Privacy Policy

At Auditious ("Auditious", "we", "our", or "us"), protecting the privacy and security of information entrusted to us is fundamental to our mission. This Privacy Policy describes how we collect, use, disclose, store, and protect information when you visit our website, access our platform, request a demonstration, communicate with us, or otherwise use our services.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

We collect information that you voluntarily provide to us, information generated through your use of the Services, and information received from third-party sources.

Information you provide may include your name, business email address, phone number, company information, job title, billing information, account credentials, support requests, and any information submitted through forms, webinars, surveys, or communications with our team.

As part of delivering our compliance automation services, customers may also upload documents, policies, evidence, audit records, governance information, vendor details, risk assessments, and other information necessary to support compliance and audit readiness activities.

When you interact with our website or platform, we may automatically collect certain technical information, including your IP address, browser type, device identifiers, operating system, usage patterns, access timestamps, pages visited, and diagnostic information through cookies and similar technologies.

We may also receive information from trusted third parties, including analytics providers, marketing partners, integration providers, identity providers, and publicly available business sources.

We use information to operate, maintain, improve, and secure our Services. This includes providing access to the platform, managing customer accounts, enabling integrations, facilitating compliance workflows, responding to support requests, communicating product updates, and improving platform functionality.

Information may also be processed to detect security incidents, prevent fraudulent or unauthorized activities, comply with legal obligations, enforce our agreements, protect our rights and interests, and support legitimate business operations.

Where permitted by applicable law, we may use contact information to provide newsletters, event invitations, product announcements, and other communications that may be of interest to you. You may opt out of such communications at any time.

Where applicable under data protection laws, including the General Data Protection Regulation (GDPR), we process personal information based on one or more legal grounds, including the performance of contractual obligations, compliance with legal requirements, legitimate business interests, protection of vital interests, and consent where required.

In relation to information that customers submit to Auditious through the platform, Auditious generally acts as a data processor and processes such information solely on behalf of and in accordance with the instructions of its customers.

For information collected directly from website visitors, prospective customers, and account administrators, Auditious acts as the data controller.

We do not sell personal information.

We may disclose information to trusted service providers and business partners who assist us in operating our platform and delivering our Services. These parties may include cloud hosting providers, analytics vendors, customer support providers, communication platforms, payment processors, and professional advisors.

Information may also be disclosed where required by applicable law, legal process, governmental request, or to protect the rights, security, property, or safety of Auditious, our customers, or others.

In the event of a merger, acquisition, restructuring, financing transaction, or sale of assets, information may be transferred as part of that transaction, subject to applicable confidentiality obligations.

Auditious uses cookies and similar technologies to ensure the proper functioning of the website, enhance user experience, analyze website performance, remember preferences, and improve security.

You may control or disable cookies through your browser settings; however, certain features of the Services may not function properly if cookies are disabled.

Because Auditious operates globally, information may be transferred to and processed in jurisdictions outside your country of residence.

Where required by applicable law, we implement appropriate safeguards for international transfers of personal information, including contractual protections and other legally recognized transfer mechanisms.

Auditious maintains administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction.

These measures may include encryption, role-based access controls, logging and monitoring mechanisms, vulnerability management processes, secure infrastructure practices, and periodic security assessments. While we strive to maintain industry-standard security measures, no method of transmission or storage can be guaranteed to be completely secure.

We retain information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and maintain legitimate business records.

The retention period applicable to specific categories of information may vary depending on contractual requirements, legal obligations, and operational needs.

Depending on your location and applicable laws, you may have certain rights regarding your personal information, including the right to access, correct, delete, restrict, object to processing, withdraw consent, or request portability of your information.

Requests regarding personal information may be submitted by contacting us using the details provided below.

Auditious endeavors to comply with applicable privacy and data protection laws, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and the Digital Personal Data Protection Act, 2023 (India), where applicable.

Our Services may contain integrations with or links to third-party websites, platforms, and services. Such third parties operate independently and maintain their own privacy practices. Auditious is not responsible for the privacy practices of third-party services, and users are encouraged to review their respective privacy policies.

The Services are intended solely for business and professional use and are not directed toward individuals under the age of eighteen. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or platform functionality. Any updates will become effective upon posting the revised version on this page, and the updated date will be reflected at the top of this Policy.

If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at:

Auditious

Website: https://auditious.io

Email: privacy@auditious.io