Privacy Policy

At Compair AI, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data when you interact with our website, services, and products. By using our platform, you consent to the practices described in this policy.

1. Introduction

1.1 This Privacy Policy explains how Compair AI Limited (“Compair AI”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you use our website and services (together, the “Services”).
1.2 We respect your privacy and are committed to protecting your personal data.
1.3 This policy also explains your rights and how to contact us.

2. Who we are

2.1 Controller: Compair AI Limited.
2.2 Company number: 16732731.
2.3 Registered office: 205 Wollstonecraft Street, London, N1C 4BT, United Kingdom.
2.4 Privacy contact: privacy@compairai.com.
2.5 We are the data controller for personal data we process for our own purposes.

3. The personal data we collect

3.1 We may collect account and contact data, including your name, work email address, organisation, job title, username, and authentication data (passwords are stored in hashed form).
3.2 We may collect customer relationship data, including communications with you, demo or trial requests, feedback, and account administration details.
3.3 We may collect technical and usage data, including IP address, device and browser details, time zone/locale, logs, and information about how you use our website and Services.
3.4 We may collect marketing preferences, including opt-ins/opt-outs and communication preferences.
3.5 We may process user-provided enrichment data you upload or share for enrichment or validation, which may include personal data depending on what you provide.
3.6 Our datasets are primarily organisational and commercial, but may occasionally include limited personal data contained in information published by public bodies, including disclosures made under the Freedom of Information Act 2000 (for example sole trader names or work contact details).

4. How we collect personal data

4.1 We collect personal data directly from you when you register, complete forms, request a demo or trial, or contact us.
4.2 We collect certain data automatically through standard website technologies, including cookies and similar tools managed via our cookie banner.
4.3 We may collect limited personal data from public sources, including public-sector transparency publications, FOI disclosures, and, where relevant, official registries such as Companies House.

5. Why we use personal data and our lawful bases

5.1 We process personal data to provide and operate the Services, including account creation, access, support, and administration, on the lawful bases of performance of a contract and legitimate interests.
5.2 We process personal data to improve and secure the Services, including monitoring performance, preventing misuse, and troubleshooting, on the lawful basis of legitimate interests.
5.3 We process personal data for website analytics and measurement on the lawful basis of legitimate interests and, where required, consent via the cookie banner.
5.4 We process personal data to send marketing communications on the lawful basis of legitimate interests or consent where required, and you can opt out at any time.
5.5 We process limited public-source professional contact data on the lawful basis of legitimate interests, where relevant to public-sector commercial context and within reasonable expectations.
5.6 We process personal data to comply with legal and regulatory obligations on the lawful basis of legal obligation and, where relevant, legitimate interests.
5.7 We process personal data for enrichment engagements on the lawful bases of performance of a contract and legitimate interests, and where we sign an NDA, it governs confidentiality for information shared under it.

6. AI and automated processing

6.1 We may use analytics and AI-assisted features to generate insights, including classification, summaries, and benchmarking.
6.2 Outputs are provided for information purposes and should be independently validated before action.
6.3 We do not use customer-provided enrichment content to train general AI models.

7. Who we share personal data with

7.1 We may share personal data with trusted service providers that help us operate the Services.
7.2 These providers include Microsoft / Power BI to deliver reporting and analytics features.
7.3 These providers include Google Analytics to understand website usage and improve performance.
7.4 We may also share personal data with professional advisers such as lawyers and accountants.
7.5 We may also share personal data with authorities where required by law.
7.6 We may also share personal data with buyers and advisers in connection with a merger, acquisition, or sale of assets.
7.7 We do not sell personal data.
7.8 Service providers are required to protect personal data and process it only on our instructions.

8. International transfers

8.1 Some service providers may process personal data outside the UK.
8.2 Where this happens, we use appropriate safeguards recognised under UK data protection law, such as contractual protections or adequacy mechanisms.

9. Security

9.1 We use appropriate technical and organisational measures designed to protect personal data, including access controls and monitoring.
9.2 No system is completely secure, but we aim to minimise risk and respond promptly to incidents.

10. Retention

10.1 We keep personal data only for as long as necessary for the purposes set out in this policy, including legal, accounting, and reporting requirements.
10.2 Certain records may be retained for up to six years after you stop being a customer.
10.3 Where enrichment data is shared under an NDA or customer agreement, retention and deletion or return terms follow that agreement.

11. Your rights

11.1 You may have rights to access, correct, delete, restrict, object to processing, and obtain a copy of your personal data in a portable format (in certain circumstances).
11.2 You can object to direct marketing at any time.
11.3 To exercise your rights, email privacy@compairai.com.
11.4 We may ask for information to verify your identity and usually respond within one month.
11.5 You have the right to complain to the UK Information Commissioner’s Office (ICO).

12. Cookies

12.1 We use cookies and similar technologies for core site functionality and analytics, managed via our cookie banner.
12.2 You can manage cookies through your browser settings and through the choices offered in our cookie banner.
12.3 Blocking cookies may affect how the website functions.

13. Third-party links

13.1 Our website or Services may include links to third-party sites.
13.2 We are not responsible for their content or privacy practices.

14. Updates to this policy

14.1 We may update this Privacy Policy from time to time.
14.2 We will post the updated version with a new effective date and “Last updated” date.