ProAudit — Privacy Policy

Effective date: May 20, 2026

Controller: JEDITOOLS DOO. See Section 14 for full details.

1. Scope

This Privacy Policy explains how we collect, use, share and protect personal data when you visit ProAudit websites, submit an idea, order a report, receive transactional emails, access a tracking page, download a report, contact support or otherwise use the Service.

2. Data We Collect

  • Order data: email address, order ID, report type, report language, idempotency key and order status.
  • Idea content: one-sentence pitch, detailed idea description, business assumptions and any other information you submit for report generation.
  • Generated report data: intermediate analysis, generated report content, report language, download token, tracking page data and related metadata.
  • Payment metadata: PayPro Global order identifiers, payment status, invoice/receipt references, refund status and fraud-prevention metadata received from PayPro Global. We do not store full payment card numbers.
  • Communications: emails, support requests and messages you send to us.
  • Technical data: IP address, device/browser data, timestamps, request metadata, logs, security events, cookies, error and performance data.
  • AI processing data: prompts, payloads, response payloads, analysis requests, report-generation requests and provider request statuses needed to generate and troubleshoot reports.

3. Purposes and Legal Bases

  • Provide the Service (contract): create orders, process report input, generate reports, deliver links, send transactional emails and provide tracking/download pages.
  • Billing, fraud prevention and compliance (legal obligation / legitimate interests): coordinate with PayPro Global, prevent abuse, handle refunds, chargebacks, tax records and accounting records.
  • Security and maintenance (legitimate interests): debug errors, monitor performance, protect against fraud, abuse, bots, attacks and unauthorized access.
  • Support and communications (contract / legitimate interests): respond to requests, service notices and operational updates.
  • Legal protection (legal obligation / legitimate interests): enforce Terms, resolve disputes and defend legal claims.
  • Consent: where required for optional cookies, optional marketing or other consent-based processing.

4. AI Processing and User Content

We use third-party AI providers, including OpenAI, to generate analysis and reports from your submitted idea content. You should not submit highly confidential, regulated, sensitive or third-party personal data unless you have a lawful basis and it is strictly necessary for the report.

We process User Content to provide the report, maintain quality and security, troubleshoot failures, prevent abuse and comply with applicable obligations. We do not sell User Content.

5. Cookies and Similar Technologies

We use essential cookies and similar technologies for sessions, CSRF protection, security, bot protection and checkout-related functionality. Optional analytics cookies, if introduced, will be used with consent where required. See our Cookie Policy.

6. Sharing of Data

We share data only as needed to operate, secure and support the Service:

  • OpenAI: AI analysis and report generation.
  • Hetzner: hosting, compute, storage and databases.
  • Cloudflare: CDN, DNS, DDoS protection, WAF, bot protection and request security.
  • MailerSend: transactional email delivery and delivery metadata.
  • Sentry: error and performance monitoring.
  • PayPro Global: independent Merchant of Record and payment controller for billing, tax, checkout, invoices, fraud checks, refunds and chargeback handling.
  • Legal and safety: authorities, advisors or counterparties where required by law or needed to protect rights and security.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to appropriate safeguards where required.

A current transparency list is available in our Sub-processors page.

7. International Transfers

Your data may be processed outside your country, including outside the EEA/UK. Where required, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, the UK International Data Transfer Addendum or equivalent mechanisms.

8. Retention

We retain personal data, submitted idea content, generated reports, payment metadata and technical logs only for as long as necessary to provide the Service, deliver reports, provide support, prevent fraud and abuse, comply with legal and accounting obligations, resolve disputes and enforce our agreements.

  • Order, report and idea content: retained while needed for delivery, customer access, support, dispute handling, quality control and legal/accounting obligations.
  • Payment metadata: retained as required for tax, accounting, fraud prevention, chargebacks and legal obligations.
  • Logs and security data: retained for a limited period appropriate to security, troubleshooting and abuse prevention needs, unless longer retention is required for investigations or legal reasons.
  • Backups: deleted on a rolling schedule unless legal holds or operational recovery needs apply.

You may request deletion where applicable. Some data may need to be retained where required by law, for fraud prevention, for payment records, or to establish, exercise or defend legal claims.

9. Your Rights

Depending on your location, you may have rights to access, correct, erase, restrict, object to processing, port your data, withdraw consent and lodge a complaint with a supervisory authority. To exercise rights, contact legal@proaudit.me. We may need to verify your identity before acting on a request.

10. Security

We use reasonable technical and organizational measures, including encryption in transit, access controls, least-privilege access, logging, backups and vendor security controls. No online service is 100% secure, and you should avoid submitting information that is unnecessary or highly sensitive.

11. Children

The Service is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so we can take appropriate action.

12. Third-Party Links and Checkouts

Our sites, emails or reports may link to third-party websites or PayPro Global checkout pages. Those third parties process data under their own terms and privacy policies where they act independently.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page or communicated by email where feasible. The updated Policy applies from the effective date shown on the page.

14. Contact and Controller Details

Controller: JEDITOOLS DOO (Reg. No. 51026004)
Registered address: UL. 4. JULA BB, BLOK 35-36, Podgorica, Montenegro (Crna Gora)
Websites: https://proaudit.me • https://app.proaudit.me
Privacy contact: legal@proaudit.me
Support contact: support@proaudit.me