Privacy Policy

Compiled Ideas LLC ("Compiled Ideas", "we", "us") is a software development studio. This policy covers our website (compiledideas.com), our email communications, and our client portal. For our CrewSec mobile application, a separate policy applies.

• Contact details: when you contact us or subscribe to our newsletter, we collect your name, email address, company name, and anything you choose to tell us about your project.
• Client engagement data: for active clients, we store project communications, agreements, and invoicing records needed to deliver and account for our work.
• Portal usage data: the client portal stores your display name, email, and your stated preferences in your browser’s local storage on your own device.
• Server logs: like almost every website, we keep short-lived technical logs (IP address, user agent, requested URLs) for security and reliability.

• We do not sell, rent, or trade your personal information to anyone.
• We do not run third-party advertising or cross-site tracking on this website.
• We do not send marketing email without an explicit opt-in, and every email includes a one-click unsubscribe.

• To respond to inquiries and provide requested proposals or services.
• To deliver contracted work: project communication, deliverables, invoicing, and support.
• To send The Compile newsletter to subscribers who asked for it.
• To protect the security and integrity of our systems and our clients’ data.

Where GDPR applies, we process your data on the bases of: performance of a contract (client work), legitimate interests (responding to inquiries, securing our systems), and consent (newsletter, optional cookies if any are ever introduced).

We share data only with the processors we need to operate: cloud hosting, email delivery, invoicing, and similar services, each bound by data-processing agreements. We never share client information for anyone else’s marketing.

Inquiry data is kept up to 24 months unless we begin an engagement. Client records are retained for the duration of the engagement plus the period required by tax and commercial law (typically 7 years for financial records). Newsletter data is kept until you unsubscribe.

You may request access, correction, export, or deletion of your personal data at any time, and withdraw consent where processing is consent-based. EEA/UK residents may also lodge a complaint with their supervisory authority. We answer every request within 30 days.

We apply the same standards to our own systems that we apply to client work: encrypted transport everywhere, access on a need-to-know basis, hardware-backed 2FA on all internal accounts, and least-privilege access to client repositories and infrastructure.

If we change this policy materially, we will note the new date at the top and, for active clients, notify them directly. Continued use of the site after changes means you accept the updated policy.

Questions or requests: privacy@compiledideas.com