[{"data":1,"prerenderedAt":529},["ShallowReactive",2],{"navigation":3,"policy-privacy":48},[4,23],{"title":5,"path":6,"stem":7,"children":8,"icon":22},"Getting Started","\u002Fdocs\u002Fgetting-started","1.docs\u002F1.getting-started\u002F1.index",[9,12,17],{"title":10,"path":6,"stem":7,"icon":11},"Introduction","i-lucide-house",{"title":13,"path":14,"stem":15,"icon":16},"Installation","\u002Fdocs\u002Fgetting-started\u002Finstallation","1.docs\u002F1.getting-started\u002F2.installation","i-lucide-download",{"title":18,"path":19,"stem":20,"icon":21},"Usage","\u002Fdocs\u002Fgetting-started\u002Fusage","1.docs\u002F1.getting-started\u002F3.usage","i-lucide-sliders",false,{"title":24,"path":25,"stem":26,"children":27,"page":22},"Essentials","\u002Fdocs\u002Fessentials","1.docs\u002F2.essentials",[28,33,38,43],{"title":29,"path":30,"stem":31,"icon":32},"Markdown Syntax","\u002Fdocs\u002Fessentials\u002Fmarkdown-syntax","1.docs\u002F2.essentials\u002F1.markdown-syntax","i-lucide-heading-1",{"title":34,"path":35,"stem":36,"icon":37},"Code Blocks","\u002Fdocs\u002Fessentials\u002Fcode-blocks","1.docs\u002F2.essentials\u002F2.code-blocks","i-lucide-code-xml",{"title":39,"path":40,"stem":41,"icon":42},"Prose Components","\u002Fdocs\u002Fessentials\u002Fprose-components","1.docs\u002F2.essentials\u002F3.prose-components","i-lucide-component",{"title":44,"path":45,"stem":46,"icon":47},"Images and Embeds","\u002Fdocs\u002Fessentials\u002Fimages-embeds","1.docs\u002F2.essentials\u002F4.images-embeds","i-lucide-image",{"id":49,"title":50,"body":51,"description":57,"extension":521,"lastUpdated":522,"meta":523,"navigation":524,"path":525,"seo":526,"stem":527,"__hash__":528},"policies\u002F5.policies\u002Fprivacy.md","Privacy Policy",{"type":52,"value":53,"toc":492},"minimark",[54,58,61,71,82,85,88,93,96,99,102,107,110,124,127,131,134,137,141,144,164,167,171,174,177,194,197,201,204,218,221,225,228,245,248,252,255,269,272,276,279,282,285,289,292,300,303,307,310,313,317,320,323,326,339,342,346,349,366,369,373,376,380,384,387,404,408,411,414,418,421,446,449,452,463,467,477,480,483,487],[55,56,57],"p",{},"Compana Pty Ltd (“Compana”, “we”, “us”) provides an end-to-end AML\u002FCTF compliance platform. We support our clients (“Clients”) to verify the identity of their customers (“Customers”) in accordance with Anti-Money Laundering and Counter-Terrorism Financing laws and other applicable regulatory requirements (“Applicable Laws”).",[55,59,60],{},"This Privacy Policy explains how we collect, use, store, disclose and protect personal information relating to:",[62,63,64,68],"ul",{},[65,66,67],"li",{},"Customers; and",[65,69,70],{},"Clients, website visitors and other individuals (together, “you”).",[55,72,73,77,78,81],{},[74,75,76],"strong",{},"Personal Information"," means information about an identifiable individual. ",[74,79,80],{},"Service Providers"," means third parties who support our operations (e.g. hosting, verification, analytics).",[55,83,84],{},"Compana is an Australian Privacy Principle (APP) entity under the Privacy Act 1988 (Cth) and handles personal information in accordance with applicable privacy laws.",[55,86,87],{},"We may update this Policy from time to time. The latest version will be published on our website.",[89,90,92],"h2",{"id":91},"our-approach-to-privacy-and-data-protection","Our approach to privacy and data protection",[55,94,95],{},"Protecting personal information is central to how we operate. As a compliance technology provider, we understand that secure handling of sensitive information is critical.",[55,97,98],{},"All Compana personnel complete privacy and information security training as part of onboarding. Privacy obligations are reinforced regularly through internal governance processes, policy reviews and operational oversight. Access to personal information is restricted to authorised individuals who are bound by confidentiality obligations.",[55,100,101],{},"Our Clients are contractually required to comply with privacy legislation and to protect the personal information they access through our platform.",[103,104,106],"h3",{"id":105},"how-we-obtain-personal-information","How we obtain personal information",[55,108,109],{},"We collect personal information in several contexts depending on how you interact with us:",[62,111,112,115,118,121],{},[65,113,114],{},"When establishing and managing our relationship with Clients, we collect contact and business information necessary to deliver our services.",[65,116,117],{},"Where a Client engages us to conduct identity verification or customer due diligence (CDD), we receive personal information relating to the Customer for the purpose of fulfilling that Client’s legal obligations.",[65,119,120],{},"During the verification process, personal information may be provided directly by the Customer or uploaded by the Client. This may include identity documents and supporting information required for AML\u002FCTF checks.",[65,122,123],{},"If a Client requests that we conduct