How we protect your data

• Sign-in via email/password and Google OAuth.
• Each user belongs to one or more organisations with an explicit role (owner, admin, accountant, employee, viewer).
• Data is isolated by organisation: a user only sees the organisations they belong to.
• Self-registration as an owner is only possible when initially creating an organisation. Adding further members requires an owner or admin role.

Compass stores the accounting data you enter: organisations, charts of accounts, entries, invoices, quotes, suppliers, customers, expense reports, bank statements and VAT returns. No data is shared between organisations.

Invoice PDFs are stored in a private bucket. Only members of the owning organisation can access them; writing is restricted to owner, admin and accountant roles.

• Row-Level Security (RLS) enabled on application tables, with policies scoped by organisation membership and role.
• Privileged database functions are not executable by anonymous visitors, except for functions serving public invoice and quote links.
• Audit logs record creations, validations, cancellations and deletions of accounting entries.

When you send an invoice or quote by email, a public link is generated. It contains a random 32-byte token and cannot be guessed. It can be disabled from the application. No authentication is required to view the document via this link.

The application is served via Lovable (TanStack Start on Cloudflare Workers). The database and authentication rely on the Lovable Cloud platform (managed Supabase). Transfers between browser, application and database use HTTPS/TLS.

These infrastructure components are provided by the Lovable and Supabase platforms; Compass does not perform an independent certification of their compliance.

Emails (invoice notifications, quote sending, authentication emails) are sent via Resend from the domain compass.thinqbase.com. Every email includes an unsubscribe link for non-transactional communications.

• Lovable — application hosting.
• Supabase (via Lovable Cloud) — database, authentication, file storage.
• Resend — sending transactional emails.
• Paddle — billing of Compass subscriptions.

Accounting data is retained as long as your organisation is active. Swiss law requires accounting records to be kept for 10 years; we recommend exporting your data regularly. Upon request to delete an organisation by its owner, the associated data is permanently deleted after confirmation.

To report a vulnerability or ask a security or privacy-related question, write to security@thinqbase.com.