Privacy Policy

AuditSupplier operates this service. The final controller legal name and address await operator confirmation and are a prerequisite for public paid onboarding. Privacy contact: privacy@auditsupplier.com.

• Account data such as email, name, organization, and language.
• Supplier inputs, research history, evidence records, and reports.
• Subscription and payment status plus Stripe identifiers; we do not store full card numbers.
• Security, request, error, and support records.
• Analytics and marketing data only after non-essential consent.

• Contract: authentication, research, report delivery, billing, and support.
• Legitimate interests: security, abuse prevention, and reliability improvement.
• Legal obligation: financial records and lawful requests.
• Consent: non-essential analytics and marketing, which can be withdrawn.

Data may be processed by enabled providers such as Vercel, Supabase, Stripe, Resend, Upstash, and configured AI or research providers. We do not sell personal data. Disclosure is limited to service operation, legal obligations, or protection of rights.

Providers may process data outside your country under their contractual safeguards. We use authentication, tenant boundaries, row-level policies, publication controls, and security headers. We do not currently claim SOC 2, ISO, or other unverified compliance certification.

• Report content is automatically redacted after two years unless law requires otherwise.
• Support requests are deleted after 365 days.
• Scheduled account deletion executes after seven days and anonymizes records that must remain.
• Anonymized billing and ledger records may remain for required legal and accounting periods.

You can export account data and schedule deletion in Settings. You may also request correction, restriction, objection, or consent withdrawal at privacy@auditsupplier.com. Exact rights depend on applicable law.

This business service is not directed to children. We will publish the effective date and notify users when a change is material.