Privacy Policy

Your privacy is important to us. This policy explains how we handle your data.

Last updated: April 8, 2026

Effective: April 2026

This Privacy Policy describes how Bubba AI, Inc. d/b/a Comp AI (“Comp AI,” “we,” “us”) collects, uses, and shares personal information when you use our website and services.

Information We Collect

Information You Provide

  • Account information: Name, email, company name, job title
  • Payment information: Processed securely by Stripe; we do not store full payment details
  • Communications: When you contact us or participate in surveys
  • Customer Data: Information you upload to the platform (governed by our Data Processing Agreement)

Information Collected Automatically

  • Usage data: Features used, actions taken, time spent
  • Device information: Browser type, operating system, IP address
  • Cookies:See “Cookies” section below

How We Use Information

We use your information to:

  • Provide and improve the Services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends and usage
  • Detect, prevent, and address fraud and security issues
  • Comply with legal obligations

How We Share Information

We do not sell your personal information. We may share information with:

  • Service providers: Third-party vendors who perform services on our behalf (e.g., hosting, analytics, payment processing) to operate, support, and improve our Services. These third parties process personal data only for specified purposes consistent with this Privacy Policy and applicable law.
  • Professional advisors: Lawyers, auditors, consultants as needed
  • Legal compliance: When required by law or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets

Cookies

We use cookies and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Understand how you use our Services
  • Improve our Services

For detailed information about the cookies we use and how to manage them, see our Cookie Policy.

Analytics and Experimentation

We use analytics tools to understand how visitors interact with our website, to measure the effectiveness of our marketing, and to run controlled experiments (e.g. A/B tests) on our pages:

  • PostHog— product analytics, session recording, and feature-flag experimentation for trycomp.ai. Form inputs are masked in session recordings; URL parameters and non-input page content are not masked. Requests are routed through a first-party proxy on our domain. PostHog respects the browser “Do Not Track” signal.
  • Google Analytics and Google Ads — traffic measurement and advertising-conversion attribution.
  • Dub — click-through attribution for referral and outbound links.

These tools process data we collect as a controller from website visitors and prospects (including email addresses provided on marketing forms), which is distinct from Customer Data processed under our Data Processing Agreement. You can opt out of analytics cookies at any time — see the Cookie Policy for instructions.

Data Retention

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy, unless a longer retention period is required by law.

Your Rights

Depending on your location, you may have rights to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your information
  • Object to or restrict processing
  • Data portability
  • Withdraw consent

Individuals may also have rights under applicable data protection laws, including rights provided under the EU-U.S. Data Privacy Framework.

To exercise these rights, contact us at privacy@trycomp.ai.

California Residents

Under CCPA, California residents have additional rights including the right to know what personal information we collect and how we use it, and the right to opt-out of sales (we do not sell personal information).

European Residents

For GDPR purposes, we process personal information based on: performance of our contract with you, our legitimate interests, your consent, and legal obligations.

Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet is 100% secure.

International Transfers

We are based in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States. We implement appropriate safeguards for such transfers as described in our Data Processing Agreement.

Data Privacy Framework (DPF)

Bubba AI, Inc. d/b/a Comp AI (“Comp AI”) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF as set forth by the U.S. Department of Commerce. Comp AI’s DPF certification applies to both human resources data (HR data) and personal data other than HR data (non-HR data) received from the European Union and the United Kingdom.

Comp AI has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit: https://www.dataprivacyframework.gov/.

Independent Recourse Mechanism

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, Comp AI commits to cooperate and comply free of charge with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.

Your Rights (DPF)

Individuals have the right to access personal data that Comp AI holds about them and to request correction, amendment, or deletion where that data is inaccurate or processed in violation of the DPF Principles.

Choice and Limitation of Use

Comp AI provides individuals with the opportunity to opt out of (i) the disclosure of their personal data to third parties, and (ii) the use of their personal data for purposes that are materially different from those for which it was originally collected or subsequently authorized. Individuals may exercise these rights by contacting privacy@trycomp.ai.

Onward Transfer Liability

Comp AI may transfer personal data to third-party service providers acting as agents on our behalf. Comp AI remains liable under the DPF Principles if its agents process such personal data in a manner inconsistent with the DPF Principles, unless Comp AI proves that it is not responsible for the event giving rise to the damage.

Regulatory Oversight

Comp AI is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Binding Arbitration

Under certain conditions, individuals may invoke binding arbitration to address complaints not resolved by other dispute resolution mechanisms, as set forth in Annex I of the DPF Principles.

Government Access

Comp AI may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Anti-Spam and Unsolicited Messages

Comp AI strictly prohibits the use of unsolicited messages, including spam, to advertise or promote our website, services, or brand. We do not send, authorize, or condone the sending of unsolicited bulk emails, unsolicited commercial emails, or any form of spam that references or links to trycomp.ai or any of its subdomains.

All commercial email communications sent by Comp AI or on our behalf are sent only to recipients who have opted in to receive such communications, in compliance with applicable laws including the CAN-SPAM Act, GDPR, and CASL. Every marketing email we send includes a clear and functional unsubscribe mechanism.

If you believe you have received an unsolicited message that references our website or services, please report it to help@trycomp.ai so we can investigate and take appropriate action.

Children

Our Services are intended for business use. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If we become aware that we have collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy and revising the “Effective” date.

Contact Us

Bubba AI, Inc.
2261 Market Street
San Francisco, CA 94114
privacy@trycomp.ai