Legal
Privacy Policy
Effective September 2, 2026
What we collect
DramAudit processes account, billing, venue configuration, inventory, device health, printer routing, support, and audit information needed to provide the service. Payment card data is handled by our payment processor and is not stored by DramAudit.
How we use it
We use information to operate and secure the platform, provision venue-isolated workspaces, provide requested support, meet legal obligations, and improve service reliability. We do not sell personal information.
Optional AI evidence checks
When an authorized venue user explicitly requests an AI evidence check, the selected audit photo and the related beverage name and recorded weight are sent to the configured AI service provider solely to extract visible evidence. The provider result is checked again by DramAudit, recorded with the audit, and never treated as manager approval. Photo processing is disabled when the provider is not configured.
Isolation and support access
Each venue is assigned a separate logical data cell. DramAudit support can see fleet health and diagnostics; access to private venue conversations or operational content requires a scoped, time-limited access grant that is recorded in the audit log.
Retention and rights
We retain service records while an account is active and as needed for security, tax, contractual, and legal purposes. Account owners may request access, correction, export, or deletion, subject to applicable retention obligations.
Contact
Privacy requests: privacy@dramaudit.com. This policy should be reviewed with qualified Canadian privacy counsel before material expansion beyond the initial pilot.