Privacy Notice

Compliance Admins LLC ("Compliance Admins", "we", "us") operates the ThirdNexa platform. For account and platform data, we act as the data controller. For the vendor and oversight records a firm enters into its own workspace, that firm is the controller and we act as a processor on its instructions.

• Account data — name, work email, organization, role, and login credentials (passwords are stored only as hashes; multi-factor secrets are encrypted).
• Service data — the vendor, contract, document, review, and finding records you choose to enter, including uploaded files.
• Usage & device data — log data such as IP address, browser type, pages visited, and actions taken in the app (used for security and product improvement).
• Support & contact data — messages you send us, including demo requests.

Payment card details are collected and processed by Paddle (our Merchant of Record); we never see or store your full card number.

• Providing and operating the Service (performance of our contract with you).
• Security, fraud prevention, and abuse detection (legitimate interests).
• Product improvement and troubleshooting (legitimate interests).
• Customer support (performance of contract).
• Product announcements, where permitted (consent or legitimate interests; you can opt out at any time).
• Meeting legal obligations (legal obligation).

ThirdNexa uses anonymized, aggregated usage data (such as vendor counts and feature usage) to improve the product. We never share individual firm data.

• Service providers / subprocessors — cloud hosting and database infrastructure, email delivery, and error monitoring, each bound by contractual data-protection terms.
• Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, subscription management, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers, under confidentiality.
• Authorities — where required by law or to protect rights and safety.

We do not sell personal data.

We keep personal data for as long as your account is active or as needed to provide the Service. When data is no longer needed, it is deleted or anonymized. Firm workspace records are retained and deleted according to the firm's instructions and its own regulatory retention obligations.

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete your personal data, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us through our contact form or by email to support@thirdnexa.com. You may also have the right to complain to your local data-protection authority.

We apply appropriate technical and organizational measures, including encryption in transit and at rest, mandatory multi-factor authentication, per-organization data isolation enforced at the database level, and least-privilege internal access.

The Service uses essential cookies and browser storage required for sign-in sessions, security, and your preferences (such as theme). We do not use third-party advertising cookies.

We may update this notice from time to time; the "last updated" date above reflects the current version. Questions about privacy can be sent through our contact form or by email to support@thirdnexa.com.