Privacy Policy

This Privacy Policy explains how ComplianceVault ("we", "our", or "us"), a product of Alpevox, collects, uses, and protects information when you use our website, dashboard, and services at compvault.com.au and compvault.alpevox.ai.

Account information: your name, email address, and business/organisation details, provided when you sign up.

Compliance data: information you choose to upload about your employees and contractors — such as names, positions, and the licences, certifications, and insurance documents you track — together with the documents themselves.

Usage data: log-in activity and actions taken within the dashboard, used for security, troubleshooting, and service reliability.

Payment information: when you subscribe to a paid plan, payment is processed directly by Stripe. We do not store your full card details on our own systems.

We use the information we collect to provide and maintain your account and organisation; calculate compliance status and send expiry reminder and expired-document emails; process subscription payments and manage billing; respond to support requests; and maintain the audit log required to operate the service.

We do not sell your personal information, or the compliance data you upload, to third parties.

We rely on the following third-party services to operate ComplianceVault, each processing a limited scope of data as described:

• Supabase — authentication, account data, and application database storage
• Cloudflare R2 — storage of uploaded compliance documents
• Stripe — payment processing
• Resend — transactional email delivery (reminders, expiry alerts, storage warnings)
• Vercel — application hosting and scheduled jobs

We use industry-standard security practices, including encrypted connections (HTTPS), Row Level Security scoping data access to your organisation, and access-restricted storage and database credentials. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your account and compliance data for as long as your account remains active. Deleted documents are soft-deleted and recoverable for 30 days before permanent removal, after which they cannot be restored.

If you close your account, we will delete or anonymise your personal information within a reasonable period, except where retention is required for legal, tax, or billing record purposes.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you or your organisation
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Object to or restrict certain uses of your data

To exercise any of these rights, contact us at hello@alpevox.ai.

We use essential cookies required for authentication and session management. We do not currently use third-party advertising or tracking cookies.

ComplianceVault is a business tool not directed at, and not intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

ComplianceVault is operated by Alpevox, a business registered in Australia (ABN 20 936 383 033). This Privacy Policy is governed by the laws of Australia.

For privacy-related questions, please email hello@alpevox.ai.