Privacy policy · Compounding

1. Who we are

Compounding Technologies, operated by Joao Alves, is the controller of the personal data described here. Contact us at jalves@compoundingtech.ai. This policy covers compoundingtech.ai and membership of Compounding Circles. It's written for UK and EU data protection law (UK GDPR, the Data Protection Act 2018 and the EU GDPR).

2. What we collect

WhenWhat

You visit the websiteOur host, Cloudflare, processes technical data such as your IP address, browser and the pages requested, to deliver and secure the site. We count visits with Cloudflare Web Analytics, which doesn't use cookies or identify you. We don't use advertising trackers.

You take the AI maturity testNothing. The test runs entirely in your browser. Your answers aren't sent to us or stored.

You applyWhat you enter in our application form, run by Tally: usually your name, email, role, business name, size, sector, location and your answers about AI in your business.

You talk to usEmails, and notes from your fit call and strategy reviews.

You're a memberContact and billing details, your circle and attendance, your AI P&L (tools, spend, seats, hours saved, workflows and what changed), your Compounding Score and benchmark results, and what you post in the members' channel.

Your AI P&L is mostly about your business, not about people. Please don't include personal data about clients or staff in it, or in sessions.

3. How we use it, and our legal basis

To review applications and match you to a circle (steps before a contract, and our legitimate interest in building circles that work).
To run your membership: sessions, reports, strategy reviews, invoices and support (contract).
To produce anonymised benchmarks across circles (legitimate interest; see section 4).
To keep financial records and meet legal duties (legal obligation).
To run and secure the website (legitimate interest).
To send updates about Compounding, only if you've asked for them. You can unsubscribe any time (consent).

We don't make automated decisions about you that have legal or similarly significant effects.

4. Benchmarks and anonymisation

The Compounding Index pools AI P&L data from every circle. Before any figure leaves your circle, we remove names and business identifiers and combine it with data from other firms. Benchmark figures are only shown for groups large enough that no single business can be picked out. Your own named results are seen only by you, by us and, for what you choose to share, by your circle.

5. Who we share it with

We never sell personal data, and we never share it with software vendors, implementers or advertisers. We use a small number of service providers who process data for us under contract:

Cloudflare (website hosting, security and privacy-first visitor analytics)
Tally (application form)
Google Workspace (email, documents and storage)
Our video meeting, members' channel and invoicing providers, which we'll name here before the first circle opens

Other members of your circle see what you choose to share in sessions and the channel, under the confidentiality terms every member signs. We may also share data if the law requires it, or with a business that takes over Compounding, which would have to protect it in the same way.

6. International transfers

Some of our providers are based in, or use servers in, the United States. Where data leaves the UK or EU, we rely on adequacy decisions, including the UK-US Data Bridge and the EU-US Data Privacy Framework, or on standard contractual clauses and the UK addendum.

7. How long we keep it

Applications that don't lead to a seat: 12 months, then deleted.
Member data: for your membership and 12 months after, then deleted or anonymised.
Invoices and financial records: 6 years, as tax law requires.
Anonymised benchmark data: kept, because it can no longer identify you.
Website logs: as long as Cloudflare keeps them under its own policy, typically a short period.

8. Security

We keep access to member data to the people who need it, use providers with strong security, protect accounts with two-factor authentication and send everything over encrypted connections. If a breach puts your data at risk, we'll tell you and, where required, the regulator.

9. Your rights

You can ask us to:

give you a copy of the personal data we hold about you
correct it, or delete it
restrict or object to how we use it, including for benchmarks
send it to you or someone else in a portable format
stop using it where we rely on your consent

Email jalves@compoundingtech.ai. We'll reply within a month and won't charge you. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live. We'd appreciate the chance to put it right first.

10. Cookies

This website doesn't set cookies and doesn't use advertising or cross-site tracking. We use Cloudflare Web Analytics to count visits and see which pages are read. It doesn't use cookies, local storage or fingerprinting, and it doesn't identify individual visitors; we only see totals. If you pick a currency on the pricing page, your browser remembers that choice in its own local storage, which never leaves your device. Cloudflare may set a strictly necessary security cookie to protect the site from abuse. The application form opens on Tally's site, which has its own cookie and privacy policy.

11. Age

Compounding is for business owners and leaders. We don't knowingly collect data from anyone under 18.

12. Changes and contact

We'll update this policy when the way we handle data changes, post the new version here with a new date, and tell members by email about anything significant. Questions: jalves@compoundingtech.ai.

Privacy policy.