Privacy Policy
Last updated: [date]
AuditBot AI (“we”, “us”) provides an online service that analyses financial text you submit to find errors, overcharges and missed revenue. This policy explains what personal data we collect, why, and who we share it with.
1. Data we collect
- Account data: your name, email address and profile photo, received from Google when you sign in.
- Financial text you submit: the text you paste or upload into a tool. This may include vendor names, amounts and dates.
- Audit results: the findings the tools produce, which we store with your account.
- Subscription status: whether your plan is active, and which plan you chose. We do not store card numbers; payments are handled by our payment provider.
- Technical data: basic server logs needed to run and secure the service.
2. How we use your data
We use your data to sign you in, run the audits you request, save your results to your account, manage your subscription, enforce plan limits, and keep the service secure.
3. Who we share it with
We share data only with service providers needed to run the product:
- Supabase: database and sign-in hosting.
- Google: sign-in.
- Anthropic: the AI provider. The text you submit is sent to Anthropic to be analysed. Check Anthropic's current data-use terms for details of how they handle API data.
- Vercel: website hosting.
- Payment provider: handles subscription payments and their own tax and fraud checks.
We do not sell your data and we do not use your financial text to train AI models.
4. Your data is private to your account
Each user can only see their own audits. Access controls are enforced in the database.
5. Keeping data
We keep your account and audit results while your account is active. [Retention period to be confirmed by counsel.]
6. Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data. To make a request, email [contact email]. We will respond within [timeframe to be confirmed].
7. Security
We use encrypted connections (HTTPS), restrict access to data with database rules, keep secret keys on the server only, and limit how many audits can run. No system is perfectly secure, so please also keep your Google account protected with two-step verification.
8. Contact
[Company legal name], [registered address], [contact email].