AuditFlow Privacy Policy

AuditFlow is operated by VISION CRAFT VC CY LTD.

This Privacy Policy explains how VISION CRAFT VC CY LTD handles information connected with the AuditFlow website, customer accounts, orders, subscriptions, report delivery, and support.

Information we collect

We collect the information needed to create accounts, process orders, verify payments, generate public-site audit reports, provide support, operate subscriptions, maintain security, and keep service records. This may include account email, order details, submitted website URLs, package selections, payment status, subscription status, report records, support messages, and operational logs.

Website audit data

AuditFlow reviews publicly accessible website information only. We do not request or access private source code, hosting accounts, databases, admin panels, analytics accounts, payment dashboards, customer private areas, or private backend systems.

Report storage

Completed PDF reports are stored privately and are available only to the authenticated customer account or authorized service processes needed to generate, store, and deliver the report.

Report links require account authorization. AuditFlow does not make report storage buckets public and does not email PDF attachments by default.

Service providers

AuditFlow uses infrastructure and service providers for hosting, authentication, storage, scanning, PDF generation, account access, payments, email notifications, and security operations.

The current service stack may include Vercel, Supabase, Railway, Stripe, Resend, and similar operational providers needed to run the service. These providers process information as needed for accounts, orders, payment verification, report generation, private storage, account delivery, support, email notification, security, and abuse prevention.

Website measurement

We use Vercel Web Analytics to understand visits to our public pages. Our analytics integration excludes private report and account pages and removes customer emails, submitted website URLs, and order tokens from the page addresses it sends.

When configured, optional Google Analytics and conversion measurement load only after you choose Allow. They help us measure visits, audit interest, and confirmed orders. We do not enable personalised ads or send your audit findings to Google. You can decline these cookies and still use AuditFlow, or change your choice here at any time.

Retention and deletion

AuditFlow keeps account, order, billing, support, and report records for operational, security, tax, dispute, fraud prevention, and service-history purposes.

Customers can request account deletion from the Profile section inside My Account or by contacting support. We review deletion requests before removing eligible profile data and private report files. Some payment, invoice, refund, dispute, tax, anti-fraud, security, and legal records may be retained where required or reasonably necessary.

Contact

Privacy and account questions can be sent to servicesauditflow@gmail.com. Please include the account email and relevant order reference when available.