Privacy Policy

Who we are

CTO Compass ("CTO Compass", "we", "us") is a strategic planning application for technology leaders. This policy explains what information we collect, why, how we protect it, and the choices you have. Questions? Email hello@ctocompass.com.

Information we collect

Account information: your name, email address, and authentication credentials, used to create and secure your workspace.

Planning content: the companies, targets, objectives, actions, journal entries, and related material you create in the product.

Integration data: information we retrieve on your behalf from services you explicitly connect, such as QuickBooks Online and Fathom (see "Connected integrations" below).

Usage and device data: standard log data (IP address, browser type, timestamps) used to operate, secure, and improve the service.

Connected integrations

Integrations are optional and are only activated when you connect them. You can disconnect at any time, which revokes our access going forward.

QuickBooks Online: when you connect QuickBooks, you grant read-only access to your accounting data. We access only what is needed to populate the revenue metrics you choose to track — principally Profit & Loss report totals (such as total income) and your fiscal-year settings. We do not write to, modify, or delete anything in your QuickBooks account. The OAuth access and refresh tokens Intuit issues are encrypted at rest, are never exposed to your browser, and are never sold or shared. Disconnecting removes the connection and stops all future access; you can also revoke access from within Intuit at any time.

Fathom: when connected, meeting summaries and transcripts you record are delivered to your Journal. Credentials are stored server-side and are not readable from the app.

How we use information

To provide, maintain, and secure the service; to populate the metrics and features you use; to generate AI-assisted suggestions and briefings; to communicate with you about your account; and to comply with legal obligations.

We do not sell your personal information.

Service providers

We share information only with vendors that help us run the product, under agreements that limit their use of it: Supabase (database, authentication, and hosting), Anthropic (the AI model powering suggestions and briefings, which processes the content you submit to those features), and the integration providers you connect (such as Intuit and Fathom). We may also disclose information where required by law.

Data retention & security

We retain your information for as long as your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period. Access to your data is restricted by row-level security so that you can only reach your own workspace. Sensitive credentials, including accounting OAuth tokens, are encrypted at rest.

Your choices & rights

You can access, correct, export, or delete your workspace data, and disconnect any integration, from within the product or by contacting us. Depending on where you live, you may have additional rights under applicable privacy law; email hello@ctocompass.com to exercise them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you directly.