Privacy Notice

This Privacy Policy applies to personal data we collect through the Services, including when a user completes an assessment, purchases or receives a report, uses the Compass or related tools, communicates with us, participates in validation or reliability studies, or otherwise interacts with Compavra.

This Privacy Policy also applies to limited technical information collected through our website infrastructure and to information received from service providers that support the Services, such as payment processing, hosting, infrastructure, transactional email, security, or customer-support providers.

This Privacy Policy does not apply to third-party websites, platforms, payment pages, or services that are not controlled by Compavra, even if they are linked to or accessible from the Services. Those third parties process personal data under their own privacy policies.

The Services are intended for individuals who are 18 years of age or older, or the age of legal majority in their jurisdiction, whichever is greater. The Services are not directed to children or minors. We do not knowingly collect personal data from individuals under 18. If we learn that we have collected personal data from an individual under 18, we will delete that information as required by applicable law.

"Personal data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identifiable individual. The categories of personal data we may collect include:

• Account and contact information, such as name, email address, postal address, account information, and communications information.
• Assessment and report information, such as assessment responses, computed results, Signal output, Compass output, report-generation information, and related assessment-session information.
• Transaction and purchase information, such as purchase records, order history, payment reference information, product purchased, and transaction date. Payment card details are processed by our payment processor, LemonSqueezy, and are not directly stored by Compavra on its own systems.
• Device, technical, and usage information, such as IP address, browser type, operating system, approximate country, state or region, pages visited, referral pages, access times, session duration, and server-log information.
• Customer-support and communications information, such as emails, support requests, dispute-related communications, deletion requests, and other messages sent to or from Compavra.
• Validation, reliability-study, and research-participation information, if a user voluntarily participates in those activities.
• Aggregated, anonymized, or de-identified information that does not reasonably identify an individual.

Compavra does not collect sensitive demographic information as part of the standard assessment experience, including race, ethnicity, gender identity, religion, political affiliation, medical diagnoses, sexual orientation, or education level. The Services are also not intended to collect biometric data, precise geolocation, health information, Social Security numbers, or government-issued identification numbers.

A. Information You Provide We collect personal data directly from you when you complete an assessment, make a purchase, request or receive a report, contact us, submit a support request, participate in validation or reliability studies, or otherwise provide information through the Services.

B. Limited Technical Information Collected Automatically When you use the Services, limited technical information may be collected through our hosting, infrastructure, and server-log systems for security, operational, and service-delivery purposes. This may include IP address, browser type, operating system, referral pages, pages visited, session duration, and approximate location inferred from IP address.

C. Browser Local Storage Compavra uses browser local storage to temporarily hold assessment-session information on your own device, such as your answers, computed results, session identifier, and the assessment you took. This information is used to carry your result from the assessment to the payment and results pages. Local storage remains on your device until you clear your browser site data. Compavra cannot remove local-storage data from your device for you.

D. Payment Processor and Other Service Providers When you make a purchase, you may be directed to a checkout page hosted by LemonSqueezy, our payment processor. Any cookies, tracking technologies, payment card processing, or transaction processing performed on LemonSqueezy pages are governed by LemonSqueezy's own privacy policy and terms. We may also receive limited information from service providers that help us deliver the Services, such as hosting, infrastructure, transactional email, security, and customer-support providers.

Compavra does not use third-party analytics trackers, advertising pixels, behavioral advertising cookies, or similar third-party tracking technologies on its website. Compavra also does not currently use Google Analytics, advertising pixels, or similar tracking tools on the website.

The primary client-side technology used by Compavra is browser local storage, as described above. If Compavra later implements cookies, analytics tools, advertising pixels, retargeting, or other tracking technologies, this Privacy Policy will be updated before those tools are launched.

Third-party providers, including LemonSqueezy on its hosted checkout pages, may use their own cookies or similar technologies under their own privacy policies.

We use personal data for the following purposes:

• To provide, operate, maintain, and improve the Services.
• To generate, deliver, and support assessment results, Signals, Compass outputs, reports, and related tools.
• To process purchases, payments, order records, and transaction-related communications.
• To communicate with users about reports, orders, support requests, account issues, privacy requests, legal notices, and service updates.
• To maintain security, prevent fraud, troubleshoot technical issues, monitor service performance, and protect the integrity of the Services.
• To conduct aggregate analysis, validation analysis, reliability studies, product improvement, and service-development work, using anonymized, de-identified, or aggregated information where feasible.
• To comply with legal, tax, accounting, regulatory, dispute-resolution, and recordkeeping obligations.
• For any other purpose disclosed when the information is provided or with consent where required by law.

The Services may use automated scoring rules, algorithms, or software logic to generate assessment results and related report content. Compavra's Services are intended for consumer informational and self-reflection purposes and are not intended for employment screening, hiring decisions, educational admissions, credit decisions, insurance eligibility, medical diagnosis, psychological diagnosis, or other legally significant automated decision-making.

Compavra may use automated tools or software systems to generate assessment outputs and reports based on user responses. Based on the information currently provided, the Services are designed around locked scoring rules and deterministic output logic, meaning the same inputs are intended to produce the same output. Compavra does not and will not use identifiable personal data to train third-party artificial intelligence or machine-learning models unless this Privacy Policy is updated and any required consent, opt-out, contract, or disclosure obligations are satisfied.

