Privacy Policy

Data Controller

At Audexa Group LLC, we take your data privacy very seriously. This Policy describes how we collect, use, and protect your personal information.

Audexa acts as a data controller for website visitors, contact requests, account administration, billing, security and service communications. When a customer uses Audexa to process personal data on its behalf, Audexa acts as a processor under the customer's documented instructions and the applicable Data Processing Agreement.

Identity: Audexa Group LLC

Address: 30 N Gould St Ste R, Sheridan, WY 82801, United States

Contact Email: privacy@audexa.es

Information We Collect

We collect the necessary information to provide our services:

• Registration Data: Name, email address, company name, and password.
• Billing Data: Billing address, Tax ID, and payment details processed by secure providers.
• Usage Data: Information about how you interact with the platform and audits performed.
• Contact Data: Name, role, company, email address, optional phone number, area of interest, language and page of origin submitted through our contact form.
• Technical Data: IP address, device and browser information, request metadata, security logs and aggregated analytics data.

Purpose of Processing

We use your data to:

• Provide and maintain our audit and compliance services.
• Process your payments and manage your subscription.
• Send you notifications about your account and security updates.
• Improve our platform and develop new features.
• Respond to contact requests and manage commercial follow-up.
• Protect the website, platform and users against fraud, abuse and security incidents.

Lawful Bases

We rely on the legal basis that is appropriate for each processing activity: taking steps at your request or performing a contract; complying with legal obligations; our legitimate interests in operating, securing and improving the service; and consent where we ask for it, including optional analytics where required.

Providing the required contact-form fields is necessary to respond to your request. Optional fields can be left blank. You may withdraw consent at any time for processing based on consent without affecting previous processing.

Data Sharing

We do not sell personal data or share it for targeted advertising. We disclose data only to internal personnel and technical providers that are necessary to operate the service, including hosting, delivery, DNS, analytics and infrastructure providers described on our Sub-processors page.

Data Security

We continuously apply technical and organisational security measures designed to protect confidentiality, integrity and availability. These measures include encryption in transit and at rest where applicable, access controls, monitoring, backups, vulnerability management and incident-response processes. The specific measures may evolve with the service and risk.

Data Location and International Transfers

Customer platform data, databases, application storage and backups are hosted in Barcelona, Spain. Some technical connection data, delivery data, analytics data or external resources may be processed by the providers listed on our Sub-processors page according to their contractual terms and privacy documentation. We do not transfer customer platform data for commercial purposes.

Where a transfer outside the European Economic Area is applicable, Audexa will use a lawful transfer mechanism and appropriate safeguards required by applicable data-protection law.

Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, to provide the service, comply with legal obligations, resolve disputes and enforce agreements. Contact requests are retained for the period needed for follow-up and record-keeping; customer data is retained according to the applicable contract and deletion instructions. Specific periods may also be described in the relevant service agreement.

Your Rights

You may request access, rectification, erasure, restriction, portability and objection to processing, and withdraw consent where processing is based on consent. You can exercise these rights by contacting privacy@audexa.es. We may need to verify your identity and will respond within the period required by applicable law.

Supervisory Authority and EU Representative

You may lodge a complaint with the supervisory authority in the country where you live, work or consider that an infringement occurred. In Spain, this is the Agencia Española de Protección de Datos (AEPD). Audexa Group LLC will designate an EU representative where Article 27 GDPR requires one and will publish the representative's details in this section.

Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals through this website.

Changes to this Policy

We may update this policy occasionally. We will notify you of any significant changes via email or through a notice on the platform.