Privacy Policy

01Scope & who we are

This policy applies to information we process about applicants, account holders, authorized users, and visitors to our website (collectively, “you”) in connection with The Compass software-as-a-service platform and related services, communications, and events.

The Compass is a business tool sold to healthcare and behavioral health organizations. Where your employer or organization is our customer, that organization controls your account and may set its own policies governing your use of the platform. This Privacy Policy describes our own practices as the operator of the service.

02Information we collect

Information you provide

• Account & application data — your name, job title, work email, phone number, organization name, and the states or facility types relevant to your work, submitted when you apply for or set up access.
• Profile & preferences — settings, notification preferences, saved items, and information you choose to add to your member profile.
• Community content — posts, comments, questions, and files you share in the Community, the Help Center, or other collaborative spaces.
• Support & communications — messages, feedback, and records of your correspondence with our team.
• Billing details — where applicable, the contact and plan information needed to administer your subscription. Payment card data is handled by our payment processor and is not stored on our systems.

Information collected automatically

• Usage data — pages and features viewed, searches run, content accessed, and actions taken within the platform.
• Device & log data — IP address, browser type, operating system, referring pages, and timestamps.
• Cookies & similar technologies — used to keep you signed in, remember preferences, and understand product usage. See Cookies & analytics.

Information from third parties

We may receive limited information from your organization (for example, to provision your account), from identity or single sign-on providers you use to log in, and from service providers that help us operate the platform.

03How we use information

We use the information described above to:

• Provide, maintain, secure, and improve The Compass and its features;
• Review applications, create and administer accounts, and authenticate users;
• Deliver regulatory updates, tracking, market data, education, and community features relevant to your work;
• Respond to your requests and provide expert guidance and support;
• Send service, security, and administrative messages, and — where permitted — relevant product updates;
• Monitor usage, diagnose problems, and develop new functionality;
• Detect, prevent, and address fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

04Legal bases for processing

Where required by law (for example, under the EU/UK GDPR), we rely on the following legal bases to process your personal information:

• Contract — to provide the services you or your organization have requested;
• Legitimate interests — to operate, secure, and improve the platform in ways you would reasonably expect;
• Consent — for optional communications or technologies where we ask for it, which you may withdraw at any time; and
• Legal obligation — to meet our regulatory, tax, and compliance requirements.

05How we share information

We share personal information only as described here:

• Service providers — vendors that host infrastructure, send communications, process payments, and provide analytics, bound by contract to protect your data and use it only on our instructions;
• Your organization — administrators at the organization that holds your account may access account and usage information associated with that account;
• Within community spaces — content you post is visible to other authorized members of those spaces;
• Legal & safety — where we believe in good faith that disclosure is required to comply with law, enforce our terms, or protect the rights, property, or safety of HelpUcompli, our users, or others; and
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

06Health information & HIPAA

The Compass is a compliance intelligence and education platform. It is not intended to receive, store, or process protected health information (PHI) about patients, and you should not upload PHI into community posts, support tickets, or other free-text fields.

07Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the platform, and understand how the product is used so we can improve it. Strictly necessary cookies are required for the service to function; analytics and preference cookies are optional.

You can control cookies through your browser settings. Disabling some cookies may affect the availability or performance of certain features.

08Data security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, least-privilege permissions, logging, and regular review of our practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please use a strong, unique password and keep your credentials confidential.

09Data retention

We retain personal information for as long as needed to provide the services, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete it or de-identify it. Retention periods vary depending on the type of data and the purpose for which it was collected.

10Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information, subject to legal exceptions;
• Object to or restrict certain processing, and withdraw consent where processing is based on it;
• Request a copy of certain information in a portable format; and
• Appeal a decision or lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. If your account is administered by your organization, we may direct certain requests to that organization.

11International transfers

HelpUcompli is based in the United States, and we process information in the United States and other countries where we or our service providers operate. Where we transfer personal information across borders, we use appropriate safeguards — such as standard contractual clauses — where required by law.

12Children's privacy

The Compass is a professional tool intended for use by adults in a business capacity. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, please contact us so we can delete it.

13Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice through the platform or by email. Your continued use of The Compass after an update takes effect constitutes acceptance of the revised policy.