We may disclose personal data as described below:

• Service providers and contractors. We may disclose personal data to vendors that support the Services, including payment processing, hosting, infrastructure, transactional email, security, fraud prevention, customer support, and operational service providers. These providers may use personal data only as necessary to provide services to us or as otherwise permitted by law.
• Payment processor. Purchase and payment information is processed through LemonSqueezy. As described above, Compavra does not directly store full payment card information on its own systems.
• Legal and compliance disclosures. We may disclose personal data to comply with court orders, subpoenas, laws, legal processes, government requests, or regulatory obligations, or to protect legal rights, safety, security, property, and the integrity of the Services.
• Corporate transactions. We may disclose or transfer personal data in connection with a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar business transaction.
• With consent or at your direction. We may disclose personal data when you authorize or direct us to do so.

We may disclose aggregated, anonymized, de-identified, or statistical information that does not reasonably identify an individual without restriction, subject to applicable law.

Compavra does not sell personal data to third parties and does not share personal data with advertising networks for behavioral advertising.

Compavra may send email or other communications related to purchases, reports, support, service updates, legal notices, and administrative matters. Compavra does not currently conduct broad marketing campaigns, SMS marketing, push notifications, direct mail, social media advertising, or behavioral advertising. If marketing communications are later implemented, you will be provided any required notice and opt-out rights before launch.

Compavra is based in the United States and may make the Services available to users in the United States and other countries. If you access the Services from outside the United States, your personal data may be processed or stored in the United States or in other jurisdictions where Compavra or its service providers operate. Data-protection laws in those jurisdictions may differ from the laws of your country of residence.

Depending on your state, country, or region of residence and applicable law, you may have some or all of the following rights regarding your personal data:

• Right to know or access personal data we process about you.
• Right to receive certain personal data in a portable format, where required by law.
• Right to correct inaccurate personal data.
• Right to request deletion of personal data, subject to legal exceptions.
• Right to restrict or object to certain processing, where applicable.
• Right to withdraw consent where processing is based on consent.
• Right to appeal a denied privacy-rights request where applicable law provides an appeal right.

To exercise privacy rights, submit a request by email to hello@compavra.com. We may need to verify your identity or authority before fulfilling a request. We will respond within the time required by applicable law. The exact rights available to you and our obligations may vary depending on your jurisdiction, our legal status under applicable privacy laws, and applicable statutory exceptions.

Because Compavra does not currently sell personal data or use personal data for targeted advertising based on the information provided, sale/share/targeted-advertising opt-out mechanisms may not apply to the core Services.

Compavra retains different categories of personal data for different periods depending on the nature of the information, the purpose for processing, legal requirements, and operational needs.

• Assessment data. Based on the information currently provided, raw assessment answers and computed results are automatically and permanently deleted from Compavra's systems once the report has been delivered. A copy may remain in the user's browser local storage until the user clears browser site data.
• Transaction and account information. Compavra may retain name, email address, purchase records, payment reference information, and order dates for as long as needed to provide the Services and comply with legal, accounting, tax, dispute-resolution, and recordkeeping obligations.
• Customer-support communications. Compavra may retain support communications for as long as reasonably necessary to resolve support matters, document requests, and comply with legal obligations.
• Validation, reliability, and aggregate data. Compavra may retain anonymized, de-identified, or aggregated data for research, validation, product improvement, statistical analysis, and system-performance evaluation, provided the data can no longer reasonably be linked to an identifiable individual.

When personal data is no longer reasonably necessary, Compavra will delete, anonymize, de-identify, or otherwise dispose of it in accordance with applicable law and its retention practices.

You may request deletion of your personal data by contacting hello@compavra.com. Deletion requests will be processed within the time required by applicable law. Compavra may retain certain information after a deletion request where retention is permitted or required for legal compliance, tax or accounting obligations, fraud prevention, dispute resolution, security, legitimate business recordkeeping, or to honor prior deletion or suppression requests.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, use, alteration, disclosure, or destruction. No website, platform, system, or method of transmission or storage is completely secure. Users are responsible for maintaining the confidentiality of their devices, browsers, local storage, account credentials, and communications with Compavra.

The Services may rely on third-party providers, including LemonSqueezy for payment processing and providers for hosting, infrastructure, transactional email, security, or support. These providers may process and retain personal data in accordance with their own privacy policies and contractual obligations. We encourage users to review applicable third-party privacy policies when using third-party checkout pages or linked services.

We may update this Privacy Policy from time to time. The "Last Updated" date above indicates when this Privacy Policy was last revised. Updated versions become effective when posted through the Services unless otherwise required by applicable law. We will provide additional notice of material changes where required by law.

To exercise privacy rights, submit a deletion request, ask questions, or raise concerns about this Privacy Policy or our privacy practices, contact us at:

Compavra LLC

Email: hello@compavra.com

For information about dispute resolution, arbitration, or class-action waiver terms, please refer to the applicable Terms of Use.