Privacy Policy
Effective 29 October 2026. Last updated 29 October 2026.
1. Introduction
Welcome to CompEat Analytics.
CompEat Analytics (“CompEat”, “we”, “us” or “our”) is a Software-as-a-Service (SaaS) digital marketing analytics and competitive intelligence platform.
Our platform helps businesses, marketers and agencies monitor and analyse paid advertising, organic marketing, website performance, social media activity and competitive insights through integrated dashboards and reporting tools.
We are committed to protecting your privacy and handling personal information responsibly, transparently and securely.
This Privacy Policy explains how we collect, access, use, store, share and protect personal information when you:
- Visit our website.
- Register for an account or free trial.
- Subscribe to our software.
- Connect third-party marketing and analytics accounts.
- Generate reports or use competitive analysis features.
- Contact our team or receive our communications.
This policy is intended to address applicable data protection requirements, including South Africa’s Protection of Personal Information Act (POPIA), the European Union’s General Data Protection Regulation (GDPR), and the UK GDPR, where these laws apply.
2. Who We Are
- Trading name: CompEat Analytics
- Website: https://compeat.social/
- Privacy contact:marketing@compeat.social
- Information Officer / Data Protection contact:marketing@compeat.social
Registered company name, company registration number and registered business address are available on request from the privacy contact above.
CompEat Analytics may operate internationally and may serve customers in multiple jurisdictions.
For personal information relating to our own website visitors, account holders, billing and business operations, the identified operating company generally acts as the responsible party or data controller.
Where business customers or agencies connect client accounts and use CompEat Analytics to process information on their behalf, CompEat Analytics may act as a data processor or operator, depending on the circumstances and contractual arrangements.
3. Information We Collect
We collect and process information necessary to operate and improve our SaaS platform.
3.1 Account and registration information
When you register, subscribe or contact us, we may collect:
- Full name and business name.
- Email address and contact number.
- Country and billing information.
- Account login credentials and authentication information.
- Subscription plan, payment status and transaction history.
- Support requests and communications.
- User preferences and account settings.
3.2 Connected marketing and analytics platforms
CompEat Analytics allows users to connect supported third-party platforms, which may include:
- Facebook and Instagram through Meta.
- Google Ads.
- Google Analytics 4.
- Google Search Console.
- Google Business Profile.
- YouTube.
- LinkedIn.
- TikTok.
- Bing Webmaster Tools.
- Other integrations made available within the platform.
Depending on the integration, available permissions and features, we may access:
- Advertising performance and expenditure.
- Campaign, ad group and advertising metrics.
- Website traffic and engagement.
- Search queries, clicks and impressions.
- Social media account and content performance.
- Audience and engagement statistics.
- Conversions and related reporting metrics.
- Business profile interactions.
- Account identifiers and associated metadata.
We access only the categories of information required for supported platform functionality and the permissions granted by the authorised user.
The exact information available depends on the relevant platform, its API permissions and the account’s access settings.
3.3 Competitive intelligence and publicly available data
CompEat Analytics offers competitive intelligence features, including analysis of supported Facebook pages and YouTube channels.
These features may involve the collection and processing of publicly accessible information, subject to applicable laws and platform rules.
Examples may include public page or channel names, content details, publishing activity, visible engagement statistics and publicly available performance indicators.
We do not represent that public competitor analysis provides access to competitors’ private advertising accounts, confidential financial information, private audience information or non-public conversion data.
Where publicly available information identifies individuals, we handle that information in accordance with applicable privacy laws and relevant third-party platform restrictions.
3.4 Website usage and technical information
When you visit our website or platform, we may collect:
- IP address.
- Browser and device information.
- Operating system.
- Website usage and navigation information.
- Login and security activity.
- Session identifiers.
- Cookies and similar technology data.
- Error reports and technical performance logs.
This information helps us maintain website functionality, improve the service, detect security incidents and understand how the platform is used.
4. How We Use Your Information
We process personal information for the following purposes:
- Providing our services: Creating accounts, enabling integrations, displaying dashboards, generating reports and managing subscriptions.
- Analytics and reporting: Processing authorised marketing data to provide paid media, organic marketing, website analytics and other reporting functionality.
- Competitive intelligence: Providing permitted competitive comparisons and market insights.
- Customer support: Responding to enquiries, troubleshooting problems and assisting with account functionality.
- Platform improvement: Maintaining and improving the reliability, usability and functionality of CompEat Analytics.
- Security and fraud prevention: Protecting accounts, investigating unauthorised activity and maintaining platform integrity.
- Billing and administration: Processing subscriptions, payments, refunds and relevant financial records.
- Communications: Providing important service notices, product updates and marketing communications where legally permitted.
- Legal compliance: Meeting applicable contractual, accounting, tax, regulatory and legal obligations.
We do not use connected-account information for unrelated purposes without an appropriate legal basis and any permissions required by the relevant platform. Access to APIs and permissions have been granted to CompEat Analytics and approved by the respective platforms.
