Privacy Policy

We collect information you give us when you sign up, apply as a design partner, book a demo or contact us: your name, work email, company name and, if you provide it, your phone number.

When you use Complova, we collect the documents you upload (for example security policies, past questionnaire answers and other evidence about how your company operates), the security questionnaires you send us, the answers you approve or edit, and technical data such as IP address, browser type and device identifiers.

We use your information to provide the service: reading your documents, answering your security questionnaires with citations to those documents, flagging anything we cannot support, and returning the completed file. We also use it to communicate with you about your account and support, to improve the service, to comply with legal obligations under Australian law, and to detect and prevent fraud or security incidents.

We do not use your documents, questionnaires or answers to train AI models, and our AI provider does not train on them either.

Complova uses large language models provided by Anthropic, PBC to read your documents and draft answers. To do this, relevant document text and questionnaire content are sent to the Anthropic API, which processes data in the United States. Anthropic's commercial terms prohibit training on customer API data.

Our infrastructure providers — Supabase (database, authentication and file storage) and Amazon Web Services (application hosting) — may store or process your information outside Australia. We take reasonable steps under Australian Privacy Principle 8 to ensure overseas recipients handle personal information consistently with the Australian Privacy Principles.

Your data is encrypted in transit and at rest. Each company's documents and questionnaires are isolated from other customers' data, and access is restricted to authenticated members of your organisation and to Complova staff who need it to deliver and review your work.

We keep your documents and questionnaires for as long as your account is active, and delete them on request or when your account is closed, unless the law requires us to keep them longer.

We do not sell, rent or trade your personal information. We share it only with:

— Service providers who process it on our behalf (AI processing, cloud hosting, email delivery) under confidentiality obligations. — Law enforcement or government authorities when required by law. — A successor entity in the event of a merger, acquisition or sale of assets, subject to the same privacy commitments.

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you can ask to access the personal information we hold about you, request that it be corrected, complain about a breach of the Australian Privacy Principles, and opt out of marketing communications.

To exercise any of these rights, contact us at huzefa@complova.com. We will respond within 30 days.

We use only essential cookies needed for sign-in and session management. We do not use advertising cookies or third-party tracking.

We may update this policy from time to time. We will notify registered users of material changes by email before they take effect.

For privacy enquiries, contact us at huzefa@complova.com.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.