CauseComp Privacy Policy
Effective date: January 1, 2026
This Privacy Policy explains what information RB Consulting Services, LLC (“we,” “us”) collects when you use CauseComp at www.causecomp.org, how we use it, who we share it with, and the choices you have.
The short version: we collect only what we need to run the Service, we don’t sell your data, and we’ll delete your data if you ask. The details follow.
1. Information We Collect
Information you give us:
- Account email address — used to create and secure your account and to send you service-related email.
- Organization name — used to personalize your account and reports.
- Password — stored only as a cryptographic hash. We cannot see your actual password.
- Lead information — if you request a demo, download a sample report, or contact us, we collect the contact details you provide (such as name, email, organization, and role).
- Payment information — collected and processed directly by Stripe, our payment processor. We never store your credit card numbers. We receive only limited billing information from Stripe, such as your subscription status and the last four digits of your card.
Information collected automatically:
- Search and query history — the benchmark searches and report parameters you run, which we use to power your account features (like recent searches), support you, and improve the Service.
- Session and usage data — standard technical data such as IP address, browser type, pages viewed, and timestamps, collected through server logs and cookies (see Section 4).
What we don’t collect: we don’t ask for or store compensation data about your individual employees, and we don’t collect sensitive personal information. Our benchmarks are built entirely from public government data (IRS Form 990 filings and BLS/O*NET datasets), not from data our users provide.
2. How We Use Your Information
We use the information above to:
- Provide, secure, and maintain the Service and your account;
- Process subscriptions and payments (via Stripe);
- Send transactional email — receipts, renewal notices, password resets, and important service announcements (via Resend);
- Respond to support requests;
- Understand how the Service is used so we can improve it;
- Send occasional product updates or marketing to leads and users, which you can opt out of at any time via the unsubscribe link;
- Comply with legal obligations.
3. What We Don’t Do With Your Information
- We do not sell your personal information.
- We do not share your personal information with third parties for their own marketing.
- We do not use your search history to build products for anyone else, and we don’t disclose which organizations use CauseComp.
4. Cookies and Sessions
We use a small number of cookies, and they’re the boring kind:
- Essential cookies — keep you logged in and keep your session secure. The Service doesn’t work without them.
- Analytics — if we measure usage, we do it in aggregate (page views, feature usage) to understand what’s working, not to profile individuals.
We do not use third-party advertising cookies or cross-site tracking. Because we don’t track you across other sites, “Do Not Track” browser signals don’t change anything — we treat every visitor as if that signal were on.
5. Service Providers (Our Processors)
We use a small set of well-known providers to run CauseComp. Each receives only the data it needs to do its job, and each is bound by its own contractual and legal obligations:
| Provider | What it does | What it handles |
|---|---|---|
| Stripe | Payment processing | Payment and billing details (we never store card numbers) |
| Resend | Transactional email delivery | Your email address and the content of service emails |
| Render | Application and database hosting (US region) | All Service data, hosted in the United States |
| Cloudflare | DNS and network security | Standard network traffic data (such as IP addresses) |
We don’t share your personal information with anyone else, except: (a) if required by law, subpoena, or court order; (b) to protect the rights, safety, or property of our users or the public; or (c) in connection with a merger, acquisition, or sale of the business — in which case this Privacy Policy would continue to apply to your data and we would notify you of any material change.
6. Data Storage and Security
- All data is hosted in the United States (on Render, US region).
- Data is encrypted in transit (HTTPS/TLS). Passwords are stored only as hashes.
- We limit access to personal information to what’s needed to operate and support the Service.
No system is perfectly secure, and we can’t guarantee absolute security — but if we learn of a breach affecting your personal information, we’ll notify you as required by applicable law.
7. Data Retention and Deletion
- We keep your account information and search history while your account is active.
- You can request deletion of your account and personal data at any time by emailing us (Section 12). We’ll complete the deletion within 30 days, except for records we’re legally required to keep (like billing records for tax purposes) and residual copies in routine encrypted backups, which age out on a fixed schedule.
- If you cancel a paid plan but keep your free account, we retain your account data as described above until you request deletion.
8. Your Rights and Choices
You can, at any time:
- Access and update your account information in your settings;
- Export your reports (Excel/PDF) while your subscription is active;
- Opt out of marketing email via the unsubscribe link (transactional email, like receipts, will still be sent);
- Request a copy or deletion of your personal data by emailing us.
Depending on where you live, you may have additional rights under state privacy laws. We honor access and deletion requests from all users regardless of location — so in practice, you don’t need to figure out which law applies to you. Just ask, and we won’t discriminate against you for exercising these rights.
9. Children
CauseComp is a professional tool for organizations. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we’ll delete it.
10. International Users
CauseComp is operated from the United States, and our benchmarks cover U.S. compensation data. If you use the Service from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your location.
11. Changes to This Policy
If we make material changes to this Privacy Policy, we’ll notify you by email or in-app notice before the changes take effect, and we’ll update the effective date at the top. Minor clarifications may be posted without separate notice.
12. Contact Us
For privacy questions, data access requests, or deletion requests, email us at support@causecomp.org with the subject line “Privacy Request” and we’ll respond within 30 days.
RB Consulting Services, LLC · Florida, USA