Privacy Policy

1. Who we are

This website is operated by AuditLens Inc., a Delaware corporation trading as OSO Audit ("we", "us"). Registered office: 131 Continental Drive, Suite 305, Newark, DE 19713, USA. Mailing address: 500 Paterson Plank Rd #35807, Union City, NJ 07087, USA.

For any privacy question, contact dpo@osoaudit.com.

2. What this website collects

Essentially nothing. This site is static HTML. It sets no tracking cookies, embeds no trackers, loads no third-party fonts, and has no analytics, advertising pixels or session recording. There is no login and no form.

Specifically, we do not collect or store:

• tracking cookies or similar identifiers;
• analytics or behavioural data about your visit;
• any information you have not deliberately sent us.

Cookies and local storage

We don't use cookies for tracking, advertising or analytics, so there is no cookie banner. Two strictly necessary things can happen on your device:

• The quick demo (/try) runs entirely in your browser. It sets no cookies and sends nothing to us.
• The full product demo (/demo) is open only to people we approve. You ask for access by email (name, company, role, work email); we keep that request only to reply to you and to know who has access. Once approved, you enter your work email and our provider Cloudflare emails you a one-time code. We receive the email address you signed in with and the time, and we may contact you once about OSO; reply "no thanks" and we won't again. Cloudflare sets a sign-in cookie so you stay signed in for the session. Inside the demo, a few display preferences (theme, table columns, which view you were on) are kept in your browser's local storage on your device.
• Our hosting provider, Cloudflare, may set a short-lived security cookie to tell people from automated bots and protect the site from abuse. It isn't used to track you.

3. What our hosting provider records

This site is served by Cloudflare (Cloudflare Pages and Cloudflare DNS). Like any web infrastructure, Cloudflare keeps short-lived technical logs — typically IP address, timestamp, requested page and user agent — for security and reliability. Cloudflare processes that data under its published data processing terms. We do not use these logs to build a profile of you and do not combine them with anything else.

Where UK or EU law applies to your visit, transfers to our US-based providers rely on those providers' standard contractual protections, including participation in recognised transfer frameworks where the provider is certified.

4. If you email us

Email addresses on this site are ordinary mailto: links — nothing is submitted through the website. If you write to us, we receive and retain that correspondence, including your name, address and anything you choose to tell us, so that we can reply and keep a record of the discussion. Our email is hosted on Microsoft 365.

Legal basis, where UK or EU law applies: our legitimate interest in responding to business enquiries, and steps taken at your request prior to entering a contract.

We retain business correspondence for up to 24 months after a discussion concludes, unless a longer period is required for a contractual, legal or regulatory reason.

5. Who we share with

We do not sell personal information and do not share it for advertising. The only third parties involved in this website are our hosting provider (Cloudflare) and our email provider (Microsoft), each acting on our instructions. A fuller list of the sub-processors relevant to the product itself is on our Trust page.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict use of your personal information, to object to processing, to data portability, and to complain to a supervisory authority. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them — note that we do not sell or share personal information as those terms are defined.

To exercise any right, email dpo@osoaudit.com.

7. Children

This is a business product. The site is not directed to children and we do not knowingly collect information from them.

8. Changes

If this policy changes we will update the date above. Material changes will be stated plainly rather than buried.