Privacy Policy
Draft for legal review — not yet in force. Items in [square brackets] need confirming before publication.
Last updated: 2 October 2026
This policy explains how Inside & Out Digital Ltd, trading as Audova ("Audova", "we"), registered in Scotland under number SC334849 at 38 Inchgarvie Avenue, Burntisland, Fife, KY3 0BU, uses personal data about the people who visit our website, sign up for Audova, or use it as part of a customer's team. We are the controller of that data. ICO registration number: [ICO NUMBER].
If you received an email sent through Audova, the business that sent it controls your data and we process it on their behalf. Please contact that business, or use the unsubscribe link in the email. We will help them respond to you.
What we collect
- Account details — your name, work email address, mobile number (to verify your account), password (stored hashed, never readable), and your business name, website, sector and address.
- Billing details — handled by Stripe. We receive your billing contact and the last four digits of your card; your full card details never reach our servers.
- Platform suppression list — a one-way hash of any address that hard-bounced or complained on any Audova account, kept so no customer sends to it again (our legitimate interest in protecting shared sending infrastructure).
- Usage and security data — sign-ins, the actions taken in your account (an audit trail), IP address, browser and device information, and error diagnostics.
- Enquiries — anything you send us through a demo request, access request or support message.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, and taking payment | Performance of our contract with you |
| Verifying your email address and mobile number, preventing fraud and abuse, keeping the service secure | Legitimate interests |
| Telling you about changes to the service, your bills and your account | Performance of contract |
| Replying to enquiries and demo requests | Legitimate interests |
| Keeping financial records | Legal obligation |
| Sending you product news or offers | Consent, or our legitimate interests in marketing similar services to customers (you can opt out at any time) |
Who we share it with
We use a small number of trusted service providers, listed on our sub-processors page — including our hosting (DigitalOcean, London), email delivery and backups (Amazon Web Services, London), payments (Stripe), error reporting (Flare) and AI features (Anthropic). We do not sell personal data.
Some providers are outside the UK (for example Stripe and Anthropic in the US). Where data leaves the UK we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.
How long we keep it
- Account details — for as long as your account is open, then [deleted within 90 days of closure], except billing records, which we keep for [6 years] for tax purposes.
- Sign-in records — [7 years]; audit trail of account activity — [1 year].
- Demo requests — [2 years] after we have dealt with them.
- Error diagnostics — [as per Flare's retention, typically 30 days].
Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, or to receive it in a portable format. Contact hello@audova.co.uk. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use cookies that are needed to sign you in and keep the service secure. [We do not use advertising cookies. / List any analytics cookies here.]
Changes
We will post any changes on this page and, where they are significant, tell account holders by email.