Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information — name, email address, and password when you register.
• Organization data — company name, industry, and compliance framework selections.
• Compliance data — controls, evidence artefacts, integration configurations, and reports you create or upload.
• Usage data — pages visited, feature interactions, timestamps, and browser/device information.
• Communication data — emails or messages you send to our support team.

2. How we use your information

We use the information we collect to provide and improve the Service, authenticate your identity, send transactional notifications, respond to support inquiries, and comply with legal obligations.

We do not sell your personal data to third parties.

3. Data storage and security

Your data is stored on servers in the United States. We use TLS in transit and AES-256 at rest. Evidence artefacts are stored with SHA-256 checksums to ensure integrity.

4. Data retention

We retain data as long as your account is active. Deletion requests are processed within 30 days, subject to legal hold obligations.

5. Third-party services

We use AWS for cloud hosting, a third-party email provider for notifications, and privacy-respecting analytics. All sub-processors are contractually bound to applicable privacy law.

6. Your rights

You may request access, correction, deletion, restriction, or portability of your data by emailing support@auditvault.co with subject "Privacy Request".

7. Cookies

We use strictly-necessary cookies only for authentication and session management. No advertising or tracking cookies are used.

8. Contact us

Joyful Memories Pty Ltd
ABN: 92 680 172 196
Sydney, NSW, Australia
support@auditvault.co