Privacy

Last updated 16 August 2026

Who this covers

Compass Marketing builds websites and a lead-tracking app for small businesses. That means two different people read this page, and different things apply to each.

• Visitors — you landed on a website Compass built for a business. The business is who your information is for. We hold it on their behalf.
• Account holders — you are a business owner or a member of their team, signed in to the Compass app.

If you are a visitor to a Compass-built site

When you fill in a contact form

We keep your name, email address, phone number and whatever you write in the message, along with the date. It is stored as a lead for the business whose site you were on, and they are notified.

When you use the chat

What you type is sent to Anthropic’s Claude service so a reply can be generated, and the conversation is saved so the business owner can read it and answer you. If you give your contact details in the chat, they become a lead in the same way a form submission does.

When you simply look at a page

We count visitors so the business can see whether anyone is finding their site. We do not store your IP address to do it. Your address and browser are combined with today’s date and a secret key, and turned into a one-way code that cannot be turned back into an address. That code changes every night, so the same person tomorrow is a different visitor and nobody can be followed from one day to the next. We keep the page you landed on and the date. No cookie is set.

If you are an account holder

We hold:

• Your email address, which is how you sign in.
• Your first name, if one has been set, so the app can greet you.
• A push subscription or device token for each phone you turned alerts on for, plus the browser or device name so you can tell one from another.
• If you joined using a team code rather than an email: the date, a one-way code derived from your IP address, and your browser string. That is recorded so the business owner can see how many devices used their code. Your raw address is never stored.
• The notes and call logs you write against your own customers. Those are the business’s records, not ours.

What we deliberately do not do

• We never write down a raw IP address. Anywhere we need to recognise a repeat visitor or stop abuse, we store a one-way code instead.
• No third-party tracking. No advertising pixels, no analytics networks, no data brokers.
• Notifications never carry a customer’s message. A push alert says who got in touch and nothing more, because notifications appear on a locked screen that anyone nearby can read.
• We never mix businesses. Every record belongs to exactly one business and the database refuses to return another’s.
• We do not sell information, and we do not share it for anyone else’s advertising.

Who else handles the information

Running the service means a small number of companies process data on our behalf. They are not permitted to use it for anything else.

• Supabase — stores the database and handles sign-in.
• Vercel — hosts the websites and the app, and keeps short-lived server logs.
• Anthropic — generates chat replies. Chat messages are sent there.
• Resend — delivers sign-in codes and lead alert emails.
• Expo, Apple and Google — deliver push notifications. The notification includes the name of the person who got in touch, so that name passes through their systems. The message they wrote does not.

We will also hand over information if the law genuinely requires it, and we will tell the affected business unless we are forbidden from doing so.

How long it is kept

• Leads, customers, messages and notes — for as long as the business’s subscription is running, and deleted within 30 days of it ending.
• Visitor counts — the codes are meaningless after the day they were made. We keep the daily totals so a business can compare one month to another.
• Your account — removed immediately when you delete it. There is no waiting period and no archived copy.

Deleting your information

Account holders: open the Compass app, go to Settings, then Account, then Delete account. Your sign-in, your access and the alert settings on your phones are destroyed straight away and cannot be restored. Your business’s leads, customers and messages stay, because they belong to the business rather than to your account — if you want those removed as well, the business owner should ask us.

Visitors: ask the business whose site you contacted, or email us at beauleach21@compass-integration.com and we will pass it on and act on it.

Depending on where you live you may also have the right to ask what we hold about you, to have it corrected, or to object to how it is used. Write to us and we will answer. We do not charge for this and we will not treat you differently for asking.

How it is protected

Everything travels over an encrypted connection. Access to each business’s records is enforced by the database itself, not only by the app, so a fault in one cannot expose the other. Keys that can read across businesses exist only on our servers and are never sent to a browser or a phone.

One thing worth saying plainly: a business owner’s team code lets anyone who has it sign in to that business’s app. It does not expire and it cannot be changed. Owners should share it only with people they intend to have full access.

Children

Compass is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has sent us something, email us and we will delete it.

Changes to this page

If what we collect changes, this page changes with it and the date at the top moves. If the change is significant we will tell account holders directly rather than relying on you to check.

Contact

Compass Marketing
beauleach21@compass-integration.com
719-629-8876