Privacy Policy

ShipScale Software Solutions Pvt Ltd (“ShipScale,” “we,” “us,” or “our”) operates AuditOwl (the “Service”), a managed service that captures database changes from a customer's PostgreSQL write-ahead log (WAL) for search, review, and export, along with the auditowl.io website (the “Site”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

If you are an individual whose personal data appears inside a customer's database change logs, please see the “Customer Data” section below — in that relationship the customer is the data controller and we act as their data processor.

1. Information we collect

Information you provide to us. When you request early access, contact us, or otherwise fill out a form on the Site, we collect the information you submit, such as your name, work email address, company name, and any message you include. Form submissions on this Site are processed by our form provider, Formspree.

Account and connection information. If you become a customer, we collect account details (such as name, email, and billing contact) and the technical configuration needed to connect to your database (such as host, replication slot, and schema names). We only request credentials for a limited-privilege, read-only replication role scoped to logical decoding, and connection credentials are protected using industry-standard security measures.

Customer Data. Once connected, the Service ingests change events (inserts, updates, and deletes) decoded from your database's WAL, including before/after row values, table and column names, and transaction metadata (“Customer Data”). Customer Data may contain personal data about your own end users. We process Customer Data solely on your behalf and your instructions, as your data processor, to provide the Service.

Information collected automatically. Like most websites, our hosting and content-delivery infrastructure automatically logs standard technical information such as IP address, browser type, and pages requested, for security, abuse prevention, and reliability purposes.

Cookies and analytics. We use Google Analytics to understand how visitors use the Site. Google Analytics uses cookies and similar technologies, and is processed by Google subject to Google's own privacy practices. It only loads after you accept the cookie banner shown on the Site; if you decline or take no action, it is not loaded. You can change your choice at any time by clearing your browsing data for this Site. Loading webfonts from Google Fonts may still cause your browser to contact Google's servers, regardless of your analytics choice.

2. How we use information

• To respond to access requests and inquiries, and to set up and operate the Service for customers
• To provide, maintain, secure, and improve the Site and the Service
• To send administrative or account-related communications
• To detect, investigate, and prevent fraud, abuse, or security incidents
• To comply with legal obligations

We do not sell personal information. We do not use Customer Data to train artificial intelligence or machine learning models, and we do not use it for any purpose other than providing, securing, and improving the Service for you, or as required by law.

3. Legal bases for processing

Where applicable data protection law requires a legal basis, we rely on: your consent (for example, submitting a contact form); performance of a contract (for example, operating the Service for a customer); and our legitimate interests in operating, securing, and improving the Site and Service.

4. How we share information

We do not sell personal information. We share information only with:

• Service providers who process data on our behalf, such as Formspree (form submissions), Google Fonts (webfont delivery), and Google Analytics (website analytics)
• Professional advisors, such as legal or accounting firms, where necessary
• Authorities, where required to comply with a legal obligation, or to protect our rights, property, or safety, or that of our customers or others
• A successor entity, in connection with a merger, acquisition, or sale of assets, subject to this Policy or a materially similar one

5. International data transfers

We are based in India and may use service providers located in other countries, including the United States. Where we transfer personal data across borders, we take reasonable steps to ensure it remains protected consistent with this Policy and applicable law.

6. Data retention

We retain contact and account information for as long as needed to respond to your request or provide the Service, and afterward as required for legitimate business or legal purposes. Customer Data is retained according to the retention period agreed with the customer, and is deleted or returned upon termination of the applicable agreement, except where retention is required by law.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, applicable data protection law (such as India's Digital Personal Data Protection Act, 2023, the EU/UK GDPR, or the CCPA) may give you rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, or to withdraw consent, and to escalate an unresolved request to your local data protection authority or, in India, the Data Protection Board. To exercise any of these rights, contact our Grievance Officer at legal@auditowl.io. If personal data about you appears in Customer Data, please direct your request to the relevant customer in the first instance, as they control that data; we will assist them as needed.

9. Children's privacy

The Site and Service are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

11. Contact us

Questions about this Policy or our data practices, and any grievances relating to your personal data, can be sent to our Grievance Officer at legal@auditowl.io.