Privacy Policy
This page is maintained by the AuditAndy team to answer common privacy questions about the AuditAndy platform. It describes current practices and is not an independent certification or audit report.
Information we collect
Account information you provide when signing up, such as your name, email address, and organization profile details (legal entity name, industry, size, headquarters, website).
Compliance content you upload or create, including documents, evidence artefacts, requirements, assessments, risks, corrective actions, and audit records.
Basic operational data needed to run the service, such as sign-in events and errors.
How we use your information
To provide the platform: authenticate you, store your compliance workspace, generate AI baseline analyses, and map your documents to framework requirements.
To maintain security, troubleshoot issues, and improve platform reliability.
To communicate with you about your account, support requests, and service changes.
Access controls
Access to the application requires authentication. Workspace data is protected by row-level access rules and role-based permissions (admin, manager, auditor, viewer), so users only see the records their role permits.
Hosting and subprocessors
AuditAndy runs on Lovable Cloud infrastructure for application hosting, database, storage, and authentication. AI analysis features are processed through the AI provider integrated with the platform. These providers process data on our behalf to deliver the service.
Retention and deletion
Your workspace content is retained while your account is active. You can delete individual records from within the application. To request deletion of your account and associated data, contact us through the Support page.
Your privacy requests
You may request access to, correction of, or deletion of your personal information. Send requests through the Support page and we will respond as required by applicable law.
Shared responsibility
The hosting platform provides infrastructure-level security capabilities. AuditAndy is responsible for how the application is configured and how your data is handled inside it. Customers are responsible for the accuracy of the content they upload, for managing their own users and roles, and for safeguarding their sign-in credentials.
Contact
Questions about this policy can be sent through the Support page. This policy may be updated; material changes will be reflected on this page.