Privacy Policy

1. Introduction

CompliForged LLC, doing business as Complinist ("we," "our," or "us"), operates the Complinist application and website (collectively, the "Service"). This Privacy Policy explains what information we collect and how we use it.

Important: Complinist is designed as a privacy-first, local application. The application runs in a Docker container on your machine, and your compliance data never leaves that local environment.

2. The Application (Local Docker)

2.1 What We Do NOT Collect

The Complinist application does not collect, transmit, or store any of the following on our servers:

• Network diagrams or topology data
• System Security Plans (SSPs) or compliance documents
• Device configurations or inventory data
• Control narratives
• Project files or workspace data
• Any content you create within the application

All of this data is stored locally in a SQLite database inside the Docker volume. Nothing you create in the app is uploaded to our servers.

2.2 Optional License Import

If you choose to import a license file, the application may validate it locally or with our licensing server. This process transmits only your license key — not compliance data or project content. A license is optional; all compliance features work without one in the current build.

3. Website and Account Information

3.1 Information We Collect

When you create an account to subscribe for support or optional license delivery, we collect:

• Account Information: Name and email address, managed through Clerk (our authentication provider)
• Billing Information: Payment details are processed directly by Stripe; we do not store or have access to your credit card number

We do not collect device information, usage analytics, tracking data, or any technical information about how you use our website.

3.2 How We Use This Information

• Create and manage your account
• Process subscription payments and optional license delivery
• Send license codes and purchase receipts when applicable
• Respond to support requests if you contact us

4. Third-Party Services

We do not sell, trade, or rent your personal information. We use the following third-party services:

• Clerk: Handles account authentication and stores your email and name
• Stripe: Processes payments; we never see or store your credit card details

We may also disclose information if required by law or court order.

5. Data Security

5.1 Your Local Data

Your compliance data stored in the Docker volume is protected by your host system and Docker configuration. We recommend:

• Using full-disk encryption on your computer
• Maintaining strong system passwords
• Following your organization's security policies

5.2 Account Data

Your account data is protected by our third-party providers:

• Clerk handles authentication with industry-standard security practices
• Stripe is PCI-DSS compliant for payment processing
• All data is transmitted using TLS encryption

6. Data Retention

• Account Data: Retained while your account is active and for a reasonable period after to fulfill legal obligations
• Billing Records: Retained as required for tax and accounting purposes
• Support Communications: Retained to provide ongoing support and improve our service

Your local compliance data is stored on your computer and is under your control. You can delete it at any time.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of marketing communications

To exercise these rights, contact us at cam@complinist.com.

8. Cookies

Our website uses only essential cookies required for authentication (managed by Clerk). We do not use analytics cookies, tracking pixels, or any other tracking technologies.

The application does not use cookies or tracking technologies.

9. Children's Privacy

Our Service is intended for business use and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you by email.

11. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

12. Summary