Privacy Policy

1. Introduction

Vantage Audit Technologies, Inc. ("Vantage," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our audit management platform and related services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, job title when you create an account.
• Audit Data: Workpapers, evidence, findings, and other content you upload or create in the platform.
• Communications: Messages you send to us, including support requests and feedback.
• Payment Information: Billing details processed through our secure payment provider (Stripe).

2.2 Information Collected Automatically

• Usage Data: Features used, pages visited, actions taken within the platform.
• Device Information: Browser type, operating system, device identifiers.
• Log Data: IP address, access times, referring URLs for security and troubleshooting.

3. How We Use Your Information

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent security incidents
• Comply with legal obligations

4. AI and Your Data

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information only in these circumstances:

• Service Providers: With vendors who assist in providing our services (hosting, payment processing, analytics), bound by confidentiality agreements.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.
• With Your Consent: When you explicitly authorize us to share information.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Audit data is retained according to your organization's configured retention policy (default: 7 years for regulatory compliance). You may request deletion of your data at any time, subject to legal retention requirements.

7. Data Security

We implement industry-standard security measures including:

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Row-level security for tenant isolation
• Regular security assessments and penetration testing
• SOC 2 Type II compliance (in progress)

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications
• Restrict Processing: Request limitation of data processing

To exercise these rights, contact us at privacy@vantageauditos.com.

9. International Data Transfers

Our services are hosted in the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: