Privacy Policy

CAMAudit is operated by Ventora Labs, a Wyoming corporation, doing business as CAMAudit. Questions or privacy requests can be sent to angel.campa@camaudit.io.

When you use CAMAudit, we collect account details, partner workspace details, uploaded commercial lease documents, CAM reconciliation statements, client and property records, audit results, payment records, and support messages. We also collect standard server logs, including IP addresses and browser information.

We use uploaded documents to run CAM audits, lease qualification, extraction, classification, report generation, correction package generation, billing, support, security, and reliability work. Uploaded documents are processed for service delivery and are not used to train provider models where our provider contracts prohibit that use.

You must not upload documents unless you are authorized to process them through CAMAudit for your firm, client, or engagement.

Source documents uploaded for CAM analysis are retained for up to 30 days and then deleted. Derived metadata, quality signals, extraction records, audit records, billing records, security logs, and legal acceptance records may be retained longer to operate the service, support partners, preserve account history, enforce agreements, and improve reliability.

You may request deletion at any time by contacting us. Eligible data is permanently removed within 30 days.

If you use CAMAudit without creating an account, we create an anonymous session that expires after 72 hours. You may create an account before expiry to preserve your audit results. Source document deletion follows the 30-day retention policy above.

CAMAudit uses the following third-party services to deliver its functionality:

• AWS: document storage and Textract optical character recognition.
• Contracted AI provider: extraction and classification of lease and statement data.
• Stripe: payment processing, subscriptions, billing portal, invoices, and refunds.
• Supabase: database, authentication, and account records.
• Cloudflare and Cloudflare R2: website hosting, edge services, and object storage where used.
• Railway: backend and worker hosting.
• Redis: queue and cache infrastructure for background work.

We do not sell your data to third parties. Each service provider processes data only as needed to deliver its specific function.

We use technical and operational controls intended to protect uploaded documents and account data. No system is guaranteed secure. You are responsible for limiting uploads to documents you have permission to process and for controlling access to your partner workspace.

You may request access, correction, deletion, or export of eligible data. To exercise these rights, email angel.campa@camaudit.io. We will respond within 30 days.

Questions about this privacy policy? Email us at angel.campa@camaudit.io.