A privacy notice that matches what your site actually does
Tell us what data you collect and which tools you run. Captain Compliance drafts the disclosures that apply, mapped to the regulations relevant to your audience, so you can review it, publish it, and we keep it current for you as privacy laws are updated.
1 Your company
2 What you collect
3 Tools you run
4 Where your users are
1. Who we are
Acme Inc. (“we”) operates this website and is the controller of the personal data described below. You can reach our privacy team at privacy@acme.com.
Account & profile data
When you create an account we collect your name, email address and the settings you choose. We use this to authenticate you and operate the service. Legal basis: contract.
Payment information
Payments are processed by our payment provider. We retain billing records and the last four digits of your card for tax and fraud-prevention purposes. Legal basis: legal obligation.
Location data
We infer approximate location from your IP address to set currency, language and regional content. We do not collect precise GPS location. Legal basis: legitimate interest.
Support communications
When you contact support we keep the conversation, your contact details and any diagnostic information you share, so we can resolve your issue and improve the product.
Analytics
We use first-party analytics with a 13-month retention to understand how features are used. Pseudonymous identifiers are hashed before storage. Legal basis: consent.
Advertising & measurement
With your consent we load advertising pixels that help us measure campaigns and reach similar audiences. You can withdraw consent at any time from our cookie banner. Legal basis: consent.
Payment processor
Card details are handled directly by Stripe, Inc. under their own privacy terms. We never see or store your full card number.
Live chat
Our in-app chat is provided by a third-party processor. Messages and your identifiers are shared with them solely to deliver support, under a data-processing agreement.
Your rights under the GDPR
If you are in the EU or UK you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You may also lodge a complaint with your supervisory authority. Contact our EU representative to exercise these rights.
California privacy rights (CPRA)
California residents may request access, deletion and correction, and may opt out of the sale or sharing of personal information. We honor Global Privacy Control signals automatically and do not discriminate against you for exercising these rights.
Direitos do titular (LGPD)
Se você estiver no Brasil, a LGPD garante o direito de confirmar, acessar, corrigir, anonimizar e excluir seus dados pessoais. Nosso encarregado (DPO) pode ser contatado para exercer esses direitos.
Rights under the DPDP Act
If you are in India you may request access to and erasure of your personal data, nominate another individual to exercise your rights, and lodge a grievance with our designated Data Protection Officer before approaching the Data Protection Board.
Contact & changes
We may update this notice as our practices change. Every version is dated and archived. Questions? Email privacy@acme.com.
From answers to a published notice
Four steps. Most teams finish in one sitting.
Answer a short questionnaire
Tell us what data you collect, the tools you run, and where your users are located.
We map the disclosures
Your answers determine which clauses and regional addenda apply, and which ones to leave out.
Review the draft
A structured notice comes back in plain language, organized by section, ready for your team or counsel to review.
Publish and maintain
Host it yourself or embed it on your site, then update it as your practices or vendor list change.
A notice built from your answers, not a template
Automatically updates
Our software updates the privacy notice keeping you in compliance and saving your expensive legal bills.
Purpose-by-purpose disclosures
Each processing activity is described with the purpose behind it, so reviewers can follow the logic.
A living sub-processor list
The tools you tell us about become a sub-processor section you can update as your vendor list changes.
Regional sections where relevant
Rights and disclosure language for the jurisdictions you tell us your users are in.
Cookie-aware language
Pairs with Captain Compliance cookie scanning so the cookie section can reflect what's actually running on your site.
Version history
Edits are dated, so your team can see what changed and when.
A generator, a static template, or outside counsel
Host it yourself, or embed it on your site
Once you're happy with the draft, publish it at your own URL or drop in an embed snippet that keeps the page in sync with your latest version.
Questions teams ask before publishing
Is a generated notice legally valid?+
What happens if a law changes after I publish?+
Do I have to host it with Captain Compliance?+
How does it handle cookies and trackers?+
Generate your adaptive privacy notice today
Start with a short questionnaire, Tell us about your site, your tools, and your users.
Start Now See a Demo