Who is responsible?
ComplyComp is operated by Accomplice AB, Swedish organisation number 559023-6708 (“we”, “us”). Accomplice AB is the controller for website visitor data, enquiries and account administration.
For privacy questions or requests, email hello@complycomp.se.
What we collect and why
- Website delivery and security: our hosting provider processes technical request information, such as IP address, browser information and the requested page, to deliver and protect the website. The legal basis is our legitimate interest in running a secure service.
- Enquiries: if you email us, we receive your contact details and the information you choose to share. We use this to respond and follow up, based on our legitimate interest in handling business enquiries, or to take steps towards a contract you request.
- Accounts: when you register or sign in, we process your email address, name, authentication details and, if provided by your sign-in provider, profile image. We use these to administer your account and provide the service under our contract with you. Business contact records may instead be processed in our legitimate interest in managing our customer relationship.
- Campaign measurement: only with your consent, we save your landing page, referring page, campaign tags and first-visit time. Referrer query strings and fragments are excluded. If you then register or sign in, this information can be linked to your account profile to understand acquisition. We do not load advertising pixels or third-party analytics on the marketing pages.
Workspace data and AI features
When a customer uploads employee or payroll data, the customer determines why it is processed and is normally the controller. We process that information on the customer’s behalf to provide ComplyComp. The customer’s instructions and applicable data processing agreement govern that processing. Employees should contact their employer about workplace data.
If you use the AI assistant or AI-assisted import mapping, relevant prompts, questions or file samples are sent to OpenAI to provide the requested feature. The assistant’s automatic context uses aggregated workspace information with small-group safeguards. Avoid entering unnecessary personal data in questions. Signed-in assistant conversations are saved to your account; demo conversations are held in page memory.
Opening a marketing page does not send payroll data or questions to an AI provider.
How long information is kept
Your cookie choice and optional campaign record are stored in your browser for up to 180 days. Your selected language remains until you change it or clear browser storage. See the cookie policy for details.
Account and enquiry information is kept for as long as needed to provide the service, handle the enquiry, meet legal obligations or establish and defend legal claims. Customer workspace data follows the customer’s instructions and applicable agreement. You can contact us to request deletion or details about retention for your situation.
Your rights and choices
Depending on the circumstances, you can request access to, correction or deletion of your personal data, restriction of processing, and portability. You can object to processing based on legitimate interests, including direct marketing. Where we rely on consent, you can withdraw it at any time without affecting processing already carried out.
Use Cookie settings in the footer to withdraw optional campaign measurement. This removes its browser record; it does not automatically erase acquisition information already saved to an account. Contact us for that request. We normally respond to rights requests within one month and may need to verify your identity.
You can lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local data protection authority.
Updates and contact
We update this policy when the service or our processing changes. The date above identifies the current version. For questions about this policy, a provider or your personal data, contact hello@complycomp.se.