Privacy Policy

1. Introduction

DeviceCompass ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password. If you subscribe to a paid plan, payment information is processed securely by our payment provider (Stripe) — we do not store credit card numbers.

Classification Data

When you use the classification engine, we store your device descriptions, answers to classification questions, and resulting classifications. This data is associated with your account to provide session history and reporting features.

Usage Data

We automatically collect certain information when you access the Service, including IP address, browser type, operating system, referring URLs, pages visited, and timestamps. We use this data to improve the Service and diagnose technical issues.

3. How We Use Your Information

• →Provide, maintain, and improve the Service
• →Process your classifications and generate reports
• →Manage your account and subscription
• →Send transactional emails (account confirmation, password reset, billing)
• →Respond to your enquiries and support requests
• →Detect and prevent fraud, abuse, or security incidents
• →Comply with legal obligations

4. Data Sharing & Third Parties

We do not sell your personal data. We may share information with the following categories of third-party service providers, solely to operate the Service:

• →Cloud hosting and infrastructure (Supabase, Vercel)
• →Payment processing (Stripe)
• →Transactional email (Resend)
• →AI model providers for device description interpretation (Anthropic) — only the device description text is sent, not your personal data
• →Analytics (privacy-focused, cookie-free)

We may also disclose information if required by law, regulation, or legal process.

5. Data Retention

We retain your account data and classification history for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• →Access — Request a copy of the personal data we hold about you
• →Rectification — Request correction of inaccurate data
• →Erasure — Request deletion of your personal data
• →Portability — Request your data in a structured, machine-readable format
• →Objection — Object to processing based on legitimate interests
• →Restriction — Request limitation of processing in certain circumstances

To exercise these rights, contact us at privacy@devicecompass.io.

8. Cookies

We use essential cookies required for the Service to function (e.g., session authentication). We do not use advertising or tracking cookies. Analytics, if enabled, use cookie-free, privacy-respecting methods.

9. International Transfers

Your data may be processed in countries outside your country of residence, including the United States and within the European Economic Area. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@devicecompass.io.