Privacy Policy

Welcome to Auditra. We are committed to protecting your personal information and your right to privacy. Auditra is operated from Egypt. For privacy questions, data export or deletion assistance, contact support@auditra.app or use our contact page.

We collect personal information that you voluntarily provide to us when you register on the application, express an interest in obtaining information about us or our products and services, when you participate in activities on the application or otherwise when you contact us.

The personal information that we collect depends on the context of your interactions with us and the application, the choices you make and the products and features you use. The personal information we collect may include the following:

• Name and Contact Data. We collect your first and last name, email address, postal address, phone number, and other similar contact data.
• Authentication and security data. Firebase Authentication handles sign-in. We also process session, device and verification information needed to protect your account; we do not store password hints or readable account passwords in your profile.
• Document Data. We process the documents you upload for the purpose of providing our analysis services. We treat this data as confidential and proprietary to you.

We use personal information collected via our application for a variety of business purposes described below.

• To facilitate account creation and logon process.
• To manage user accounts. We may use your information for the purposes of managing our account and keeping it in working order.
• To provide document analysis, saved reports and requested integrations. Document content is sent to the AI providers used for your analysis. Corrections or feedback you submit may be stored to improve your future results.
• To send administrative information to you.

We use Google Cloud and Firebase for account data and files, Vercel for application hosting, and service providers for AI processing, email, customer support and payments. Our current database is hosted in Europe and file storage in the United States. Information may therefore be processed outside Egypt. We use access controls and other safeguards, but no online service can guarantee absolute security.

We do not sell, rent, or share your personal information or the contents of your uploaded documents with any third parties for their marketing purposes.

• Temporary processing uploads are scheduled to expire after 24 hours unless you choose to save them. Cleanup runs periodically, so physical removal may occur after the expiry time.
• Files and reports you choose to save remain until you delete them or close your account. The complimentary 200 MB allowance remains available; paid storage increases capacity. The allowance is a size limit, not a promise of unlimited space.
• If paid storage expires, its disclosed read-only grace and locked-retention periods still apply to the affected source files. You can export your data before deletion.
• Account deletion requires identity and ownership review. Shared team data needs a separate ownership decision. Necessary security records are reviewed separately for applicable retention obligations.
• Auditra keeps its invoices, payment and refund records, and the billing details needed to support them for at least five years after the relevant tax period. Records may be kept longer for an unresolved tax review or legal dispute. Deleting your billing profile or account does not erase these retained records. This does not set a five-year storage period for documents you upload for analysis; keep your own accounting originals.
• Deleted storage objects may remain recoverable for seven days. Deletion from the active application does not mean immediate deletion from provider systems, recovery copies or records subject to a legal retention requirement.

Our AI processing may use Gemini and enabled alternative providers. Their retention rules are separate from your Auditra storage allowance. Google's standard Gemini abuse-monitoring policy describes 55-day retention of prompts, context and responses. Other provider retention depends on the endpoint and account controls used. We do not promise zero-retention AI processing or immediate erasure of provider-held safety logs.

Provider data use depends on the service and account settings. See Gemini's service terms and abuse-monitoring policy. You should upload only documents you are authorized to submit for processing.

We may use cookies and similar tracking technologies to access or store information. We use essential cookies for authentication and session management. We also use analytics cookies to understand how our services are being used to improve user experience.

You can update your account details, export supported personal data and submit a deletion request through account settings or contact support. Our operator reviews identity, team ownership and retention exceptions before processing erasure. We explain the supported scope and any remaining financial, security or provider-held records; submitting a request does not immediately erase every copy.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible.