Privacy Policy
Last updated: July 27, 2026
This is a plain-English starting policy. Have a lawyer review before public launch.
What we store
- Your account: email, name, password hash (via Supabase Auth).
- Your profile: what you sell, your ICP, keywords, verticals, capabilities. You typed these; we didn't buy them.
- Your watchlist & notes: the companies you chose to track and the short notes you added.
- Drafts: AI-generated emails, posts and RFP responses saved to your library.
What we don't store
We do not sync your CRM, deal pipeline, or third-party contact databases. We do not store confidential business data about anyone else.
Public signal data
Signals are pulled from public sources (Companies House, SEC EDGAR, Google News, Gov.UK, SAM.gov, Find a Tender, Contracts Finder, etc.). We cache them per-company, not per-user.
AI processing
Text you enter (profile fields, notes) and public signal text may be sent to the Lovable AI Gateway to generate summaries and drafts. We don't use your data to train models.
Cookies & analytics
Session cookies only, used for login. No third-party ad tracking.
Your rights
Export or delete your data any time from Account → Data & Privacy. Email support@compass-radar.lovable.app for anything else.
Security
Data is encrypted in transit (HTTPS) and at rest. Row-level security scopes every table so only you can read your own rows.