Privacy Policy

Scope & Who We Are

Cross & Compass Ventures, LLC (“Cross & Compass,” “we,” “us”) operates this website and provides business consulting, website and digital services, marketing and business support, customer success and operational support, and venture development.

This Policy covers information collected through this website and through inquiries, proposals, invoices, and engagements arising from it. It does not cover information we process on behalf of a client under a separate services agreement, where the client determines how the information is used. In those engagements, the client's own privacy policy governs, and we act at the client's direction.

Information You Provide

We collect information you submit directly, which may include:

• Name, business or organization name, and job title;
• Email address and telephone number when voluntarily provided;
• Mailing address for contracts, invoicing, and correspondence;
• Payment method or remittance details you send us directly for reconciliation;
• Area of interest and preferred contact method;
• The content of your contact-form message or correspondence;
• Invoice-related inquiries and engagement details;
• Any other information you choose to provide.

We do not require you to provide sensitive personal information, and we ask that you not submit health information, government identification numbers, or full payment-card details through the website's contact forms.

Analytics and Technical Information

We do not currently use Google Analytics, advertising pixels, or other custom marketing analytics on this website. OpenAI hosts this website through ChatGPT Sites and, together with its infrastructure providers, may process limited technical and operational information necessary to host, secure, maintain, and troubleshoot the website. This may include requested pages, access dates and times, referring pages, device and browser information, general network information, and security and error logs.

Cookies and Similar Technologies

This website currently uses only cookies and similar technologies necessary for website operation and security. For example, our hosting infrastructure may use a short-lived security cookie to identify automated traffic and protect the website from abuse. We do not currently use advertising cookies, cross-site behavioral tracking, or custom analytics cookies.

If we introduce nonessential analytics or marketing technologies, we will update this Privacy Policy and provide additional choices or consent controls where required.

Most browsers allow you to block or delete cookies through their settings; blocking cookies necessary for operation may prevent parts of the site from working.

How We Use Information

We use information to:

• Respond to inquiries and provide requested information;
• Prepare proposals, estimates, statements of work, and invoices;
• Deliver services and complete engagements;
• Support customer relationships, service, and follow-up;
• Maintain website security and prevent spam, fraud, and abuse;
• Monitor and improve site performance and usability;
• Meet accounting, tax, contractual, and legal obligations;
• Send business communications related to an engagement.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

How We Share Information

We share limited information with service providers that support our operations, including OpenAI and its infrastructure providers for website hosting, contact-form handling, and security; and providers of email and communications, spam prevention, invoicing and payment processing, and professional, accounting, or legal services. Inquiries submitted through the contact form are stored in the website's database with our hosting provider. These providers are permitted to use the information only to perform services for us.

We may also disclose information when required by law or legal process, to establish or defend legal claims, to protect the rights, property, or safety of Cross & Compass or others, in connection with a merger, acquisition, financing, or sale of assets, or at your direction or with your consent.

We do not claim that information is never shared, because essential providers necessarily process it on our behalf.

We Do Not Sell Your Information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising, as those terms are defined under applicable state privacy laws. We do not sell or share the personal information of minors.

We do not use or disclose sensitive personal information for purposes beyond those permitted under applicable law.

Payments

Payment information—including card details and bank account and routing information for ACH or bank transfers—is collected and handled by the applicable third-party payment processor or payment service. It is not collected or stored directly by this website. Clients receive transaction-specific payment links through their invoices and may also pay by other methods we accept, each governed by that provider's own terms and privacy practices. We may receive limited transaction information such as the amount, date, payment status, transaction identifier, payment method and, where provided by the processor, the last four digits of a card or account.

Security

We use administrative and technical safeguards appropriate to the nature of the information we handle, including transport encryption, access controls, and reliance on reputable hosting and payment providers. No system can guarantee absolute security, and we do not promise that information will never be accessed without authorization. Please do not send sensitive information—including full payment-card numbers, government identification numbers, or health information—through the website's contact forms.

How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including responding to inquiries, providing services, maintaining business, tax, and legal records, resolving disputes, enforcing agreements, and preventing fraud or misuse.

Retention periods depend on the nature of the information, why it was collected, legal requirements, and legitimate operational needs. Information is deleted or de-identified when it is no longer reasonably needed, subject to applicable legal and recordkeeping obligations.

Your Privacy Rights

Where applicable law grants you privacy rights, those may include some or all of the following. Several U.S. states—including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana—provide rights of this kind, and whether any particular right applies depends on your location and on the law in question:

• Access / Know—request confirmation of whether we process your information and a copy of it;
• Correct—request correction of inaccurate information;
• Delete—request deletion of information we hold about you;
• Portability—request a copy in a portable, readily usable format;
• Opt out—opt out of the sale of personal information, sharing for targeted advertising, or profiling with significant effects. As described in Section 7, we do not engage in these activities;
• Limit use of sensitive information—where applicable;
• Appeal—appeal a decision we make on your request.

We will not deny services, charge a different price, or provide a different level of service because you exercised a privacy right.

Rights are subject to exceptions and to information we must retain for legal, accounting, contractual, security, or fraud-prevention reasons. We will tell you if an exception applies to your request.

How to Submit a Privacy Request

Submit a request through the contact form and select “Privacy Request,” or write to us at the address in Section 19.

Verification. To protect your information, we will take reasonable steps to verify your identity before acting, usually by confirming information already associated with your inquiry or engagement. We may decline a request we cannot reasonably verify.

Authorized agents. An authorized agent may submit a request on your behalf with proof of authorization. We may still contact you directly to confirm.

Timing. Where applicable law grants you privacy-request rights, we will respond within the period required by that law, generally within forty-five (45) days. Where permitted, we may extend the response period and will notify you of the extension and the reason for it.

Appeals. If we decline your request, you may appeal by replying to our response or submitting a new request marked “Privacy Appeal.” We will respond to the appeal within the timeframe required by applicable law and will explain the reasons for our decision. If your appeal is denied, you may contact your state attorney general.

Marketing Communications

If we send you business development or marketing email, every message includes an unsubscribe link, and you may also opt out by contacting us. We will act on an opt-out promptly.

Opting out of marketing does not stop transactional and relationship messages—proposals, invoices, project updates, service notices, and messages required for security, legal, or accounting reasons. Those are part of an engagement rather than marketing, and you cannot unsubscribe from them while an engagement is active.

Browser Privacy Signals

Browser “Do Not Track” signals are not standardized across browsers and there is no common agreement on how to respond to them, so this website does not respond to DNT headers.

Where required by applicable law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC) transmitted by your browser. Because we do not sell personal information or share it for targeted advertising, such a signal does not change how this website operates.

Third-Party Links

This website may link to third-party services with independent privacy practices. Review their policies before providing information to them. Cross & Compass is not responsible for the privacy or security practices of third parties.

Children

This website is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided information, contact us and we will delete it.

Processing Locations

Cross & Compass operates in the United States. Information may be processed in the United States and other locations where our service providers operate. Where required, appropriate safeguards are used for international transfers of personal information.

Policy Changes

We may revise this Policy to reflect changes in website functionality, services, vendors, or law. The “Last Updated” date identifies the current posted version. Material changes will be reflected in that date, and continued use of the website after an update constitutes acceptance where permitted by law.

Contact Us About Privacy

Submit a privacy request through the contact form and select “Privacy Request,” or contact us directly. Mail may be addressed to the attention of Privacy.