CompSlate privacy & data

For that data ("customer data"), the company is in charge and CompSlate acts as its service provider (a "processor" in some laws)

Account data: names, work email addresses, roles and reporting lines of the people a workspace admin adds.

Billing data: invoices and payment records. If you pay by card, Stripe handles the card; we never see or store card numbers.

Built-in chat: the messages people type in the built-in chat and its replies, stored with the workspace so a conversation can be picked up again.

Technical data: IP addresses for rate limiting and security, and a sign-in cookie.

Activity log: which person made which change, when, and whether it came from the web app, the built-in chat or an AI assistant.

names, work email addresses, job titles, roles and reporting lines

compensation terms (plans, OTE, base, quota and pay components); deals and bookings; calculated payouts and payments

messages typed in the built-in chat

the activity log of who changed what, when and how

Only to run the service for your workspace: calculating pay, showing comp cards and team views, sending sign-in links and notices an admin asks for, billing, security, and support.

Purpose: providing, securing and supporting the Service for Customer, as described in the Terms

Hosting, database and backups, and sending email (sign-in links and notices)

The AI model behind the built-in chat: what people type in it and the workspace data the chat reads to answer.

Card payment processing, for customers who pay by card

DNS for our domain, and forwarding of email sent to our addresses

Web fonts on our pages; sees visitors' IP addresses

Our support mailbox: email you send to our addresses

Workspace data: for as long as the workspace exists.

After deletion: removed within 30 days; database backups roll off within 35 days.

Server logs: 90 days.

Sessions: 30 days.

When the Terms end, Customer has 30 days to export its data or ask CompSlate for an export; after that, CompSlate deletes Customer's personal data from the Service

copies in database backups roll off within a further 35 days

In Amazon Web Services in the United States (us-east-1), encrypted at rest and in transit.

CompSlate stores Customer Data in the United States, in Amazon Web Services' us-east-1 (N. Virginia) region.

United States (us-east-1, N. Virginia)

The current list, with locations, is on our Subprocessors page.

Data processing addendum

Admins can export everything (CSV or Excel) and delete people, plans and deals at any time. To delete a whole workspace, or to access, correct or delete personal data about you, email legal@compslate.com .

Know and access: what personal information we have about you, where it came from, why we use it and who we share it with, and a copy of it.

Delete: ask us to delete personal information about you, subject to exceptions the law allows (for example, records we must keep).

Correct: ask us to fix inaccurate personal information.

Appeals. If we decline your request, you can appeal by replying to our decision.

Admins can view, correct, export and delete most personal data themselves in the Service.

CompSlate will provide reasonable help for Customer to respond to requests to exercise rights under Data Protection Laws.

We don't sell personal information or share it for cross-context behavioral advertising, and we haven't in the past 12 months, so there is nothing to opt out of.