1. Introduction
AuditFlow respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information in connection with our audit platform.
2. Information We Collect
Account Information
- Username, email address, and password
- Full name and role assignment
- Organization affiliation and team assignments
Audit Data
- Audit documents, findings, and reports you create
- Management actions and remediation tracking
- Framework vault documents and policies
Usage Information
- Action logs and audit trail records
- Login times and session activity
- Features accessed and workflows completed
3. How We Use Your Information
We use collected information to:
- Provide and improve the AuditFlow platform
- Authenticate users and manage access control
- Generate audit reports and findings
- Maintain compliance and security audit trails
- Support customer service and platform troubleshooting
4. Data Storage and Security
Your data is stored on secure servers with encryption. We implement industry-standard security controls including role-based access, session management, and audit logging.
For deployments using Ollama (local AI processing), audit content remains on your servers and is not transmitted to external services.
5. Data Retention
Audit data is retained as long as your account is active. Upon account deletion, data will be permanently removed within 30 days unless required by law.
6. Third-Party Services
AuditFlow may use third-party services for AI functionality (OpenAI) if configured. By default, local processing (Ollama) is available to keep audit data private.
7. Contact Us
For privacy questions or concerns, please contact us through the Contact page or email support.