How We Handle Your Data

About Complion

Complion AI Ltd ("Complion", "we", "us", or "our") is the data controller responsible for your personal data. We operate the Complion platform at complion.ai — an AI-powered food label compliance and generation platform for food brands, compliance teams, and designers.

If you have questions or concerns about how your data is handled, you can contact our privacy team at sha@complion.ai. We are committed to handling your personal data with care and in accordance with applicable data protection legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Scope of This Policy

This Privacy Policy applies to all personal data collected through our website, platform, and any related services. It covers data collected when you visit our website, create an account, use platform features, contact our support team, or communicate with us in any way.

This policy was last updated on 1 March 2026. We may update it periodically and will notify you of material changes via email or a notice on our platform.

Account and Profile Data

When you register for Complion, we collect information such as your name, email address, company name, job title, and password. This information is necessary to create and manage your account and to provide you with access to the platform.

Label and Upload Data

When you use Complion to validate or generate food labels, we process the files, images, and data you upload ("Your Content"). This may include product names, ingredient lists, nutritional information, allergen declarations, and other label content. We process this data solely to deliver the compliance and generation services you have requested.

Usage and Technical Data

We automatically collect certain technical data when you use our platform, including your IP address, browser type and version, device information, pages visited, features used, and timestamps. This data helps us understand how our platform is used, diagnose issues, and improve performance.

Communications Data

If you contact us via email, our support system, or live chat, we will retain a record of that communication, including any personal data you choose to share. We use this data to respond to your enquiries and improve our support processes.

Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve our website and platform. These may include essential cookies required for functionality, analytical cookies to understand usage patterns, and marketing cookies to deliver relevant communications. You can manage your cookie preferences through our cookie consent tool. For more details, please see our Cookie Policy.

Providing the Platform

We process your personal data to operate the Complion platform, authenticate your account, process label uploads, run compliance assessments, generate label content, and deliver results to you. This processing is necessary for the performance of our contract with you.

Improving Our Services

We use aggregated and anonymised usage data to analyse how the platform is used, identify areas for improvement, and develop new features. We may also use feedback you provide to improve our AI models and compliance algorithms. We will not use your uploaded label data to train our AI models without your explicit consent.

Customer Support

We use your account and communication data to respond to your support requests, troubleshoot issues, and ensure you have a positive experience with our platform.

Marketing and Communications

With your consent, we may send you product updates, feature announcements, and relevant content about food label compliance. You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us at sha@complion.ai.

Legal and Compliance

We may process your data to comply with our legal obligations, enforce our Terms and Conditions, prevent fraud or misuse, and protect the rights and safety of Complion, our users, and third parties.

Service Providers

We work with trusted third-party service providers who help us operate the platform, including cloud hosting providers, payment processors, email delivery services, and analytics tools. These providers are granted access to your data only to the extent necessary to perform their services and are contractually bound to protect your data.

We Do Not Sell Your Data

Complion does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is used solely to provide and improve our services.

Legal Disclosure

We may disclose your personal data if required to do so by law, court order, or regulatory authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Complion, our users, or the public.

International Transfers

Some of our service providers are located outside of Canada. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as data transfer agreements and other safeguards, to protect your data in accordance with applicable law.

How Long We Keep Your Data

We retain your personal data for as long as your account is active or as needed to provide our services. Following account closure, we retain certain data for a limited period to comply with our legal obligations, resolve disputes, and enforce our agreements. Upload data (label files) is deleted within 90 days of account closure unless you request earlier deletion.

Security Measures

We employ industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include encryption at rest and in transit, access controls, regular security reviews, and staff training.

While we take reasonable precautions to protect your data, no method of data transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately at sha@complion.ai.

Your Rights Under PIPEDA

Depending on your location, you may have the following rights with respect to your personal data held by Complion:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your personal data in certain circumstances.
• Right to restriction — request that we limit how we process your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Rights related to automated decision-making — not be subject to purely automated decisions that significantly affect you.

How to Exercise Your Rights

To exercise any of your rights, please contact us at sha@complion.ai. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca, or the relevant supervisory authority in your country of residence.

Contact Us

For any privacy-related questions, requests, or concerns, please contact our privacy team at sha@complion.ai. We aim to respond to all enquiries within 5 business days.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email and/or by posting a notice on our platform prior to the change becoming effective. The date of the last update is always shown at the top of this page.