This Privacy Policy explains what personal data AuditIQ (operated by Suniq) collects, why, and your rights. We aim to collect only what we need to run the service.
1. Who we are
The data controller is Suniq, operator of AuditIQ (auditiqhq.com). For privacy questions, contact support@auditiqhq.com.
2. What we collect
Account data
- Your name, email address, and (optionally) company name.
- If you sign in with Google, we receive your name, email, and profile identifier from Google. We do not receive your Google password.
- A securely hashed password if you register with email (we never store it in plain text).
Assessment data
- The assessments you run: selected area, grades, findings, evidence, notes, scores, and timestamps.
Billing data
- Purchases are processed by Paddle. We receive confirmation of your plan status, but we do not collect or store your full card details. Paddle handles payment data under its own privacy policy.
Technical data
- Basic technical information needed to operate and secure the site (such as log and connection data handled by our hosting and backend providers).
3. How we use your data
- To create and manage your account and authenticate logins.
- To save your assessments and history so they are available across your devices.
- To provide paid features based on your plan status.
- To respond to support requests and send essential service messages.
- To secure the service and comply with legal obligations.
Our legal bases (where GDPR applies) are: performing our contract with you (providing the service), your consent (e.g. optional AI features), and our legitimate interests (security and improvement).
4. Service providers we use
We rely on a small set of processors to run AuditIQ:
- Supabase — authentication and database storage for your account and assessment data.
- Cloudflare — hosting and delivery of the website.
- Google — optional “Sign in with Google” authentication.
- Paddle — Merchant of Record for payments, billing, and tax.
- AI provider (Anthropic) — if you enable AI report generation, the relevant assessment text is sent to the AI provider to generate commentary. If you do not enable it, no assessment data is sent to the AI provider.
These providers process data on our behalf under their own security and privacy terms. Some may process data outside your country; where required, appropriate safeguards apply.
5. AI features and your data
AI-generated report content is optional. When enabled, only the assessment content needed to produce the commentary is sent to the AI provider for that request. We do not use your assessment data to train AI models.
6. Data retention
We keep your account and assessment data while your account is active. If you delete your account or ask us to delete your data, we remove it within a reasonable period, except where we must retain limited records to meet legal or accounting obligations.
7. Your rights
Depending on where you live (for example under GDPR or the CCPA), you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. We do not sell your personal data. To exercise any right, email support@auditiqhq.com.
8. Security
We use industry-standard measures, including encrypted transport, hashed passwords, and row-level security so each user can access only their own data. No system is perfectly secure, but we work to protect your information.
9. Children
AuditIQ is a business tool not intended for anyone under 18, and we do not knowingly collect data from children.
10. Changes and contact
We may update this policy; the “Last updated” date will change and material updates will be posted here. Questions or requests: support@auditiqhq.com.
AuditIQ is a self-assessment tool and does not constitute certification, a regulatory audit, or professional advice. These documents are provided for transparency and may be updated from time to time; material changes will be posted on this page.