Privacy Policy

Last updated: January 2026

Introduction

Compendio ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal productivity application.

We operate in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

Softaria lui Serdin SRL

Romania, European Union

For privacy inquiries, contact us at: support@compendio.net

Information We Collect

Information You Provide

  • Account Information: Email address, display name, password (hashed)
  • Content: Notes, journal entries, goals, habits, tasks, and projects you create
  • Settings: Your preferences, timezone, language settings
  • Payment Information: When you subscribe to Premium (processed by Stripe)

Information Collected Automatically

  • Usage Data: Anonymous or pseudonymous information about feature usage and interactions (such as page views and feature engagement), collected only with your explicit consent
  • Device Information: Browser type, operating system
  • Cookies: Essential cookies for authentication, optional cookies for preferences and analytics

Legal Basis for Processing (GDPR)

We process your data based on:

  1. Contract Performance: To provide the services you signed up for
  2. Legitimate Interests: To ensure platform security, prevent abuse, and improve the reliability and performance of our services, where these interests are not overridden by your rights and freedoms
  1. Consent: For analytics and optional cookies
  2. Legal Obligations: When required by law

How We Use Your Information

  • Provide and maintain the service
  • Process your transactions
  • Send you important updates about your account
  • Improve the application based on usage patterns
  • Ensure security and prevent abuse

Data Sharing

We share data only with:

  • Stripe: For payment processing (see Stripe Privacy Policy)
  • Umami Analytics: For anonymous usage analytics (with your consent)
  • Email Provider: For transactional emails

International Data Transfers

Some of our service providers (Stripe) may process data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Transfers to countries with an adequacy decision by the European Commission

You may request more information about these safeguards by contacting us.

We never sell your personal data.

Your Rights (GDPR)

You have the right to:

  • Access: Request a copy of your data (Settings → Privacy & Data → Export Data)
  • Rectification: Update your information in Settings
  • Erasure: Delete your account and all data (Settings → Privacy & Data → Delete Account)
  • Data Portability: Export your data in a standard format
  • Withdraw Consent: Change your cookie preferences at any time
  • Object: Object to processing based on legitimate interests
  • Lodge a Complaint: With your local data protection authority

Data Retention

  • Active accounts: Data retained while your account is active
  • Deleted accounts: All personal data is permanently deleted without undue delay upon account deletion, unless retention is required by law.
  • Backups: Removed within 30 days of account deletion

Data Security

We implement appropriate technical and organizational measures:

  • Encryption in transit (HTTPS/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Regular security reviews

Data minimisation

We collect only the minimum amount of personal data necessary to provide the service.

Cookies

Non-essential cookies and analytics are used only after obtaining your explicit consent, which can be withdrawn at any time.

See our Cookie Policy for detailed information about the cookies we use.

Children's Privacy

Our service is not intended for users under 16 years of age.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

For any questions about this Privacy Policy, please contact us at:

Email: support@compendio.net

This Privacy Policy is effective as of January 2026.