Privacy Policy

1. Who we are

Audit Now ("we", "us") operates the website audit platform at auditnow.site. For the purposes of UK GDPR and the EU GDPR we are the data controller for the personal data described below. You can contact us at contact@auditnow.site for any privacy question or to exercise your rights.

2. Data we collect

• Account data — your email address, an encrypted password (or your Google account identifier if you sign in with Google), and email verification status.
• Audit data — the URLs you submit, the scores and findings generated, and the date and time of each audit.
• Subscription data — your plan, subscription status, renewal or cancellation dates and usage counts. Card details are entered directly with Stripe and are never seen or stored by us.
• Technical data — IP address, browser type and log data processed by our hosting provider for security and reliability.
• Analytics data — only if you accept analytics cookies. See our Cookie Policy.

3. Why we use it and our legal basis

• Contract — creating your account, running audits, generating PDF reports, enforcing plan limits and taking subscription payments.
• Legitimate interests — keeping the service secure, preventing abuse, and improving the product.
• Consent — analytics cookies. You can withdraw consent at any time via "Cookie settings" in the footer.
• Legal obligation — retaining billing and tax records.

4. Who we share data with

We use a small number of processors, each bound by data protection terms:

• Supabase — database, authentication and hosting of your account data.
• Stripe — subscription payments and card processing (Stripe is a controller for payment data).
• Cloudflare — content delivery, hosting and edge security.
• Google Analytics — usage analytics, only where you have accepted analytics cookies.

We never sell your personal data. Some providers process data outside the UK/EEA; where they do, transfers rely on the UK International Data Transfer Addendum or Standard Contractual Clauses.

5. How long we keep it

Account and audit data is kept while your account is open and deleted within 30 days of account deletion. Individual audit reports can be deleted by you at any time from your dashboard. Billing records are kept for six years to meet UK tax requirements.

6. Your rights

You have the right to access, correct, delete or port your data, to restrict or object to processing, and to withdraw consent where we rely on it. Email contact@auditnow.site and we will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk.

7. Security

Data is encrypted in transit with HTTPS, passwords are hashed by our authentication provider, and database access is restricted by row-level security so you can only reach your own records.

8. Children

Audit Now is not intended for anyone under 16 and we do not knowingly collect their data.

9. Changes

If we make material changes to this policy we will update the date above and, where appropriate, notify you by email.