DATA COMPAS - CUSTOMER AGREEMENT
By using Data Compas, you agree to the below.
What data we collect
| You give us | We collect automatically | We NEVER collect |
|---|---|---|
| Name, email, job title, organisation, sector, assessment answers, messages | Pages visited, time spent, device type, anonymised IP (90 days) | Race, religion, health, biometrics, children's data, ad cookies |
How we protect you
- Encryption: TLS 1.2+ (transit) + AES-256 (rest)
- Passwords: hashed with bcrypt, never plain text
- Access: only authorised personnel
- Breach notification to you: within 72 hours
Your rights (email infor@datacompas.com)
- Access: free copy within 30 days
- Correct: within 14 days
- Delete: within 30 days (subject to legal retention)
- Port: CSV/JSON export
- Object / withdraw consent: e.g. stop emails
- Opt out of anonymised aggregation: subject line AGGREGATE OPT OUT
Data honesty - we promise
We will
- Report true numbers (declines, small samples, failures)
- Never change methodology mid-period to look better
- Never claim we won a contract for you
We will not
- Hide a declining score
- Cherry-pick only positive case studies
You must answer assessment questions honestly - your result depends on it.
How we share aggregated data (anonymised only)
- We combine pillar scores, sector, team size, archetype - no name, email, or organisation
- Powers sector benchmarks and Wepesi BI
- Never published for categories with fewer than 10 organisations
- You can opt out anytime (your individual result unaffected)
Your security responsibilities
- Use a strong, unique password - never share your account
- Enable MFA if offered
- Report a compromised account: ACCOUNT COMPROMISE to infor@datacompas.com
- Found a vulnerability? Email infor@datacompas.com with subject VULNERABILITY REPORT — do not exploit publicly
Contact and response times
| Issue | Contact | Response |
|---|---|---|
| Privacy / data rights | infor@datacompas.com (subject: DATA SUBJECT REQUEST) | 30 days |
| Security incident | infor@datacompas.com (subject: SECURITY INCIDENT) | 4hr / 24hr ack |
| Data honesty concern | infor@datacompas.com (subject: DATA HONESTY CONCERN) | 14 business days |
Regulatory complaint: NITA-U Uganda - www.nita.go.ug
Acknowledgment
By checking "I Agree" or signing below, I confirm I have read, understood, and accept this one-page agreement.