BenefitFlow

Privacy Policy

Compound Tech LLC, operating as BenefitFlow
Last updated: April 7, 2026

1. Introduction

This Privacy Policy describes how Compound Tech LLC, operating as BenefitFlow ("BenefitFlow," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit benefitflow.com (the "Site") or use any of our applications or services (collectively, the "Services").

Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

This policy applies to all visitors, users, and others who access or use the Site or Services, regardless of location.

2. Who We Are

Compound Tech LLC (BenefitFlow)
Email: support@benefitflow.com
Website: benefitflow.com

BenefitFlow is the data controller responsible for your personal information collected through this Site and our Services.

3. Information We Collect

We collect information in the following ways:

3a. Information You Provide Directly

Account Registration:
When you create or update a BenefitFlow account, we collect:

  • Full name
  • Email address
  • Employer name
  • Job title

Form Submissions:
When you submit a form on our Site (including gated content downloads or demo requests), we collect:

  • First and last name
  • Work email address
  • Company name
  • Job title

Support Communications:
We collect any information you voluntarily provide when contacting us, including through emails sent to support@benefitflow.com.

3b. Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain technical and usage information, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring URLs and traffic source
  • Search terms used to find our Site
  • Links clicked
  • Date and time of visits
  • Device identifiers

3c. Information Collected Through Our Application

When you use the BenefitFlow application, we collect:

  • On-screen activity within the application
  • Time spent within the application
  • App crashes and system error logs

3d. Information Collected by Our Payment Processor

We use Stripe to process payments. Compound Tech LLC does not collect or retain payment card numbers, bank account details, or Social Security numbers. All payment data is transmitted directly to and stored by Stripe. Their practices are governed by Stripe's Privacy Policy at stripe.com/privacy.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Site. This section explains what technologies we use, what they do, and how you can control them.

4a. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device across pages and visits. We also use similar technologies such as pixels, tags, and scripts that function in comparable ways.

4b. Your Consent — How We Manage Cookies

We use CookieYes as our Consent Management Platform. When you first visit our Site, a cookie consent banner is displayed. Non-essential cookies are not activated until you explicitly accept them by clicking "Accept" on the banner. Simply browsing the Site does not constitute consent to non-essential cookies.

You may:

  • Accept all cookies
  • Reject all non-essential cookies
  • Customize your preferences by category

You can update your preferences at any time by clicking the cookie settings link in the footer of our Site. Withdrawing consent does not affect the lawfulness of any processing that occurred prior to withdrawal.

4c. Cookie Categories

We group cookies into the following categories:

Strictly Necessary
Required for the Site to function properly. These cannot be disabled as they are essential to delivering our services (e.g., security, session management). No consent is required for these.

Functional
Enable enhanced features and personalization. These are activated by default but may be disabled through your preferences.

Analytics
Help us understand how visitors use our Site, including which pages are visited most often and how visitors navigate through the Site. These are only activated upon your explicit consent.

Advertisement
Used to deliver relevant advertising, track ad conversions, measure ad campaign performance, and build advertising audiences. These are only activated upon your explicit consent.

4d. Third-Party Tracking Technologies

The following third-party tools are used on our Site. Each tool is only activated in accordance with the consent category it falls under, as described in Section 4c.

Google Tag Manager
Category: Strictly Necessary (container only)
Provider: Google LLC
Purpose: Google Tag Manager is a tag management system used to deploy and manage other scripts on our Site. It does not collect personal data itself but facilitates the loading of other tools listed in this section.
Privacy Policy: policies.google.com/privacy

Google Analytics 4
Category: Analytics
Provider: Google LLC
Tracking ID: G-9B7B9QT8TT
Purpose: We use Google Analytics to collect aggregated data about how visitors interact with our Site, including pages viewed, session duration, traffic sources, and user flow. This data helps us understand and improve our Site experience.
Data collected: Anonymized usage data, device and browser information, approximate location (country/region level), traffic source.
Retention: Data is retained in accordance with our Google Analytics configuration.
Privacy Policy: policies.google.com/privacy
Opt-out: tools.google.com/dlpage/gaoptout

Google Ads (Conversion Tracking)
Category: Advertisement
Provider: Google LLC
Tracking ID: AW-16735904066
Purpose: We use Google Ads conversion tracking to measure whether visitors who clicked on one of our advertisements went on to take a meaningful action on our Site, such as submitting a form or requesting a demo. We also use Google Ads audience features to serve relevant advertising to past Site visitors.
Data collected: Ad click data, conversion actions, cookie identifiers, ad interaction data.
Consent signals managed: ad_storage, ad_user_data, ad_personalization
Privacy Policy: policies.google.com/privacy

LinkedIn Insight Tag
Category: Advertisement
Provider: LinkedIn Corporation
Partner ID: 5934986
Purpose: We use the LinkedIn Insight Tag to track conversions from LinkedIn advertising campaigns, to build retargeting audiences for future LinkedIn ads, and to gain demographic insights about visitors who interact with our Site via LinkedIn.
Data collected: URL visited, IP address (truncated), device and browser attributes, timestamp, LinkedIn member data (for LinkedIn members who are logged in).
Privacy Policy: linkedin.com/legal/privacy-policy
Opt-out: linkedin.com/psettings/guest-controls/retargeting-opt-out