5. Legal Basis for Processing
Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
| Purpose | Legal basis |
|---|---|
| Account registration and SaaS service delivery | Performance of a contract |
| Subscription billing and customer administration | Contractual necessity and legal obligations |
| Platform security and fraud prevention | Legitimate interests and, where applicable, legal obligations |
| Service improvement and essential technical monitoring | Legitimate interests, subject to applicable safeguards |
| Optional marketing communications | Consent or another lawful basis where permitted |
| Optional non-essential tracking technologies | Consent where required |
| Processing connected-account data | Contractual necessity, legitimate interests or consent, as applicable to the processing |
| Compliance with regulatory and legal requirements | Legal obligations |
Authorising an integration through a third-party platform does not automatically mean that consent is the legal basis for every subsequent processing activity. We assess applicable legal grounds separately.
Where POPIA applies, we process personal information in accordance with its lawful processing requirements, including accountability, purpose specification, information quality, security safeguards and data subject participation.
6. Third-Party Platform Connections and Permissions
Our platform uses authorised integrations, including application programming interfaces (APIs), to access information from supported services.
When connecting a third-party account, users may be redirected to that platform’s authentication and authorisation process.
We request access only to permissions necessary to provide the relevant functionality.
Where supported, users may manage or revoke connected-account access through CompEat Analytics or directly through the third-party platform.
Revoking access may prevent some reports or features from functioning.
We handle previously obtained data according to applicable deletion obligations, contractual requirements, platform policies and legal retention requirements.
6.1 Google API Services
CompEat Analytics may use Google API Services to access authorised data from Google products, including Google Ads, Google Analytics, Search Console and YouTube.
Our use and transfer of information received from Google APIs is subject to the applicable Google API Services User Data Policy, including relevant Limited Use requirements.
We use Google API user data only for permitted, disclosed, user-facing functionality and associated service operations.
We do not sell Google API user data to data brokers or use it for unauthorised advertising targeting, surveillance or other prohibited purposes.
Any use of Google API information must comply with the permissions granted, our published disclosures and Google’s applicable policies.
Users may review or revoke connected Google permissions at https://myaccount.google.com/connections.
Google’s own privacy practices are explained at https://policies.google.com/privacy.
6.2 YouTube API Services
Certain CompEat Analytics features may use YouTube API Services.
Our use of YouTube information is subject to the applicable YouTube API Services Terms of Service and Developer Policies.
YouTube’s Terms of Service are available at https://www.youtube.com/t/terms.
Google’s Privacy Policy is available at https://policies.google.com/privacy.
Users who connect a YouTube account may revoke access through their Google Account security settings: https://security.google.com/settings/security/permissions.
Users may also request the deletion of stored information associated with their connected YouTube account by contacting our privacy team.
We will handle such requests in accordance with applicable YouTube API deletion and retention requirements.
Removing information from CompEat Analytics does not delete the original information stored by YouTube.
6.3 Other third-party platforms
Where CompEat Analytics integrates with Meta, LinkedIn, TikTok, Microsoft or other services, our processing is subject to applicable platform agreements, permissions and data handling requirements.
These providers operate their own privacy policies and may act as independent data controllers for information processed through their services.
CompEat Analytics is an independent software platform and is not affiliated with or endorsed by these services unless expressly stated.
7. Information Sharing and Disclosure
We may share personal information with selected third parties where necessary to provide our services or satisfy legal obligations.
These may include:
- Cloud hosting and infrastructure providers.
- Secure authentication providers.
- Subscription billing and payment processors.
- Customer support and communication services.
- Analytics and technical monitoring providers.
- Authorised contractors and service providers.
- Professional advisers and regulatory authorities where legally required.
We restrict access to information according to legitimate business needs and applicable contractual obligations.
Where third parties process personal information on our behalf, we require appropriate protections consistent with applicable law.
Connected marketing account data is not made available to unrelated customers. Where a customer expressly shares a report or grants another user access, information may be visible according to the permissions selected.
We do not sell personal information or connected marketing account data to third-party data brokers.
8. International Data Processing and Transfers
CompEat Analytics serves customers internationally.
Personal information may be processed or stored in countries outside a user’s country of residence, including where cloud service providers or authorised support operations are located.
Where international transfers are subject to applicable data protection restrictions, we use an appropriate lawful transfer mechanism.
Depending on the jurisdiction and circumstances, this may include:
- Recognised adequacy arrangements.
- Standard Contractual Clauses approved under the EU GDPR.
- Appropriate UK international data transfer arrangements.
- Contractual, organisational and technical safeguards.
- Other lawful transfer mechanisms permitted under POPIA or applicable legislation.
International transfers will be assessed according to the actual receiving country, provider and applicable legal requirements.
Users may contact our privacy team for information about safeguards applicable to their information.
9. Data Security
We recognise that customers entrust CompEat Analytics with potentially sensitive business performance information.
We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.
Security measures may include secure authentication, access controls, encryption where appropriate, monitoring, security updates and restricted administrative permissions.