CDD on their behalf, this is because they are legally required to verify identity before providing services. If you have questions about why your information is being requested, you should contact the Client directly.",[55,125,126],{},"We may also collect information automatically when individuals visit our website or use our platform, including technical and usage information.",[103,128,130],{"id":129},"when-we-act-for-clients-and-when-we-act-for-individuals","When we act for clients and when we act for individuals",[55,132,133],{},"In most cases, we process Customer information on behalf of a Client. In those circumstances, the Client determines the purpose for which the information is collected, and their privacy policy will govern that relationship. Requests relating to access, correction or deletion of personal information should generally be directed to the Client.",[55,135,136],{},"Where applicable and permitted by law, we may retain information at the request of the individual for audit, reporting and potential reuse with authorised future service providers. In those cases, this Privacy Notice applies directly to our handling of that information.",[89,138,140],{"id":139},"categories-of-information-we-may-collect","Categories of information we may collect",[55,142,143],{},"Depending on the nature of the engagement, the information we collect may include:",[62,145,146,149,152,155,158,161],{},[65,147,148],{},"Contact details such as name, email address, phone number and residential address;",[65,150,151],{},"Identity verification details including passport or driver licence information;",[65,153,154],{},"Demographic information such as date of birth, nationality and gender where contained on identification documents;",[65,156,157],{},"Biometric data used for identity verification, such as facial recognition templates;",[65,159,160],{},"Device identifiers and IP addresses; and",[65,162,163],{},"Documents uploaded as part of verification or KYC processes.",[55,165,166],{},"We collect only the information reasonably necessary to perform our services and comply with legal obligations.",[89,168,170],{"id":169},"how-personal-information-is-used","How personal information is used",[55,172,173],{},"We use personal information primarily to perform identity verification and customer due diligence checks for our Clients. This includes conducting screening and validation against authorised databases and regulatory sources.",[55,175,176],{},"More broadly, we may use personal information to:",[62,178,179,182,185,188,191],{},[65,180,181],{},"Comply with legal and regulatory obligations;",[65,183,184],{},"Prevent fraud and misuse of our services;",[65,186,187],{},"Respond to enquiries or complaints;",[65,189,190],{},"Maintain and improve our platform; and",[65,192,193],{},"Support internal governance and risk management processes.",[55,195,196],{},"We do not sell your personal information.",[103,198,200],{"id":199},"disclosure-of-information","Disclosure of information",[55,202,203],{},"Personal information may be disclosed in limited circumstances. These include disclosure to:",[62,205,206,209,212,215],{},[65,207,208],{},"The Client who requested Compana services;",[65,210,211],{},"Service providers who support verification, hosting, analytics or security functions;",[65,213,214],{},"Government, regulatory or law enforcement authorities where required or authorised by law; and",[65,216,217],{},"A successor entity in the event of a merger, acquisition or corporate restructuring.",[55,219,220],{},"Government identifiers are only used where necessary to complete legally required verification processes.",[103,222,224],{"id":223},"verification-and-screening-services","Verification and screening services",[55,226,227],{},"To complete identity verification and AML\u002FCTF screening, we may perform checks with authorised agencies and service providers. These may include:",[62,229,230,233,236,239,242],{},[65,231,232],{},"The Australian Government’s Document Verification Service (DVS);",[65,234,235],{},"Sanctions and politically exposed person (PEP) screening databases;",[65,237,238],{},"The Australian Criminal Intelligence Commission (ACIC);",[65,240,241],{},"The Visa Entitlement Verification Online (VEVO) system; and",[65,243,244],{},"Credit bureau, Payroll and Superannuation and other permitted verification services.",[55,246,247],{},"These checks are conducted strictly for compliance purposes.",[103,249,251],{"id":250},"retention-of-information","Retention of information",[55,253,254],{},"We retain personal information only for as long as required to meet legal, regulatory and contractual obligations. Factors influencing retention periods include:",[62,256,257,260,263,266],{},[65,258,259],{},"Statutory record-keeping requirements;",[65,261,262],{},"Client regulatory obligations;",[65,264,265],{},"Dispute resolution or complaint handling; and",[65,267,268],{},"Technical constraints such as backup storage cycles.",[55,270,271],{},"When