1. Information We Collect
Account and authentication information
When you create or use an account, we may process your email address, authentication identifiers, account status, and related sign-in information. If you choose Google sign-in, Google and our authentication provider may provide the identifiers and account information needed to authenticate you.
Membership and billing information
We process membership and subscription metadata such as subscription status, trial or billing-period dates, cancellation status, and Stripe customer/subscription identifiers. Payment-card numbers and sensitive payment credentials are handled by Stripe and are not stored in the Device Compass application database.
Usage and technical information
Our hosting, database, authentication, security, and payment providers may process technical information such as IP address, browser or device information, timestamps, request logs, error logs, authentication events, and similar operational data. Search terms and requests are processed as necessary to return results and protect or troubleshoot the service.
Communications
If you contact us for support, we may receive the information you choose to provide in that communication.
Beta access requests
When you request beta access, we collect your email and role, plus any name, organization, pilot interest, or notes you choose to provide. Netlify processes these form submissions on our behalf. We use them to review requests, provide access instructions, administer the beta, and request feedback. Submission does not enroll you in a paid subscription.
Beta and product analytics
For signed-in Device Compass users, we may record product-usage events such as successful account sessions, search terms, whether a search returned results, result counts, search duration, access type (for example beta, paid, or administrator), membership-management opens, feedback submissions, and timestamps. We use this information to evaluate search quality, identify missing terminology, diagnose performance problems, improve Device Compass, and administer the private beta.
The Device Compass product-analytics tables are not designed to collect IP addresses, device fingerprints, payment-card details, or patient information. Please do not enter protected health information (PHI), patient identifiers, passwords, or other sensitive information into Device Compass searches or feedback.
2. How We Use Information
We use personal information to:
- create, authenticate, secure, and administer user accounts;
- determine membership eligibility and provide protected Device Compass access;
- start, maintain, cancel, or otherwise administer subscriptions and trials;
- provide Stripe Checkout and the Stripe Customer Portal;
- operate, maintain, troubleshoot, improve, and secure the service;
- prevent abuse, fraud, unauthorized access, and security incidents;
- respond to support requests and service communications; and
- comply with legal, tax, accounting, regulatory, and contractual obligations.
3. Cookies and Local Storage
Device Compass and its service providers may use cookies, browser storage, authentication tokens, and similar technologies that are necessary to keep you signed in, secure sessions, remember service state, process payments, and provide core functionality. Device Compass does not currently use the site for third-party behavioral advertising.
4. How We Share Information
We may share or make information available to service providers that process data on our behalf or provide infrastructure necessary to operate Device Compass, including:
- Stripe — payment processing, subscriptions, billing, invoices, and customer-portal services;
- Supabase — authentication and database infrastructure;
- Netlify — website hosting, deployment, serverless functions, and related operational logs; and
- Google — when you choose Google as a sign-in provider.
We may also disclose information when required by law, legal process, court order, regulatory request, or when reasonably necessary to protect users, our rights, security, or the integrity of the service. Information may also transfer as part of a merger, acquisition, financing, reorganization, or sale of all or part of the business, subject to applicable law.
5. We Do Not Sell Personal Information
We do not sell personal information for money. We do not currently use personal information for cross-context behavioral advertising.
6. Data Retention
We retain account, membership, billing, security, and operational information for as long as reasonably necessary to provide the service, maintain legitimate business and security records, satisfy legal or accounting obligations, resolve disputes, and enforce agreements. Stripe and other service providers may retain billing or transaction records according to their own legal and compliance obligations.
7. Security
We use reasonable administrative and technical safeguards appropriate to the nature of the service, including authenticated access controls and restricted server-side credentials. No online service can guarantee absolute security, and users are responsible for protecting their own credentials and devices.
8. Your Choices and Privacy Rights
You may update certain billing information and payment methods through the Stripe Customer Portal. You may cancel a membership through the same portal.
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information, or to object to or restrict certain processing. These rights are subject to applicable law and legitimate retention requirements. Requests may be submitted through the support contact information displayed in Device Compass, Stripe Checkout, or the Stripe Customer Portal.
9. Protected Health Information and Sensitive Data
Device Compass is not intended to function as an electronic health record, patient-data repository, or HIPAA-regulated clinical system. Do not submit PHI or patient-identifying information through search fields, account fields, or ordinary support communications. If your organization has special regulatory or contractual requirements, you are responsible for evaluating whether use of Device Compass is appropriate for your environment.
10. Children’s Privacy
Device Compass is a professional service and is not directed to children under 18. We do not knowingly seek to collect personal information from children under 18.
11. International Processing
Device Compass is operated from the United States. Information may be processed in the United States or other locations where our service providers operate. Applicable privacy protections may differ from those in your home jurisdiction.
Optional Voice Search
Voice search starts only when you select the microphone button and grant browser permission. Your browser or platform speech provider may process audio on its servers under its own privacy terms. Device Compass does not record or store microphone audio. Recognized text appears in the search field for review; when submitted, it is handled like a typed search, including existing search activity logging. Do not dictate patient information or other sensitive data. Voice availability depends on your browser, device, and organization policies.
12. Third-Party Sites and Services
When you open model resources, an available reference image may load directly from an external publisher or image host. That host receives your network request, including your IP address. Device Compass uses a no-referrer image request and stores only image-link metadata, attribution, and verification details; it does not host the image files.
Model resources link to external publishers and search providers in a new tab. Selecting a search link sends the displayed manufacturer or model terms to the named search provider or public database, such as Google or AccessGUDID. Device Compass does not download, mirror, or host the linked documents. External websites may have their own account requirements and privacy practices.
Device Compass may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.
13. Changes to this Policy
We may update this Privacy Policy as the service, technology, law, or business practices change. The current version will be posted on this page with the effective date shown above.
14. Contact
Privacy questions or requests may be sent to beta@thedevicecompass.com or through the support contact information displayed in Device Compass, Stripe Checkout, or the Stripe Customer Portal.