Privacy Policy

How DAC collects, stores, and protects your information.

EFFECTIVE DATE: MARCH 31, 2026

1. Who We Are

DA Compliance LLC ("DAC," "we," "us") operates the regulatory logic mapping platform at dacompliance.com. This policy describes how we handle your information when you use our website and services.

2. Information We Collect

Data Type	When Collected	Purpose
Email address, company name, contact name	Snapshot request (/start), portal login	Service delivery, account access
Questionnaire responses (102 questions across 21 sections)	Client intake (/intake)	Regulatory exposure analysis
Exposure Preview answers (12 questions)	Demo (/demo)	Directional exposure preview (not stored server-side)
Payment confirmation	Stripe checkout	Order fulfillment
Usage analytics	All pages	Site improvement

3. How We Store Your Data

• Supabase — Questionnaire responses, lead information, and workflow metadata are stored in Supabase, a cloud-hosted PostgreSQL database. Data is encrypted at rest and in transit.
• Netlify Identity — Portal authentication is handled by Netlify Identity. We store only the minimum credentials required for login (email and hashed password).
• No document storage — DAC does not retain uploaded documents. If a document upload feature is used, files are processed transiently and are not stored on our servers.

4. Analytics

We use Google Analytics (measurement ID: G-9LPCMWMRSM) to understand how visitors interact with the site. Google Analytics collects:

• Pages visited and time on page
• Referral source
• General geographic region (not precise location)
• Device type and browser

IP addresses are processed by Google but are not stored in raw form by DAC. We use IP anonymization where supported. You can opt out of Google Analytics by using a browser extension or disabling JavaScript.

5. Payment Processing

Payments are processed through Stripe. DAC does not see, store, or have access to your full credit card number. Stripe's privacy policy governs the handling of payment data. We receive only a confirmation of payment status and a truncated card identifier for record-keeping.

6. Data Sharing

DAC does not sell, rent, or share your personal information with third parties for marketing purposes. We may share data only in the following circumstances:

• Service providers — Supabase (database hosting), Netlify (site hosting and authentication), Stripe (payments), Anthropic (AI-assisted draft generation). Each provider processes data only as needed to deliver their service.
• Legal obligations — If required by law, subpoena, or court order.

7. AI Processing

DAC uses the Anthropic Claude API to assist in generating Snapshot drafts. Your questionnaire responses and applicable regulatory requirements are sent to the Anthropic API during draft generation. Anthropic's data use policies apply to this processing. DAC does not use your data to train AI models.

8. Data Retention

• Client questionnaire data and deliverables are retained for the duration of the client relationship and for a reasonable period afterward for support and record-keeping purposes.
• Exposure Preview (demo) responses are processed client-side only and are not stored on DAC servers.
• You may request deletion of your data at any time by contacting us.

9. Security

We implement reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption on all pages
• HSTS headers enforcing secure connections
• Restrictive CORS and Content Security policies
• Database access limited to authenticated service-role credentials
• Admin routes protected by key-based authentication
• Sensitive routes (/admin, /ops, /portal) blocked from search engine crawling

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise any of these rights, contact us at hello@dacompliance.com.

11. Cookies

DAC uses cookies only through Google Analytics and Netlify Identity. We do not use advertising cookies, retargeting pixels, or third-party tracking beyond analytics. You may disable cookies in your browser settings.

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

13. Contact

Questions about this privacy policy may be directed to hello@dacompliance.com.