information is no longer required, it is securely deleted or de-identified. Where immediate deletion is not technically possible, the information is isolated and protected until deletion can occur.",[103,273,275],{"id":274},"security-safeguards","Security safeguards",[55,277,278],{},"Compana implements technical, physical and organisational security controls to protect personal information against unauthorised access, disclosure or misuse.",[55,280,281],{},"Customer data is hosted on secure infrastructure provided in a secure cloud infrastructure in Sydney, Australia. Where applicable, data is encrypted both in transit and at rest using industry-standard encryption protocols. Access is restricted to authorised personnel under contractual confidentiality obligations.",[55,283,284],{},"While we take reasonable steps to protect information, no method of transmission or storage can be guaranteed to be completely secure.",[103,286,288],{"id":287},"overseas-disclosure","Overseas disclosure",[55,290,291],{},"Personal information is generally stored in Australia. In limited circumstances, information may be disclosed to overseas recipients where:",[62,293,294,297],{},[65,295,296],{},"Verification requires confirmation from a foreign authority; or",[65,298,299],{},"A client has authorised overseas personnel who require access for compliance purposes.",[55,301,302],{},"Where overseas disclosure occurs, we take reasonable steps to ensure appropriate safeguards are in place.",[103,304,306],{"id":305},"unsolicited-information-and-de-identification","Unsolicited information and de-identification",[55,308,309],{},"We collect only the information necessary to provide our services. If unsolicited personal information is received and is not required, it will be securely destroyed.",[55,311,312],{},"Where appropriate and practicable, personal information will be de-identified.",[89,314,316],{"id":315},"access-correction-and-complaints","Access, correction and complaints",[55,318,319],{},"Individuals may request access to or correction of their personal information. Where we hold information on behalf of a Client, requests should be directed to that Client in the first instance.",[55,321,322],{},"Where correction is not possible due to regulatory record-keeping obligations, we will provide written reasons and record any requested statement associated with the information.",[55,324,325],{},"Privacy enquiries or complaints may be directed to:",[62,327,328,336],{},[65,329,330,335],{},[331,332,334],"a",{"href":333},"mailto:Privacy@compana.com","Privacy@compana.com",", or",[65,337,338],{},"Via our website contact form.",[55,340,341],{},"We aim to respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).",[103,343,345],{"id":344},"information-collected-from-website-users-and-clients","Information collected from website users and clients",[55,347,348],{},"When you visit our website or interact with our platform, we may collect technical information such as:",[62,350,351,354,357,360,363],{},[65,352,353],{},"IP address and device information;",[65,355,356],{},"Browser type and operating system;",[65,358,359],{},"Website usage data;",[65,361,362],{},"Approximate location data derived from IP address; and",[65,364,365],{},"Communications and feedback submitted to us.",[55,367,368],{},"We use cookies and similar technologies to enhance website functionality and understand user behaviour. Browser settings can be adjusted to disable cookies, although some website features may not function correctly.",[103,370,372],{"id":371},"children","Children",[55,374,375],{},"Compana does not knowingly collect Personal Information from children under 13. If we learn that we have collected the Personal Information of a child under 13 without first receiving verifiable parental consent we will take steps to delete the information as soon as possible.",[89,377,379],{"id":378},"how-we-use-and-share-your-personal-information","How we use and share your Personal Information",[103,381,383],{"id":382},"how-we-use-your-information","How we use your information",[55,385,386],{},"We only handle your Personal Information if we have a good reason under the law. The reason depends on the information itself and why we collected it. Generally, here are our main reasons:",[62,388,389,392,395,398,401],{},[65,390,391],{},"Because of a contract: We need your Personal Information to do what we've agreed to do for you, like providing our services. If you don't give us this information, we might not be able to offer you our services.",[65,393,394],{},"Our legitimate interests: We might use your Personal Information when we think it's for our legitimate business reasons, or a third party's, as long as it doesn't outweigh your basic privacy rights.",[65,396,397],{},"We might have other legitimate interests, and if so, we'll tell you clearly at the time.",[65,399,400],{},"With your consent: Sometimes, we'll use your Personal Information because you've clearly provided your consent.",[65,402,403],{},"Legal