Privacy policy

1. Roles and responsibility

For employee data inside a workspace — names, contact details, roles, audit results — the purposes and legal grounds are set by the company that created the workspace. We process that data on the company’s instructions and under the terms of use. For questions about such data, contact your company’s administrator first; we will help them handle the request where needed.

For data you leave on the website (for example, in a demo request) and for your account data when you register a company, we decide the purposes ourselves.

2. What data we process

The proaudits.com website

• Demo request: your name, company name and phone number or email — whatever you enter in the form.
• Technical visit data: IP address, browser and device type, time of the request — in our hosting provider’s logs. The site’s fonts are loaded from an external font service, which receives your IP address in the process.

Your account

• Name, email and/or phone number, login, role and unit in the company structure.
• Your password is stored only in an irreversibly transformed form; one-time sign-in codes are valid for a limited time.
• If you sign in with Telegram — the identifier and name of your Telegram account.

Company working data

• Checklists and the items library, audits and answers, photos and comments, action plan tasks, the company structure, the employee list, the calendar and notifications. Photos are meant to document the state of premises and products, not people.

Mobile app

• Push notification token, app version and operating system version.
• A copy of your working data is kept on the device so that audits can be carried out offline.
• A sync diagnostics report (queue state, app version, network status) is created only when you ask for it and goes wherever you choose to send it.

Payments

• Subscriptions are bought through the App Store or Google Play. Payment details are handled by Apple and Google; we receive a purchase confirmation and the subscription status, never card details.

AI features

• For AI checklist import — the photos and documents you upload; for photo checks — the auditor’s photo and the reference photo; for dashboards — your request and the data needed to answer it: names of units and checklists, and the metrics. This data is passed to an AI model provider solely to fulfil the request.

3. Why we need it

• To provide the service: sign-in, audits, the action plan, reporting and sync between devices.
• To send notifications about tasks, audit results and the service itself — by email and push.
• To answer your requests and run demos.
• To keep the service secure: protect accounts, detect failures and abuse.
• To comply with the law and our contracts.

We don’t use data for advertising and don’t build user profiles outside the service.

4. Legal grounds

We process data because it is necessary to perform the terms of use and our contract with the company; on the company’s instructions — for its employees’ data; with your consent — for demo requests and push notifications (you can withdraw consent at any time); and for our legitimate interests — keeping the service secure and preventing abuse.

5. Who we share data with

Only with those who help us run the service, and only as much as needed:

• Hosting: Render and Vercel — servers and the database are located in the European Union; files and photos are kept in Vercel storage.
• Email: a mail delivery service that sends messages on our behalf.
• Push notifications: the Apple, Google and Expo services.
• AI features: an AI model provider, which receives only what a specific request needs.
• Payments: Apple and Google when you buy a subscription through the app stores.
• Telegram sign-in: Telegram — only if you choose that way to sign in.

API integrations set up by a company run on its decision and under its control. We disclose data to public authorities only when the law requires it. We never sell data.

Providers may be located outside your country. We choose providers that ensure an adequate level of data protection.

6. How long we keep it

• Working data and accounts — for as long as the workspace exists. When the administrator asks, we delete the whole workspace, except for anything the law requires us to keep.
• Source files of AI imports — no longer than 24 hours after upload; then they are deleted automatically.
• Demo request data — while we are in touch about a rollout; earlier at your request.
• Technical logs — for the limited time needed for security and troubleshooting.

7. How we protect it

Connections to the service are encrypted (HTTPS). Access to data inside a workspace is limited by the roles and areas of responsibility the administrator sets. Passwords are stored in an irreversibly transformed form, and sign-in is confirmed with one-time codes. We back up the database. AmbraiSoft staff access a company’s data only to provide support, and only at the company’s request.

8. Your rights

• You can ask for access to your data, have it corrected or deleted, and withdraw your consent.
• You can delete your account in the app under Profile → Delete account.
• Push notifications can be turned off in your device settings.
• A company administrator can ask us to delete the whole workspace by emailing us.
• If you are a company employee, send requests about your data to your company’s administrator — we will help them fulfil it. For anything else, write to support@ambraisoft.com.

9. Corporate server

If a company runs a dedicated installation of ProAudits on its own servers, the data is stored and processed there and the company is responsible for it. This policy describes the cloud version of the service.

10. Changes to this policy

We may update this policy when the service or the law changes. The version date is shown at the top of the page; we will give advance notice of material changes — in the app or by email.

11. Contact

Questions about data — support@ambraisoft.com. Questions about the product and demos — sales@ambraisoft.com.

See also the ProAudits terms of use.