Privacy Policy

Community Compass ("we", "us") provides software for homeowners' associations (HOAs) and condominium communities: an AI assistant grounded in a community's governing documents, plus tools for managers and residents to run community operations. This policy explains what information we collect, how we use it, who we share it with, and the choices you have.

1. Who this applies to

This policy covers visitors to our website, residents and managers who use the web app or the iOS app, and property-management companies who administer communities through Community Compass.

2. Information we collect

Account information

• Name and email address
• A password (stored only as a salted hash — never in plain text)
• If you sign in with Google, Microsoft, or Apple: the unique account identifier and email address that provider returns to us. We do not receive your provider password.
• Your role and membership within one or more communities

Content you provide

• Questions you ask the AI assistant, and the conversation history
• Governing documents (bylaws, CC&Rs, rules) uploaded by community managers
• Posts, listings, messages, calendar events, and architectural- review submissions you create within your community

Usage and technical information

• Feature usage and AI token counts (used for billing and quotas)
• Log and diagnostic data (timestamps, error reports, approximate request metadata)
• For the iOS app: standard device information needed to run the app. We do not use any advertising identifier and we do not track you across other apps or websites.

Payment information

Subscription billing is handled by Stripe. We do not store your full card number — Stripe processes and stores payment details under its own terms. We retain only a customer identifier and subscription status.

3. How we use information

• To provide the service: answer bylaw questions, run community tools, and keep your account and memberships working
• To process subscription billing
• To send transactional email (verification, password reset, notifications) — not marketing
• To enforce usage limits and protect against abuse
• To diagnose errors and improve reliability

4. AI processing

When you ask the assistant a question, your question and the relevant excerpts of your community's governing documents are sent to our AI providers (Anthropic for answering, Voyage AI for document indexing) to generate a response. Our providers process this data to return an answer and, per their API terms, do not use it to train their models. Answers are grounded in your community's uploaded documents.

5. Who we share information with

We do not sell your personal information. We share data only with service providers ("subprocessors") that help us run the service, each under contractual confidentiality and data-protection terms:

Provider	Purpose
Anthropic	AI assistant responses (Claude)
Voyage AI	Document embedding / retrieval
Stripe	Subscription payment processing
Resend	Transactional email delivery
Cloudflare	Bot / abuse protection (Turnstile)
Google, Microsoft, Apple	Optional single sign-on
DigitalOcean	Application + database hosting
Sentry	Error monitoring (no request bodies / PII)

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

6. Within your community

Community Compass is multi-tenant. Content you post to community surfaces (directory, marketplace, messages, calendar, town square) is visible to other members of that community according to the feature. Your private AI conversations are visible only to you and are never exposed through the manager or operator dashboards — those show only aggregate counts.

7. Data retention

• Account data is retained while your account is active.
• You can delete your account at any time from Settings → Delete account. Deletion is permanent: we remove your profile (name, email, password, and any linked Google, Microsoft, or Apple sign-ins), delete your chat history, notifications, and push-notification tokens, scrub the contents of direct messages you sent, and withdraw your community posts and listings. De-identified, aggregate usage records may be retained for billing and accounting. You may create a new account later.
• Community managers control their community's uploaded documents and can remove them.

8. Your choices and rights

• Access & correction: view and edit your profile in Settings.
• Deletion: delete your account from Settings → Delete account, or contact us. A community manager or operator can also remove an account on request.
• Sign-in methods: link or unlink Google / Microsoft / Apple sign-in from Settings.

Depending on where you live, you may have additional rights under laws such as the CCPA or GDPR (access, portability, deletion, objection). Contact us to exercise them.

9. Security

Connections are encrypted with TLS. Passwords are stored as salted hashes. Access to production data is limited. No system is perfectly secure, but we take reasonable measures to protect your information.

10. Children

Community Compass is intended for adults managing or living in a community association. It is not directed to children under 13, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice within the app.

12. Contact

Questions about this policy or your data: mike@communitycompass.ai.