Privacy Policy

1. Introduction

Verity Audit ("we," "our," or "us"), operated by Wapplify, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number (optional), job title, organization name
• Audit Data: Audit information, working papers, findings, reports, risk assessments, and other content you create or upload
• Communication Data: Messages sent through support channels and email correspondence
• Payment Information: Processed securely through our authorized payment partners. We do not store complete payment card details on our servers.

2.2 Automatically Collected Information

• Log Data: IP address, browser type, pages visited, timestamps, referring pages
• Device Information: Device type, operating system, screen resolution
• Usage Data: Features used, actions taken, navigation patterns within the platform
• Cookies: Session cookies for authentication and functionality

3. How We Use Your Information

We use the collected information for:

• Service Delivery: Providing, maintaining, and improving the Service
• Account Management: Creating and managing your account, processing subscriptions
• Communication: Sending service updates, security alerts, and administrative notices
• Security: Detecting, preventing, and addressing fraud, security issues, and technical problems
• Analytics: Understanding usage patterns to improve features and user experience
• Legal Compliance: Complying with legal obligations and enforcing our agreements

We do not use your audit data for marketing purposes or share it with third parties for their marketing use.

4. Data Security

We implement security measures designed to protect your data:

Important: While we implement security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Sharing and Disclosure

We DO NOT sell, trade, or rent your personal data to third parties for marketing purposes.

We may share information only in these limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating the Service, including:

• Cloud infrastructure and hosting providers
• Payment processing services
• Email delivery services

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests (e.g., court orders, subpoenas, government inquiries).

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice before your information becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Data Retention

We retain your data according to the following guidelines:

• Active Accounts: Data retained as long as your account is active
• Closed Accounts: Personal data deleted within 90 days after account closure (to allow for recovery if closure was accidental)
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes
• Anonymized Data: May be retained indefinitely for analytics and service improvement

You may request earlier deletion of your data by contacting us.

7. Your Rights

You have the following rights regarding your personal data:

7.1 Access

Request information about the personal data we hold about you. You can export your audit data at any time from within the platform.

7.2 Correction

Update or correct inaccurate or incomplete information through your account settings or by contacting us.

7.3 Deletion

Request deletion of your account and associated data, subject to legal retention requirements.

7.4 Data Portability

Export your data in standard formats (Excel, PDF, Word) for transfer to another service.

7.5 Withdraw Consent

Where we process data based on consent, you have the right to withdraw that consent at any time.

To exercise these rights, contact us at [email protected]

8. Cookies

We use cookies and similar technologies for:

8.1 Essential Cookies

Required for authentication, security, and basic functionality. These cannot be disabled without affecting the Service.

• Session management
• Authentication tokens
• Security protection

8.2 Preference Cookies

Remember your settings and preferences, such as language and display options.

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

9. International Data

Our Service is hosted on secure cloud infrastructure. If you access the Service from outside the country where our servers are located, your data will be transferred to and processed in that location.

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

Our Service is intended for business use and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

If you believe we have inadvertently collected information from a child under 18, please contact us immediately at [email protected], and we will delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

• Email to your registered email address
• Prominent notice within the Service
• Updated "Last Updated" date at the top of this policy

We encourage you to review this policy periodically. Continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users promptly via email
• Provide details about what data may have been affected
• Explain the steps we are taking to address the situation
• Offer guidance on how you can protect yourself
• Notify relevant authorities as required by applicable law

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

14. Regional Privacy Rights

14.1 California Residents (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used
• Right to request deletion of personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

14.2 European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

15. Contact Us

For privacy-related questions, requests, or concerns:

---