Privacy Policy

This policy explains what information Compound OS collects when you visit thecompoundsystem.com, how we use it, and how you can reach us about it. We keep the surface area as small as possible on purpose.

Who we are

Compound OS is operated by Tarek Shaar, an independent operator based in the UAE. Reach us any time at hello@thecompoundsystem.com.

Information we collect

• Email address. Required to create an account, receive the magic login link, and verify access after purchase.
• Authentication metadata. When you log in, we store a signed session cookie in your browser so you do not have to re-authenticate on every page load.
• Purchase metadata. When you buy, Stripe processes the payment and sends us confirmation, your email, and an internal customer identifier. We never see your card number or banking details.
• Product usage. We store which modules you have opened and completed so your progress persists across devices. We do not track your clicks, scroll depth, or session recordings.
• Basic server logs. Our hosting provider keeps request logs (IP address, user agent, timestamp) for security and debugging. These are short-lived and not joined to your account.

How we use it

We use the information above only to deliver the product (give you access, track your progress, support your account) and to communicate with you about it (receipts, important service messages, the occasional update). We do not sell, rent, or trade your data.

Third parties we rely on

Compound OS is intentionally a small operation. We rely on a handful of well-known vendors to run it:

• Stripe processes every payment and stores card details on our behalf.
• Supabase stores your account email and progress data.
• Resend delivers transactional and magic-link email.
• Vercel hosts the site and handles request-level logging.

Each of these providers has its own privacy posture. We share only what is necessary for them to do their job.

Cookies and analytics

We use one cookie: a signed session cookie that confirms you are logged in. We do not run third-party advertising pixels or cross-site trackers. If we ever add light product analytics, we will list them here before turning them on and will prefer tools that are privacy-respecting by default.

Your rights

You can request a copy of the data we hold on you, request corrections, or ask us to delete your account and associated data entirely. Email hello@thecompoundsystem.com and we will respond within a reasonable window, usually a few business days.

Retention

We keep your account data for as long as your account is active. If you delete your account, we remove your profile and progress within 30 days, except where we are required to keep transactional records (receipts) for accounting and legal reasons.

Changes to this policy

If we make material changes, we will update the "last updated" date at the top of this page and, where appropriate, email active members. Continued use of the site after an update constitutes acceptance.