Privacy Policy

Information We Collect

We collect the following types of information:

• Account information: Name, email address, and password when you create an account.
• Billing information: Payment details during subscription purchase. Credit card information is processed through Stripe and is never stored on our servers.
• Business context: Information you provide during onboarding (niche, audience, brand voice, etc.) used to personalise AI responses.
• Instagram data: Posts, engagement metrics, and profile information accessed through the Meta Graph API with your explicit authorization.
• Chat history: Conversations with the AI assistant, stored to provide continuity and improve the service.
• Usage analytics: Cookies and similar technologies to understand how you use the platform.

How We Use Your Information

• Process transactions and manage your subscription
• Deliver personalised AI marketing advice based on your business context and Instagram data
• Send confirmations, support communications, and account updates
• Provide newsletters and promotional content (with opt-out options)
• Improve platform functionality and user experience
• Generate aggregated, anonymised insights to improve our AI system

Instagram Data

When you connect your Instagram account, we access your posts, engagement metrics (reach, saves, likes, comments, shares), and profile information through the official Meta Graph API. This access is:

• Read-only: We cannot post, delete, or modify anything on your Instagram account.
• Revocable: You can disconnect your Instagram at any time from your settings.
• Secure: Access tokens are stored server-side and never exposed to the browser.

Security Measures

Your data is secured using reasonable technical and organizational measures, including encrypted database storage with row-level security, secure HTTPS connections, and server-side token storage. We work to prevent unauthorized access or disclosure of your personal information.

Cookies & Analytics

We use cookies to improve your experience and monitor platform performance. You may disable cookies in your browser settings, though this may limit some functionality.

Third-Party Services

We work with trusted third-party providers to deliver our service:

• Supabase: Database and authentication
• Stripe: Payment processing
• Google / AI providers: AI model inference
• Meta: Instagram data access
• Vercel: Hosting and deployment

These providers handle your information only as required for service delivery.

International Operations

Our platform is operated in Canada but may be accessed globally. By using Compass, you consent to the transfer and processing of your data in Canada and other countries where our service providers operate.

Your Rights

You have the right to:

• Request access to your personal data
• Request correction or updates to your information
• Request deletion of your account and associated data
• Disconnect your Instagram account at any time
• Unsubscribe from marketing emails

To exercise these rights, contact us at support@thenorthboundlabs.com

Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of Compass after changes constitutes acceptance of the updated policy.

Contact

For questions about this privacy policy, contact us at support@thenorthboundlabs.com