Service Administration and Improvement
We may process information to:
- identify and resolve technical issues;
- monitor service performance;
- maintain reliability;
- understand how our services are used;
- improve existing functionality; and
- develop new functionality.
Where appropriate, we may use aggregated, anonymised or otherwise minimised information for these purposes.
6.4 Communications
We may use personal data to send communications relating to:
- your account;
- security;
- subscriptions and billing;
- service operation;
- customer support;
- important changes to the service; and
- other matters relating to your use of Complli.
6.5 Legal Obligations
We may process personal data where necessary to:
- comply with applicable law;
- respond to lawful requests;
- establish, exercise or defend legal claims;
- enforce our agreements;
- protect our rights or property; or
- prevent or investigate unlawful activity.
7. Legal Bases for Processing
Where the GDPR applies, Complli processes personal data on one or more lawful bases under applicable data protection law.
Performance of a ContractWhere processing is necessary to provide the services you have requested or to perform our contractual obligations.
Legitimate InterestsWhere processing is necessary for legitimate interests pursued by Complli or another party, provided those interests are not overridden by the rights and freedoms of the individual.
Legal ObligationWhere processing is necessary for Complli to comply with a legal obligation.
ConsentWhere we rely on consent for a particular processing activity, you may withdraw that consent at any time.
9. Subprocessors
Where Complli acts as a processor, we may engage third-party subprocessors to provide infrastructure and other services necessary to operate the platform.
Our current subprocessors include: Supabase, Stripe, Resend, and Vercel.
10. Legal Disclosures
Complli may disclose personal data where we reasonably consider that disclosure is necessary to comply with applicable law, court orders, or law enforcement requests.
11. Business Transfers
If Complli is involved in a merger, acquisition, reorganisation, or sale of assets, relevant personal data may be transferred as part of that transaction.
12. Data Security
Complli takes reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
13. Data Retention
Complli retains personal data for no longer than is reasonably necessary for the purposes for which it is processed, unless a longer period is required or permitted by applicable law.
14. International Data Transfers
Where personal data is transferred outside the European Economic Area ("EEA"), Complli will use appropriate transfer safeguards such as Standard Contractual Clauses.
15. Your Data Protection Rights
Under applicable law (including GDPR), you have rights including access, rectification, erasure, restriction, objection, and data portability.
16. How to Exercise Your Rights
To exercise your data protection rights, contact us at:
17. Marketing Communications
You can opt out of marketing emails at any time using the unsubscribe link provided in our emails.
19. Third-Party Services and Websites
Our website may link to third-party sites. Complli is not responsible for the privacy practices of external websites.
20. Payment Services
Payments are securely processed through third-party payment gateways (e.g. Stripe). Complli does not store raw credit card details.
21. Account Security
You are responsible for keeping your login credentials confidential and notifying us of any suspected breach.
22. Children's Privacy
Complli is designed for professional organization use and does not knowingly collect personal data from children.
23. Automated Decision-Making
Complli does not perform automated decision-making or profiling with legal or significant impacts on users.
24. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Notice of material updates will be provided on our platform.
25. Complaints
If you have concerns, contact us at privacy@complli.com. You also have the right to lodge a complaint with the Data Protection Commission (Ireland).
26. Organisations Using Complli
Where an organization uses Complli to process personal data, the organization acts as Data Controller and Complli acts as Data Processor.
27. Data Processing Agreement
Complli provides a Data Processing Agreement ("DPA") for organizations requiring GDPR-compliant processor terms.
28. Contact Us
Complli
Legal entity: Complli Technologies Ireland Limited
Registered address: Dublin, Ireland
Company registration number: IE-789412
Email: privacy@complli.com