Privacy Policy

Account information. When you create an account we collect your name, email address, business name, and optional details you provide such as industry, company size, and time zone.

Documents you upload. The certificates of insurance, licenses, and permits you (or your vendors) upload, along with the fields we read from them — names, dates, coverage types, and limits.

Usage and security records. We keep an audit log of key actions in your account (uploads, edits, sign-ins) and basic technical data such as IP address and browser type, which we use to operate, secure, and troubleshoot the service.

Payment information. Paid plans are billed through Stripe. Your card details are entered directly with Stripe and processed by them — CompliDrop never sees or stores your full card number.

We use the information above to:

• provide the service — read your documents, check them against your requirements, and send expiration reminders;
• create and secure your account and isolate your data from other customers;
• process payments and manage your subscription;
• respond to support requests and send service-related notices;
• detect, prevent, and investigate abuse, and meet legal obligations.

We do not sell your data, and we do not use the documents you upload to train public AI models.

We share data with the vendors that help us run CompliDrop, and only to the extent each needs it to do its job. These include:

• Stripe — payment processing.
• Google Cloud (Document AI & Vertex AI) — reading text and fields from your uploaded documents.
• Microsoft Azure — encrypted storage of your uploaded files.
• Neon — our application database.
• Railway — hosting the application servers that receive and process your uploads.
• Vercel — hosting and delivering the CompliDrop web app you use in your browser.
• Resend — sending reminder and notification emails.
• PostHog — product analytics that help us understand and improve how the app is used.
• Sentry — error monitoring so we can fix problems quickly.

We process and store data primarily in the United States. We work only with providers that commit to protecting it, and we share only what each provider needs to perform its function.

We may also disclose information if required by law, or to protect the rights, safety, and security of CompliDrop, our customers, or the public.

We use essential, first-party cookies to keep you signed in securely. We also use a product-analytics tool (PostHog) that sets a cookie and records how the app is used — such as pages viewed and features used — so we can understand and improve it. We do not use cookies for advertising, we do not run third-party ad trackers, and we do not sell your data.

Data is transmitted over encrypted connections and stored privately. Each account's data is logically isolated from every other account, passwords are stored only as salted hashes, and changes are written to an audit log. No system is perfectly secure, but we work to protect your information using industry-standard measures.

We keep your account information and documents for as long as your account is active.

When you close your account from Settings, we clear your name and email from your account record straight away, cancel any paid plan, and stop sending reminders. Closing makes the account unusable — but on its own it is not a deletion of everything the account held. Your organization's records stay with us: the vendors you added and their contact details, your documents and the files uploaded for them, reminder history, billing records, and our log of what happened in the account.

We have not set a fixed disposal period for those records, so they stay with us until you ask us to delete them. To ask, use the contact details at the end of this page. We'll check the request is really yours, delete what we can, and keep only what we must to meet legal, tax, or security obligations.

Some people reach CompliDrop without ever creating an account: one of our customers sends a vendor, contractor, or supplier a link to a secure upload page and asks for a current certificate, license, or permit. If that is you, this section is the short version.

You do not need an account, and we do not ask you to create one. When you use that page we collect the file you upload, along with the basic technical data described above such as IP address and browser type. Unlike the rest of the site, that page sets no cookies and we do not measure how it is used, because the link you were sent is itself the key to it. Your file is stored, and it is read automatically by the service providers listed above — that automated reading is how the dates, names, and coverage amounts on it are turned into fields — so the business that sent you the link can check it against what they require.

That business decides what to do with the document it asked you for, so a request about it is usually fastest with them. We keep our own copy while they use CompliDrop, and afterwards as described in "How long we keep it" above. You can also reach us using the contact details at the end of this page and we'll help route your request.

You can access and update most of your information from within the app. You can also ask us to provide a copy of your data, correct it, or delete it. Depending on where you live, you may have additional rights — to know what we collect, to access or correct it, to delete it, and to opt out of any "sale" or "sharing" of personal information (we don't sell personal information, and we don't share it for targeted advertising). We honor these rights as required by applicable law and aim to respond within 30 days.

If your information appears inside a document that one of our customers uploaded — for example, a certificate naming you — that business controls that record. Contact them directly, or email us and we'll help route your request.

CompliDrop is a business tool, not intended for individual consumers or minors, and we do not knowingly collect personal information from children.

We may update this policy as the service evolves. When we make material changes we will update the date above and, where appropriate, notify you in the app or by email.

Questions about this policy or your data? Email us at support@complidrop.com or visit our contact page.

CompliDrop is operated by Nebox Dev LLC, 407 Lincoln Road, Suite 708, Miami Beach, FL 33139, USA.