Our Commitment to Your Privacy

1. Who We Are

Gaudit AI LLC ("we," "us," "our") operates gaudit.ai, an AI-powered Google Ads audit platform. We are the data controller for personal information collected through the Service.

Contact: contact@gaudit.ai

2. Information We Collect

Category	Examples	How collected
Account data	Name, email address, password (hashed)	You provide at registration
Billing data	Payment method (card last 4 digits), billing address	Via Stripe — we never store full card numbers
Advertising data	Google Ads CSV exports you upload for analysis	You upload directly
Usage data	Pages visited, features used, audit count, timestamps	Automatically via cookies and logs
Device data	IP address, browser type, operating system	Automatically on access
Communications	Support emails, feedback submissions	You provide directly

3. How We Use Your Information

• To provide, operate, and improve the Service.
• To process payments and manage your subscription via Stripe.
• To generate AI-powered audit reports from the data you upload.
• To send transactional emails (receipts, account alerts, password resets).
• To send product updates and offers (you can opt out at any time).
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

4. Advertising Data You Upload

When you upload Google Ads CSV files for analysis, we process that data solely to generate your audit report. We do not:

• Share your advertising data with third parties.
• Use your campaign data to train AI models.
• Retain uploaded CSV files beyond 30 days after report generation.

You are responsible for ensuring you have the right to upload and process the data you submit (e.g., data belonging to your clients).

5. Payment Processing — Stripe

All payment processing is handled by Stripe, Inc. When you make a purchase, you are subject to Stripe's Privacy Policy. We receive only a payment confirmation and limited billing details (e.g., last 4 digits of card, billing country). We never see or store your full card number, CVV, or bank details.

6. Cookies and Tracking

We use the following cookies:

• Essential cookies: Required for login sessions and security. Cannot be disabled.
• Analytics cookies: Help us understand how users navigate the Service (e.g., Google Analytics). You can opt out via your browser settings.
• Preference cookies: Remember your settings and preferences.

You can control non-essential cookies through your browser settings or a cookie management tool.

7. Data Sharing

We do not sell your personal data. We share data only with:

• Stripe: For payment processing.
• Cloud infrastructure providers: For hosting and data storage (e.g., AWS, Cloudflare) under data processing agreements.
• AI API providers: For generating audit reports (data is processed under confidentiality agreements and not used for training).
• Legal authorities: If required by law or to protect our rights.

8. Data Retention

• Account data is retained while your account is active and for 12 months after deletion.
• Uploaded CSV files are deleted within 30 days of report generation.
• Billing records are retained for 7 years for tax and legal compliance.
• You can request deletion of your account and associated data at any time.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing activities.
• Opt-out: Unsubscribe from marketing emails at any time via the link in any email.

To exercise any right, email contact@gaudit.ai. We will respond within 30 days.

10. GDPR — European Users

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing are:

• Contract performance: Processing necessary to deliver the Service you signed up for.
• Legitimate interests: Analytics, fraud prevention, and service improvement.
• Consent: Marketing emails (you can withdraw at any time).
• Legal obligation: Compliance with applicable laws.

You have the right to lodge a complaint with your local data protection authority.

11. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. However, no method of transmission over the internet is 100% secure. You use the Service at your own risk.

12. Children

The Service is not directed at anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. The "Last updated" date at the top reflects the most recent revision.

14. Contact

For privacy-related questions or requests: