Privacy Policy

Last Updated June 12, 2026

CompassPass LLC ("CompassPass," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you provide while using our website, https://www.compasspass.org, and the CompassPass membership-management platform (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the circumstances under which it may be disclosed.

This policy applies only to information collected through the Service and does not apply to information collected offline or through other sources.

Your Privacy Rights

Depending on your location and applicable law, you may request access to, correction of, or deletion of personal information we maintain about you. You may also request limitations on certain processing activities or withdraw consent where applicable.

Requests may be submitted by emailing [email protected]. We may need to verify your identity before fulfilling certain requests.

Information We Collect

We collect information from two distinct groups: Customers (organizations and individuals who sign up for a CompassPass subscription) and End Users (members of those organizations who use the platform).

From Customers, we collect:

• Account and contact information (name, email address, organization name, phone)
• Billing information processed through PayPal (we do not store full payment card or bank account numbers on our servers)
• Authentication credentials, stored in encrypted form
• Usage data related to the operation of the Service

From End Users, we process information that Customers upload into their organization's CompassPass account, which may include:

• Member contact details, membership history, and dues records
• Event registrations and attendance
• Uploaded documents and images
• Authentication credentials for member portal accounts, stored in encrypted form
• For youth-serving organizations (such as Scouting America troops and packs), information about minor members — uploaded by parents, guardians, or authorized adult leaders — which may include name, date of birth, contact details, rank or advancement records, and health or medical information where the organization uses those features

For End Users, CompassPass acts as a data processor on behalf of the Customer organization. Questions about End User data, including information about minors, should be directed to the organization that maintains the account.

How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Authenticate users and secure accounts
• Communicate with Customers about their account, billing, and Service updates
• Respond to support requests
• Comply with legal obligations

Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes outlined in this policy, including providing the Service, meeting legal obligations, resolving disputes, and enforcing our agreements. Customer data is retained for the life of the subscription and for a reasonable period thereafter to allow for account reactivation and recordkeeping.

Security and Abuse Prevention

To protect the Service and our users from automated abuse, spam, and fraudulent activity, we use security and rate-limiting technologies, including CAPTCHA services provided by Cloudflare. These services may collect technical information such as IP address, browser characteristics, and interaction data solely for security and risk-assessment purposes.

This information is processed in accordance with Cloudflare's privacy practices and is not used by CompassPass for marketing or profiling.

Cookies and Similar Technologies

We use cookies and similar technologies to support core Service functionality and improve user experience.

Cookies may be used for:

• Session management and authentication
• Security and fraud prevention
• Basic, aggregated analytics to understand Service usage

You may control cookies through your browser settings. Disabling cookies may limit certain features of the Service. By continuing to use the Service without changing your settings, you consent to our use of cookies.

Payments

All subscription payments are processed through PayPal. CompassPass does not store full credit card or banking information on its servers.

Information provided for payment processing is used only to complete the transaction and meet record-keeping and tax-reporting obligations. Your use of PayPal is also governed by PayPal's own privacy policy and terms.

Third-Party Service Providers

We rely on a limited number of third-party providers to operate the Service, including hosting infrastructure, email delivery, security services (such as Cloudflare), and payment processing (PayPal). These providers process information only as needed to perform services on our behalf and are subject to confidentiality obligations.

Email Communications

If you provide your email address, we may send you administrative or informational messages related to your account and the Service. You may unsubscribe from non-essential marketing communications at any time using the link provided in those emails. Transactional and account-related messages (such as billing notices) cannot be opted out of while your subscription is active.

Aggregated Statistics

We may collect and publish aggregated, anonymized statistics regarding Service usage. These statistics do not identify individual users.

Links to External Websites

The Service may contain links to third-party sites that we do not control. We are not responsible for the content, security, or privacy practices of external websites. We encourage you to review their privacy policies before providing personal information.

Children's Privacy

The Service is intended for use by adults — typically parents, guardians, organizational leaders, and administrators. We do not direct the Service at children and do not knowingly allow individuals under the age of 13 to create their own accounts.

We recognize, however, that some organizations using CompassPass — including Scouting America troops and packs, youth sports leagues, and other youth-serving organizations — maintain records that include personal information about minors, uploaded by parents, guardians, or authorized adult leaders. In those cases:

• The organization, acting as the data controller, is responsible for obtaining any parental consent required by the Children's Online Privacy Protection Act ("COPPA") or other applicable law before uploading information about a minor.
• CompassPass processes this information solely on the organization's behalf and only as needed to provide the Service.
• We do not use information about minors for marketing, advertising, profiling, or any purpose outside providing the Service to the organization.
• Access to records about minors within an organization's account is limited to that organization's authorized administrators and the relevant parents or guardians, as configured by the organization.

If you are a parent or guardian and believe information about your child is stored in CompassPass, please contact the organization that maintains the account in the first instance. You may also email us at [email protected]; we will work with the organization to review, correct, or delete the information in response to verified requests.

Do Not Track Signals

At this time, the Service does not respond to browser "Do Not Track" signals.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

Contact Information

If you have questions or concerns about this Privacy Policy, you may contact us at: