Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains how Arandu Payments LLC, doing business as ComplyLedge (“ComplyLedge”, “we”, “us”) collects, uses, and shares information when you use our website and API (the “Service”).

1. Information we collect

• Account & contact information — your email address, and any name, company, or message you provide (for example, through the “Contact us” form).
• Payment information — handled by our payment processor, Stripe. We do not store your full card details; Stripe processes payment data under its own terms and security. We receive limited billing metadata (e.g., customer and subscription identifiers, plan, and status).
• Usage data — API requests, timestamps, and counts associated with your API key, used for metering, rate-limiting, billing, and security.
• Technical data — IP address and request metadata, used for security, abuse prevention, and the no-key demo’s per-IP limits.

We do not use advertising or third-party tracking cookies on our marketing site.

2. About the OSHA data

The compliance records served through the API are public U.S. government records about business establishments — not personal information about you, our customer. Some underlying accident/injury records include limited, de-identified attributes about workers (e.g., age, sex, occupation) but no names or contact details.

3. How we use information

To provide and operate the Service; process subscriptions and payments; deliver API keys and service emails; enforce rate limits and quotas and prevent abuse; provide support; comply with legal obligations; and maintain and improve the Service.

4. How we share information

We share information with service providers (“sub-processors”) who help us run the Service, under confidentiality obligations:

• Stripe — payments and subscription management
• Resend — transactional email (API keys, lead notifications)
• Cloudflare — DNS, CDN, security, and static site hosting
• DigitalOcean — server hosting

We may also disclose information if required by law, to protect our rights and the security of the Service, or in connection with a merger, acquisition, or asset sale. We do not sell your personal information.

5. Data retention

We retain account and billing information while your account is active and as needed for legal, tax, and accounting purposes. Usage and demo IP counters are short-lived. You may request deletion of your account data, subject to legal retention requirements.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing (for example, under the GDPR or CCPA/CPRA). To exercise these rights, contact us at the address below. You can cancel your subscription anytime via the customer portal.

7. Security

We use reasonable technical and organizational measures to protect information, including encrypted transport (HTTPS), hashed (not plaintext) API keys, and access controls. No method of transmission or storage is completely secure.

8. International users

We operate from the United States. If you access the Service from elsewhere, you understand that your information will be processed in the United States.

9. Children

The Service is intended for businesses and is not directed to children under 16, and we do not knowingly collect their personal information.

10. Changes to this Policy

We may update this Policy; changes are posted here with a new “Last updated” date.

11. Contact

Privacy questions or requests: hello@complyledge.com.