requirement: Rarely, we might need to use your Personal Information to follow a legal rule, or if it's really important for your safety or the safety of others, or if it's for something that benefits the public.",[103,405,407],{"id":406},"when-we-might-share-your-information","When we might share your information",[55,409,410],{},"We will generally not disclose your Personal Information to third parties except as set out in this Privacy Policy. We may disclose your Personal Information where required or authorised by applicable law, including to government authorities, regulatory bodies, or law enforcement agencies. We may also disclose your Personal Information to third parties where you have provided your consent or directed us to do so. We do not sell your Personal Information as defined under applicable privacy laws.",[55,412,413],{},"In the event of a corporate transaction, including any reorganisation, merger, acquisition, or sale of all or part of our business or assets, we may transfer your Personal Information to a relevant third party or successor entity, subject to applicable legal requirements.",[89,415,417],{"id":416},"accessing-correcting-erasing-and-your-other-rights","Accessing, correcting, erasing and your other rights",[55,419,420],{},"On top of your other rights in this policy, you can get in touch with us anytime to see your personal information and ask us to:",[62,422,423,426,429,432,435,438],{},[65,424,425],{},"Fix or add to it: If you think any of the Personal Information we have about you is wrong or missing.",[65,427,428],{},"Delete it: Either all of it or just some of it.",[65,430,431],{},"Take back your permission: If you gave us consent to use your Personal Information (we would have told you when we collected it).",[65,433,434],{},"Get more information or a copy: about the personal information we hold on you",[65,436,437],{},"Limit how we use or share it: For some or all reasons.",[65,439,440,441,445],{},"Stop marketing messages: You can use the \"unsubscribe\" link in our emails or contact us at ",[331,442,444],{"href":443},"mailto:privacy@compana.com","privacy@compana.com",".",[55,447,448],{},"Before you can do any of these things, we'll need to check who you are (or who's asking on your behalf). Then we'll deal with your request as quickly as we can, following the privacy laws. We'll only ever hold back information or not fix something if we have to by law, and if that happens, we'll tell you why in writing.",[55,450,451],{},"If you are not satisfied with how we deal with your query or complaint, you may contact the Office of the Australian Information Commissioner (OAIC) by:\ncalling their Privacy Hotline on",[62,453,454,457,460],{},[65,455,456],{},"1300 363 992 (within Australia),",[65,458,459],{},"+61 2 9284 9749 (from overseas), or",[65,461,462],{},"visiting the OAIC website",[89,464,466],{"id":465},"complaints","Complaints",[55,468,469,470,476],{},"To exercise your rights under this Privacy Policy or applicable law, or to make a complaint regarding the handling of Personal Information, you may contact us by calling us by email at ",[74,471,472],{},[331,473,475],{"href":474},"mailto:privacy@compana.io","privacy@compana.io"," or by submitting a request via the Compana website contact page.",[55,478,479],{},"We will acknowledge and respond to your request or complaint within a reasonable timeframe, and in any event aim to provide a substantive response within 30 days. We take all complaints seriously and are committed to resolving them in a timely, fair, and transparent manner.",[55,481,482],{},"If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner by calling their Privacy Hotline Privacy enquiries & complaints (OAIC) listed above.",[89,484,486],{"id":485},"contact-us","Contact Us",[55,488,489,490,445],{},"If you have any questions about this Privacy Policy or our data practices, please contact us at ",[331,491,475],{"href":474},{"title":493,"searchDepth":494,"depth":494,"links":495},"",2,[496,501,502,510,514,518,519,520],{"id":91,"depth":494,"text":92,"children":497},[498,500],{"id":105,"depth":499,"text":106},3,{"id":129,"depth":499,"text":130},{"id":139,"depth":494,"text":140},{"id":169,"depth":494,"text":170,"children":503},[504,505,506,507,508,509],{"id":199,"depth":499,"text":200},{"id":223,"depth":499,"text":224},{"id":250,"depth":499,"text":251},{"id":274,"depth":499,"text":275},{"id":287,"depth":499,"text":288},{"id":305,"depth":499,"text":306},{"id":315,"depth":494,"text":316,"children":511},[512,513],{"id":344,"depth":499,"text":345},{"id":371,"depth":499,"text":372},{"id":378,"depth":494,"text":379,"children":515},[516,517],{"id":382,"depth":499,"text":383},{"id":406,"depth":499,"text":407},{"id":416,"depth":494,"text":417},{"id":465,"depth":494,"text":466},{"id":485,"depth":494,"text":486},"md","May 6, 2026",{},true,"\u002Fpolicies\u002Fprivacy",{"title":50,"description":57},"5.policies\u002Fprivacy","5wvfBpAjY0y3JZf-6KCbqbqj_Cp-TPf03tIHdx5hlUA",1778041485993]