Privacy Policy

Complix AI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully.

1. Information we collect

Information you provide

• Email address and password when you create an account
• Payment information (processed by Stripe — we never store card numbers)
• Website URLs you submit for scanning

Information collected automatically

• IP address and browser/device information
• Pages visited and features used within the Service
• Scan history and report data associated with your account
• Authentication tokens stored in secure HTTP-only cookies

2. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process payments and manage your subscription
• Send transactional emails (account confirmation, receipts, scan completion notices)
• Respond to support requests and communicate with you
• Enforce our Terms of Service and prevent misuse
• Comply with applicable laws and regulations

We do not sell your personal data to third parties. We do not use your scan results or report data for advertising purposes.

3. Website scanning

When you submit a URL, our crawler accesses that website’s publicly available pages to generate a compliance report. We store the crawled content and report data in association with your account. We do not crawl pages behind login screens or authentication walls.

Crawl data is retained for as long as your account is active. You may delete individual scan reports from your dashboard at any time.

4. Third-party services

We use the following third-party services to operate Complix AI:

Your scan URLs and crawl data are processed by Anthropic’s API to power Verdix AI report generation. By using the Service, you consent to this processing. Anthropic’s API does not use customer data to train models (as of our last review).

5. Cookies

We use essential cookies only to maintain your authenticated session. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You may disable cookies in your browser, but this will prevent you from logging in to the Service.

6. Data retention

We retain your account data and scan history for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., financial records for tax compliance).

7. Data security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and row-level security on our database. However, no transmission over the internet is 100% secure. If you become aware of a security issue, please contact us at security@complixai.org.

8. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at privacy@complixai.org. We will respond within 30 days.

9. Children

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or via a prominent notice on the Service. The “Last updated” date at the top reflects the most recent revision.

11. Contact

Questions about this Privacy Policy? Contact us at privacy@complixai.org.