Privacy Policy

1. Interpretation and Definitions

In this Privacy Policy, “Company”, “we”, “us” and “our” means [COMPANY NAME]. “Service” means the [PRODUCT NAME] web-based SaaS platform for audit management. “Customer” means a business entity subscribing to the Service. “User” means an individual authorized by a Customer. “Personal Data” means information relating to an identified or identifiable person. “Customer Data” means business data uploaded or entered into the Service.

2. Information We Collect

• Identity and account data (name, email, organization, role).
• Operational data (visits, findings, actions, comments, audit records).
• Evidence files (images, PDFs, and related metadata).
• Usage and technical data (IP address, logs, browser/device information).
• Billing metadata from payment providers (e.g., Paddle).
• Cookies and tracking data.

3. How We Use Your Information

• To provide, operate, and improve the Service.
• To authenticate users and protect account security.
• To enable organization-level collaboration and permissions.
• To process subscriptions, upgrades, downgrades, cancellations, and invoices.
• To provide support, monitor performance, and detect abuse.
• To comply with legal obligations.

4. Cookies and Tracking Technologies

We use cookies for authentication, security, session persistence, and analytics. You may control cookies through your browser settings. Blocking essential cookies may impact core functionality.

5. Data Storage and Security

We use cloud infrastructure and apply reasonable technical and organizational safeguards, including encryption in transit, access controls, audit logs, and role-based permissions. While we apply industry-standard safeguards, no method of transmission or storage is fully secure.

6. Data Retention

We retain data for as long as needed to provide the Service, fulfill contractual and legal obligations, resolve disputes, and enforce agreements. Upon termination, deletion or anonymization may occur after a reasonable retention period unless longer retention is required by law.

7. Third Party Services

We rely on third-party services for cloud hosting, file storage, authentication, payment processing, and analytics. These providers process data under their own terms and privacy notices.

8. International Data Transfers

Data may be processed in countries other than Guatemala depending on provider infrastructure. We implement reasonable safeguards for cross-border processing where applicable.

9. User Rights

Subject to applicable law, users may request access, correction, deletion, restriction, portability, and objection to processing of personal data. Requests can be sent to [PRIVACY EMAIL]. For organization-managed users, requests may require administrator validation.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be published on [WEBSITE URL] and may be notified by email or in-app notice.

11. Contact Information

Privacy: [PRIVACY EMAIL]

Support: [SUPPORT EMAIL]

Address: [LEGAL ADDRESS, GUATEMALA]