No internet-connected platform or electronic storage system can be guaranteed to be completely secure.
Users are responsible for keeping their login credentials confidential and promptly reporting suspected unauthorised account activity.
Where a personal information security incident occurs, we investigate and provide notifications to affected parties and regulators where required by applicable law.
10. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this policy, comply with legal obligations, resolve disputes and enforce applicable agreements.
Different categories of information may have different retention periods.
- Account information: Retained while the account remains active and for the period required by applicable law after account closure, unless a longer period is required by law.
- Subscription and billing records: Retained for the period required by applicable accounting, taxation and financial recordkeeping laws.
- Connected marketing platform information: Retained only as necessary for authorised reporting functionality, subject to applicable third-party platform restrictions and the user’s active permissions.
- YouTube API data: Stored, refreshed or deleted according to applicable YouTube API policies, which may impose specific periods for cached or authorised information.
- Support communications and security records: Retained for documented operational or legal periods appropriate to their purpose.
When information is no longer required, we delete, de-identify or anonymise it in accordance with our retention procedures and applicable law.
Backup copies may remain temporarily until deleted through applicable backup retention cycles, subject to legal and security controls.
11. Account Disconnection and Data Deletion
Users may request to:
- Disconnect authorised marketing accounts.
- Revoke access permissions.
- Delete information associated with their CompEat Analytics account.
- Close their CompEat Analytics account.
- Obtain information about data retained following account closure.
Requests may be submitted to marketing@compeat.social.
We may request reasonable verification of identity or authority before processing a request.
We will respond and take action within the timeframes required by applicable privacy law and third-party platform policies.
Some information may need to be retained for legitimate legal, accounting, security or contractual purposes.
If we are processing data on behalf of a business customer, certain deletion requests may need to be directed to that customer as the relevant data controller.
13. Marketing Communications
We may send service-related communications concerning account security, subscription billing, platform changes and essential operational matters.
We may also send product announcements, offers, educational content and marketing communications where permitted by applicable law.
Users may opt out of marketing emails through an unsubscribe link or by contacting our team.
Unsubscribing from marketing communications does not prevent necessary account, security or billing notices.
14. Your Privacy Rights
Depending on your country of residence and the laws applicable to your personal information, you may have the right to:
- Request confirmation of whether we hold your personal information.
- Access personal information held about you.
- Correct inaccurate or incomplete information.
- Request deletion or destruction of information in applicable circumstances.
- Object to certain processing activities.
- Request restriction of processing where applicable.
- Withdraw consent where processing relies on consent.
- Request data portability where the GDPR or UK GDPR provides that right.
- Object to direct marketing.
- Lodge a complaint with the relevant data protection authority.
These rights may be subject to lawful limitations or exceptions.
To exercise your rights, contact marketing@compeat.social.
South African users
Where POPIA applies, users may exercise their rights under the Protection of Personal Information Act 4 of 2013.
Complaints may be submitted to South Africa’s Information Regulator: https://inforegulator.org.za/.
European Union users
Where EU GDPR applies, users may contact the relevant supervisory authority in their country or jurisdiction.
United Kingdom users
Where UK GDPR applies, users may contact the UK Information Commissioner’s Office: https://ico.org.uk/.
15. Children’s Privacy
CompEat Analytics is a business-focused software platform and is not intended for use by children under the age of 18.
We do not knowingly solicit personal information directly from children for the purpose of creating CompEat Analytics accounts.
If we become aware that a child’s personal information has been collected unlawfully, we will take appropriate action.
16. Automated Analytics and Insights
CompEat Analytics processes marketing and performance data to generate reports, trends, comparisons and insights.
These features may involve automated data analysis.
The information presented is intended to assist users with marketing and business decisions and should not be treated as a guarantee of future performance.
We do not intend these reporting features to make solely automated decisions about individuals that produce legal or similarly significant effects.
If additional automated decision-making or AI-supported functionality is introduced that materially changes how personal information is processed, we will provide appropriate disclosures and obtain any permissions required by law or the relevant platform.
17. Third-Party Websites and Services
Our website may contain links to third-party websites, applications and services.
We are not responsible for the privacy practices of independent third parties.
Users should review the privacy policies and terms of the relevant providers before using or connecting those services.
18. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Platform features and functionality.
- Integrated services and third-party requirements.
- Data protection legislation.
- Operational and security practices.
- Subscription and business processes.
Where changes materially affect how personal information is processed, we will provide appropriate notice and obtain further consent where required.
The most recent version will be made available on our website, together with its effective date.
19. Contact Us
For privacy questions, personal information requests, account deletion or concerns about how your information is processed, please contact:
CompEat Analytics
Privacy contact: marketing@compeat.social
Website: https://compeat.social/
Registered company name and business address are available on request from the privacy contact.
We take privacy enquiries seriously and aim to respond within the timeframes required by applicable law.
CompEat Analytics — Your Data. Your Competition. Your Advantage.