Privacy Policy

Last Updated: February 28, 2026

Homenids, LLC ("Company," "we," "us," or "our") operates ComplyAtlas. This Privacy Policy describes how we collect, use, store, and share information when you use our Service, including information contained in documents you upload.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Name, email address, company name, phone number
• Payment Information: Billing address, payment method details (processed securely by our payment processor; we do not store full card numbers)
• Monitoring Requests: Contractor names, license numbers, and states you wish to monitor
• Uploaded Documents: Certificate of Insurance (COI) documents and any other files you upload for tracking purposes
• Communications: Emails, support requests, and feedback you send us

1.2 Information Extracted from Uploaded Documents

1.3 Information We Collect Automatically

When you use our Service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent on the Service, reports accessed
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Similar Technologies: We use cookies to maintain sessions and remember preferences

1.4 Information from Third-Party Sources

We retrieve publicly available contractor license information from official state licensing board databases (e.g., CSLB, DBPR, ROC). This information is publicly accessible and is not considered personal information of our users. We do not retrieve information from insurance carriers, brokers, or agents.

2. How We Use Your Information

We use the information we collect to:

Purpose	Legal Basis
Provide and maintain the Service, including license monitoring and COI expiry tracking	Contract performance
Process and extract data from uploaded COI documents	Contract performance
Send COI expiry alerts (at 30, 14, and 7 days before extracted expiry dates)	Contract performance
Generate and deliver weekly compliance reports	Contract performance
Process payments and subscriptions	Contract performance
Send service-related communications and license status alerts	Contract performance
Respond to your requests and support inquiries	Contract performance
Improve and develop the Service (including document extraction accuracy)	Legitimate interest
Send marketing communications (with consent)	Consent
Comply with legal obligations	Legal obligation
Protect against fraud and abuse	Legitimate interest

3. How We Share Your Information

We do not sell your personal information. We do not sell, share, or distribute uploaded COI documents or data extracted from them to any third party for their own purposes.

We may share your information with:

• Service Providers: Third parties that help us operate the Service (payment processors, email providers, hosting services, document processing services)
• Legal Requirements: When required by law, subpoena, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

3.1 Third-Party Service Providers

We use the following categories of service providers:

• Payment processing (e.g., Stripe)
• Email delivery and alert services
• Cloud hosting and infrastructure
• Document processing and OCR services (for COI extraction)
• Analytics services

These providers are contractually obligated to protect your information and use it only for the services they provide to us. Document processing providers do not retain copies of your uploaded documents after processing is complete.

3.2 What We Do NOT Share

4. Uploaded Document Storage and Security

4.1 How We Store Uploaded Documents

When you upload a COI or other document to ComplyAtlas:

• The original document file is stored securely in encrypted cloud storage
• Extracted data (dates, names, policy numbers) is stored separately in our database for monitoring and alert purposes
• Documents are associated with your account and are not accessible to other users

4.2 Document Security Measures

We implement the following measures to protect uploaded documents:

• Encryption of documents in transit (TLS) and at rest (AES-256 or equivalent)
• Access controls limiting document access to authorized systems and personnel
• No public URLs or shared links to uploaded documents
• Regular security assessments of document storage infrastructure

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of uploaded documents.

4.3 Document Retention and Deletion

• Active accounts: Documents are retained for as long as your account is active and the associated contractor is being monitored
• After cancellation: Uploaded documents and extracted data may be deleted within 90 days of account cancellation or service termination
• On request: You may request deletion of specific uploaded documents at any time by contacting support@complyatlas.com
• Backups: Copies may persist in encrypted backups for up to an additional 30 days after deletion

You are responsible for maintaining your own copies of all documents you upload. ComplyAtlas is not a document storage or archival service.

5. General Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide the Service to you
• Required by law or for legitimate business purposes

After account deletion, we may retain certain non-document information (account records, payment history, communications) for up to 7 years for legal compliance, dispute resolution, and fraud prevention.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you, including a list of uploaded documents
• Correction: Request correction of inaccurate information or re-processing of incorrectly extracted COI data
• Deletion: Request deletion of your personal information, uploaded documents, and extracted data
• Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from marketing communications (you cannot opt out of service-related alerts while your subscription is active)

To exercise these rights, contact us at privacy@complyatlas.com.

6.1 California Residents

California residents have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what personal information is collected, including data extracted from uploaded documents
• Right to know whether personal information is sold or disclosed (we do not sell personal information)
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to deletion of personal information, including uploaded documents
• Right to non-discrimination for exercising privacy rights

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Secure document storage with restricted access
• Regular security assessments
• Employee and contractor training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for the Service to function (login sessions, security)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use the Service to improve it

You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality.

9. International Data Transfers

Your information, including uploaded documents and extracted data, may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

11. Third-Party Links

The Service may contain links to third-party websites, including official state licensing board websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a revised "Last Updated" date
• Sending an email to the address associated with your account for material changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy, our data practices, or to request deletion of uploaded documents, contact us at:

By using ComplyAtlas, you acknowledge that you have read and understood this Privacy Policy, including our practices regarding uploaded documents and extracted data.