Privacy Policy
Effective and last updated: August 28, 2026
This policy explains what Comitant collects, what the Outside-In report analyzes, which service providers receive data, and the choices available to you.
Who this policy covers
Comitant ("Comitant," "we," "us," or "our") operates comitant.io and provides professional AI, data, automation, measurement, and lifecycle services. This policy applies when you visit the site, request an Outside-In report, communicate with us, or become a client.
Information we collect
Information you submit
The Outside-In report form asks for your name, work email, company, business website, business type, selected problem, and consent. You may also provide a short description of what changed or made the problem urgent. We record attribution fields such as UTMs, submission timestamps, and a submission identifier.
Contact messages
When you use the contact form, we receive the website, problem, message, and reply email you enter. We also record which page or link brought you to the form so we can respond and route the request.
Public website signals
When you request a report, our analyzer makes a bounded request to the business URL you provide and a small number of publicly accessible pages on that site. It may identify public technologies, links, page structure, and other observable signals. It does not request logins, credentials, private account data, financial records, or unpublished customer data. The report separates what was observed from hypotheses and items that require inside access.
Report results
We create and retain report metadata such as the selected problem, score, qualification band, top finding, structured findings, and questions that could only be answered with inside access. The browser also receives the generated artifact so you can review, print, or save it immediately.
Site and device information
Our hosting and measurement systems may receive request metadata, IP address, browser and device information, pages viewed, referring page, approximate location derived from IP, timestamps, an anonymous visitor identifier, and campaign attribution. We do not intentionally send report-form names, emails, company names, or free-text answers to Google Analytics.
Client-service information
If you engage Comitant, we may process account access, business data, communications, deliverables, billing records, and operating documentation as described in the applicable agreement and project scope.
How we use information
- Generate and deliver the report you requested.
- Record the request, route follow-up, prevent duplicate work, and evaluate whether a deeper review may be useful.
- Respond to questions and provide professional services.
- Measure site and funnel performance, debug errors, protect the service, and prevent abuse.
- Send report-related and relevant follow-up communications when you have asked for them. You can unsubscribe from marketing messages at any time.
- Comply with legal obligations and enforce our agreements.
Depending on the jurisdiction and context, the legal basis for processing may include taking steps you requested, performing a contract, consent, legitimate interests such as security and service improvement, or compliance with law.
Service providers and disclosures
We use service providers to operate the site and deliver the requested workflow. Their own terms and privacy notices govern their processing. Current categories include:
Vercel
Hosts the website, runs the report function, and provides web analytics and delivery infrastructure. Vercel privacy notice.
HighLevel / LeadConnector
Receives contact, consent, attribution, and report fields for CRM, pipeline, and workflow operations. HighLevel privacy policy.
Google Tag Manager and Google Analytics may process site-interaction and measurement data according to our configuration and your choices. Google Analytics privacy and security.
Advertising platforms
If configured, Meta Pixel and LinkedIn Insight Tag remain unloaded until you deliberately allow optional tracking. They may then receive page and conversion events for measurement or audience building. We honor Global Privacy Control for this advertising layer. Meta Business Tools information and LinkedIn privacy policy.
We may also disclose information when required by law, to protect rights or security, as part of a business transaction, or at your direction. We do not sell personal information for money. Some privacy laws define targeted-advertising disclosures as a "sale" or "sharing" even when no money changes hands; the controls below let you prevent that optional advertising layer from loading on this site.
Your tracking choices
Analytics is used by default unless you opt out. Advertising pixels are denied by default and require a deliberate opt-in. Global Privacy Control keeps advertising tracking denied.
Browser controls, content blockers, and vendor opt-out tools may provide additional choices. Changing your preference cannot retrieve data already processed before the change.
Retention and security
We retain information only as long as reasonably needed to provide the requested report and follow-up, operate and secure the business, maintain necessary records, resolve disputes, and meet legal or contractual obligations. The period varies by the type of information and why it is held. When information is no longer needed, we delete or de-identify it where reasonably practicable.
We use reasonable administrative, technical, and organizational safeguards. No transmission or storage method can be guaranteed completely secure.
Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or information about disclosures; to object to or withdraw consent for certain processing; and to opt out of targeted advertising or certain sharing. We may need to verify your identity and may retain information where the law permits or requires it.
To make a request, email jacob@comitant.io. You may also unsubscribe through the link in a marketing email. If local law gives you a right to appeal a decision or complain to a regulator, you may exercise that right.
International processing
Comitant and its service providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, providers may use contractual or other lawful transfer mechanisms.
Children
The site and services are intended for business users and are not directed to children under 16. Please do not submit a child’s personal information. Contact us if you believe that has happened.
Changes and contact
We may update this policy as the service or law changes. The date at the top shows the latest revision. Material changes will be communicated when required.
Questions or requests can be sent to jacob@comitant.io.