HubSpot
Category: Analytics / Functional
Provider: HubSpot, Inc.
Portal ID: 21206862
Purpose: We use HubSpot for customer relationship management and marketing. HubSpot's tracking script places a cookie on your device (hubspotutk) to recognize returning visitors, track pages visited, and associate your browsing activity with your contact record when you submit a form. When you submit a form on our Site, your name, email address, company, and job title are transmitted to and stored in our HubSpot CRM.
Data collected: Pages visited, session data, form submission data (name, email, company, job title), referring URL, cookie identifier (hubspotutk).
Note: HubSpot's native cookie banner has been disabled on this Site. Cookie consent is managed exclusively through CookieYes.
Privacy Policy: legal.hubspot.com/privacy-policy

WhatConverts
Category: Analytics
Provider: WhatConverts
Profile ID: 163032
Purpose: We use WhatConverts to track marketing attribution — specifically, to understand which traffic sources, campaigns, and channels generate leads through our Site. WhatConverts captures referral source, page URL, UTM parameters, and search parameters associated with each lead submission.
Data collected: Referring URL, landing page URL, UTM campaign parameters, search query parameters, page hash.
Privacy Policy: whatconverts.com/privacy-policy

4e. Google Consent Mode v2

Our Site implements Google Consent Mode v2. This means that by default, before you provide consent, all advertising and analytics consent signals sent to Google are set to denied. The following signals are controlled by your cookie preferences:

Signal:

  • ad_storage (Default: Denied, Controlled by Advertisement Consent)
  • analytics_storage (Default: Denied, Controlled by Analytics)
  • ad_user_data (Default: Denied, Controlled by Advertisement Consent)
  • ad_personalization (Default: Denied, Controlled by Advertisement Consent)
  • functionality_storage (Default: Granted, Controlled by Functional Consent)
  • security_storage (Default: Granted, Controlled by Always on)

5. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and operate our Services — account management, feature delivery, technical support
  • To process form submissions — responding to demo requests and delivering gated content
  • To communicate with you — service updates, marketing communications (where you have opted in), and support responses
  • To improve our Site and Services — analyzing usage patterns, diagnosing technical issues, and measuring feature performance
  • To measure and optimize marketing — understanding which channels drive leads and conversions, attributing advertising spend
  • To deliver relevant advertising — serving and measuring ad campaigns on Google and LinkedIn (subject to your consent)
  • To comply with legal obligations — responding to lawful requests from government or regulatory authorities
  • To protect our rights and the safety of our users

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers:
We share data with the third-party tools described in Section 4d (Google, LinkedIn, HubSpot, WhatConverts, Stripe, CookieYes) solely to operate our Site and Services. Each provider is bound by their own privacy policies and, where applicable, data processing agreements with us.

Legal Obligations:
We may disclose your information if required by law, regulation, legal process, or governmental request, including to comply with a subpoena, court order, or other legal obligation.

Protection of Rights:
We may disclose information when we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of BenefitFlow, our users, or the public.

Business Transfers:
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

With Your Consent:
We may share information for other purposes with your explicit consent.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods vary by data type and are also governed by the retention settings of third-party tools (e.g., Google Analytics, HubSpot). You may request deletion of your personal data at any time by contacting us at support@benefitflow.com.

8. Your Privacy Rights

Depending on your location, you may have the following rights with respect to your personal information:

All Users

  • Access — Request a copy of the personal data we hold about you
  • Correction — Request that we correct inaccurate or incomplete information
  • Deletion — Request that we delete your personal data, subject to certain legal exceptions
  • Cookie preferences — Update your cookie consent at any time via the cookie settings link in our Site footer

California Residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights:

  • Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes for collecting it, and the categories of third parties with whom we share it
  • Right to Delete — Request deletion of personal information we have collected, subject to exceptions
  • Right to Correct — Request correction of inaccurate personal information
  • Right to Opt-Out of Sale or Sharing — We do not sell personal information. We do not share personal information for cross-context behavioral advertising without your consent
  • Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights

To submit a California privacy request, contact us at support@benefitflow.com. We will respond within 45 days as required by law.

EU / EEA / UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following additional rights:

  • Right to Restriction — Request that we restrict processing of your personal information in certain circumstances
  • Right to Portability — Receive your personal data in a structured, machine-readable format
  • Right to Object — Object to processing of your personal information based on legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
  • Right to Lodge a Complaint — File a complaint with your local data protection authority

Lawful Basis for Processing (GDPR):
We process personal data on the following legal bases:

  • Consent — For analytics and advertising cookies, and marketing communications
  • Contract — To provide the Services you have requested
  • Legitimate Interests — For fraud prevention, security, and improving our Services, where these interests are not overridden by your rights
  • Legal Obligation — Where required by applicable law

To exercise any of the above rights, contact us at support@benefitflow.com.

9. International Data Transfers

BenefitFlow is based in the United States. If you are accessing our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

Where we transfer personal data from the EU/EEA/UK to the United States or other third countries, we rely on appropriate safeguards including Standard Contractual Clauses or other lawful transfer mechanisms as required by applicable law.

10. Children's Privacy

Our Site and Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us at support@benefitflow.com.

11. Security

We implement reasonable technical and organizational measures designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date, and where appropriate, by sending you an email notification.

We encourage you to review this policy periodically. Your continued use of our Services after the effective date of a revised policy constitutes your acceptance of the updated terms.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Compound Tech LLC (BenefitFlow)
Email: support@benefitflow.com
Website: benefitflow.com