CoComply Website Privacy Policy

CoComply Website Privacy Policy

Effective Date: March 4, 2026
Last Updated: March 4, 2026
Version: 1.0
Applies To: www.cocomply.ai

1. Introduction

CoComply Technologies Private Limited ("CoComply", "we", "us", or "our") respects the privacy of individuals who visit our website. This Website Privacy Policy explains what information we collect when you visit our website, how we use it, and your rights and choices regarding that information.

This policy applies only to our website (www.cocomply.ai). If you are an authorized user of the CoComply application platform, please refer to the separate CoComply Application Privacy Policy.

CoComply acts as a Data Controller for all personal information collected through this website.

2. Information We Collect

2.1 Information You Voluntarily Provide

When you interact with our website, you may choose to provide:
- Contact Information: Name, business email address, company name, phone number, and job title submitted via demo request forms, contact forms, or newsletter sign-ups
- Communication Content: Messages and inquiries submitted through web forms or email

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information.

Via Google Analytics (Google LLC):
- IP address (anonymized to city/region level, full IP is not stored)
- Browser type and version
- Device type (desktop, mobile, tablet) and operating system
- Referring website or search engine
- Pages visited, sequence of pages, and time spent on each page
- Click patterns and scroll depth
- General geographic location (country and city level only)
- Session duration and visit frequency

Directly by our website:
- Cookie identifiers and session tokens (see Section 6)
- Browser language, screen resolution, and time zone
- JavaScript enablement status

2.3 What We Do NOT Collect

- We do not collect payment card details, bank account numbers, or financial information
- We do not collect government-issued identification numbers
- We do not knowingly collect personal information from individuals under 18 years of age
- We do not collect or access any data from our application platform through this website

3. How We Use This Information

We use the information collected through our website solely for the following purposes:
- Responding to demo requests and sales inquiries
- Sending marketing communications
- Website performance analysis
- Understanding visitor behavior
- Measuring campaign effectiveness
- Preventing fraud and security incidents
- Legal compliance

We do not use website data to:
- Make automated decisions about individual visitors
- Build individual behavioral profiles for sale to third parties
- Target advertising toward visitors on other websites or platforms
- Discriminate against visitors based on their privacy choices

4. Google Analytics, Detailed Disclosure

We use Google Analytics 4 (GA4), operated by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

4.1 What Google Analytics Does

Google Analytics places cookies on your device to measure and report on how visitors interact with our website. The data collected helps us understand traffic sources, popular content, and user behavior in aggregate.

4.2 How We Have Configured Google Analytics

- IP anonymization is enabled, full IP addresses are not stored by Google
- Data retention in GA4 is set to 14 months
- Google Signals: Disabled
- Advertising features / Remarketing: Disabled

4.3 Data Sharing with Google

Analytics data is transmitted to Google's servers, which may be located in the United States. Google processes this data under its own privacy policy, available at https://policies.google.com/privacy. CoComply and Google have a Data Processing Agreement in place governing this transfer.

4.4 Google's Use of Data

Google does not use your analytics data for its own advertising purposes when we have configured GA4 in analytics-only mode. If advertising features are enabled, Google may associate your visit with your Google account for advertising purposes, subject to your Google account settings.

5. Your Rights and Opt-Out Options

5.1 US Residents, Opt-Out Rights

CoComply does not require you to consent before collecting analytics data. However, consistent with US state privacy laws, you have the right to opt out of the following at any time:
- Sale or sharing of personal information (applicable under CCPA for California residents, and equivalent laws in Colorado, Virginia, Connecticut, Texas, Oregon, and other states)
- Processing for targeted advertising (applicable under Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and other state laws)
- Profiling for decisions that produce legal or similarly significant effects

To exercise your opt-out rights:
You may opt out by visiting our privacy preference center at: https://cocomply.ai/legal/website-privacy-policy

You may also opt out via:
- Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout
- Google Ad Settings: https://adssettings.google.com
- Cookie settings managed via your browser (see Section 6)

5.2 Global Privacy Control (GPC)

CoComply honors Global Privacy Control (GPC) signals. If your browser transmits a GPC signal indicating that you wish to opt out of the sale or sharing of your personal information, our website will automatically suppress applicable tracking, including Google Analytics data collection where required, without any additional action needed from you.

This is required by law in California, Colorado, Connecticut, Oregon, and New Hampshire, and we apply it universally to all visitors.

5.3 Additional Rights (All Visitors)

Depending on your jurisdiction, you may also have the right to:
- Know / Access: Request details about the personal information we have collected about you
- Delete: Request deletion of your personal information (subject to legal retention obligations)
- Correct: Request correction of inaccurate information
- Data Portability: Receive your information in a portable format
- Non-Discrimination: We will not discriminate against you for exercising any privacy rights

To submit a request:
- Email: privacy@cocomply.ai
- Subject Line: Privacy Rights Request, Website
- We will acknowledge your request within 5 business days and fulfill it within 45 days (extendable by an additional 45 days with notice, as permitted by applicable law)

5.4 Marketing Opt-Out

If you have subscribed to CoComply marketing communications, you can unsubscribe at any time by:
- Clicking the "Unsubscribe" link in any marketing email
- Emailing privacy@cocomply.ai with "Unsubscribe" in the subject line

Opting out of marketing does not affect analytics data collection. To opt out of analytics, use the methods in Section 5.1.

6. Cookies

6.1 What We Use

- Essential cookies: CoComply website functionality and security (Session)
- Analytics cookies: Google Analytics visitor measurement and behavior analysis (14 months)
- Marketing cookies: Google (if enabled) campaign attribution and remarketing (90 days)
- Preference cookies: CoComply cookie/privacy preferences (1 year)

6.2 Managing Cookies

You can delete or block cookies through your browser settings:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Options > Privacy and Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions

Note: Disabling essential cookies may impair basic website functionality. Disabling analytics cookies will not affect your ability to browse the website.

7. Data Retention

- Google Analytics data: 14 months (Set in GA4 data retention settings)
- Marketing contact data: 3 years from last engagement, or until unsubscribe (Sales and relationship management)
- Web form inquiries: 2 years from submission (Business records and follow-up)
- Cookie preference records: 1 year (Audit trail for opt-out compliance)

Upon expiry of the above periods, data is deleted or anonymized automatically.

8. Data Sharing and Third Parties

We share website visitor data only with the following parties:
- Google LLC (Google Analytics), USA, website analytics (Data Processing Agreement, SCCs)
- CRM Platform, USA, managing sales leads (Data Processing Agreement)
- Email Marketing Platform, USA/EU, marketing communications (Data Processing Agreement)

We do not sell, rent, or broker personal information to data brokers or third-party advertisers.

All third-party processors are contractually required to process data only on our instructions, maintain appropriate security, and support data subject rights requests.

9. Data Security

CoComply implements comprehensive technical and organizational security measures to protect personal information.

9.1 Technical Security Measures

- Encryption in Transit: TLS 1.3 encryption for all website communications
- Encryption at Rest: AES-256 encryption for stored data
- Access Controls: Role-based access with multi-factor authentication
- Network Security: Firewalls and intrusion detection systems
- Vulnerability Scanning: Regular security assessments and penetration testing

9.2 Organizational Security Measures

- Security Training: Regular employee training on data protection
- Background Checks: Employee screening and confidentiality agreements
- Incident Response: Documented breach notification protocols
- Vendor Management: Security assessments of third-party providers

10. International Data Transfers

CoComply is based in USA. When you visit our website, analytics and contact data may be transferred to and processed in the United States (Google and CRM servers). We implement the following safeguards for such transfers:
- Standard Contractual Clauses (SCCs) with Google and other US-based processors
- Data Processing Agreements specifying security and confidentiality obligations
- Technical measures including TLS encryption in transit

For visitors from the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure compliance with GDPR requirements for international transfers.

11. Children's Privacy

This website is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has submitted personal information through our website, please contact us at privacy@cocomply.ai and we will delete it promptly.

12. Third-Party Links

Our website may contain links to third-party websites, services, or resources. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

We are not responsible for the privacy practices or content of third-party websites.

13. Changes to This Policy

We may update this policy periodically to reflect changes in our practices or applicable law.

When we make material changes:
- We will update the "Last Updated" date at the top of this policy
- For significant changes, we will place a notice on our website homepage for 30 days

We encourage you to review this policy periodically. Continued use of our website after changes constitutes acknowledgment of the updated policy.

14. Contact Us

CoComply Inc
169 West 2710 South Circle Suite 202A
St. George, UT 84790
Privacy Inquiries: privacy@cocomply.ai
Response Time: 5 business days for inquiries; 45 days for formal rights requests

15. Supervisory Authorities

If you are located in the European Economic Area (EEA) or United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your privacy concerns.

For EU residents: EU Data Protection Authorities - https://edpb.europa.eu/about-edpb/board/members_en

For UK residents: Information Commissioner's Office (ICO) - https://www.ico.org.uk

For Indian residents: Contact details will be provided once India's Data Protection Board is established under the DPDP Act 2023

Appendix A: US State Privacy Laws Compliance

This policy is designed to comply with comprehensive privacy laws in the following US states:
- CCPA / CPRA (California): Opt-out link, GPC honoring, no-sale disclosure
- VCDPA (Virginia): Opt-out of targeted advertising
- CPA (Colorado): GPC support, opt-out rights
- CTDPA (Connecticut): GPC support, opt-out rights
- TDPSA (Texas): Privacy notice, opt-out rights
- OCPA (Oregon): GPC support (2026)
- NHPA (New Hampshire): GPC support (2025)

Appendix B: Configuration Checklist

Before publishing this policy, please complete the following:
1. Google Analytics Configuration: Specify whether Google Signals and Advertising Features are enabled or disabled in Section 4.2
2. Opt-Out Preference Center: Add the actual URL to your privacy preference center in Section 5.1
3. Contact Phone Number: Add your business phone number in Section 14
4. GPC Implementation: Ensure your website technically honors GPC signals (consider using tools like OneTrust, Osano, or custom implementation)
5. Cookie Banner: Implement appropriate cookie notice/banner for visitors (especially if you have EU visitors)

Definitions

Data Controller: The entity that determines the purposes and means of processing personal data. CoComply acts as Data Controller for Website Visitor data.

Global Privacy Control (GPC): A browser-based signal that allows users to automatically opt out of the sale or sharing of their personal information across websites.

Personal Information: Any information relating to an identified or identifiable individual, including but not limited to name, email address, IP address, and online identifiers.

Standard Contractual Clauses (SCCs): Contractual terms approved by the European Commission to ensure adequate protection for personal data transferred outside the EEA.

Website Visitors: Individuals who visit the CoComply website, whether or not they submit inquiry forms or subscribe to communications.

Acknowledgment: By using the CoComply website, you acknowledge that you have read, understood, and agree to be bound by this Website Privacy Policy.