Legal

Privacy Policy

Last updated September 14, 2026. Draft for launch. Have a lawyer review before you take payments or ads.

Who we are

CompaOne operates compaone.com, app.compaone.com, and api.compaone.com. Questions: legal@compaone.com.

What we collect

• Account: username, display name, password hash or Apple/X identifiers, email if a provider sends it.
• Profile: how companions should know you, topics, language.
• Usage: companions, chats, clips you create, plan, Spark use, activity events.
• Billing placeholders: last four digits and Stripe ids when checkout is live — never full card number or CVC on our servers by design.
• Technical: session cookie sid, logs needed to run the API.

Why

To sign you in, run companions, enforce plans, improve the product, and meet legal duties. We do not sell your personal information.

Processors

Hosting (Azure App Service for the marketing site and the app), database (Supabase/Postgres), model and media APIs (including xAI / Imagine), and later Stripe. GoDaddy is the domain registrar and DNS, not the web host.

Cookies

See Cookies. The app needs the session cookie to stay signed in.

Retention

We keep account and companion data until you delete the account or we close it. Backups may last a short additional period.

Your requests

Email legal@compaone.com to ask for access, correction, or deletion. We may need to verify the account.

Children

Not for anyone under 18. If we learn an account is under 18 we will delete it.