Privacy Policy — XceptionIQ

XceptionIQ ("we", "us", or "our") is committed to protecting the privacy of users of our audit trail exception intelligence platform. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to it.

1. Information We Collect

We collect the following categories of information:

Account information: Name, work email address, company name, and role when you register or contact us.
Audit trail data: Files you upload for processing (PDF or CSV audit trail exports and supplementary documents). This data is processed solely to provide the exception detection service.
Usage data: Log data, feature interactions, and session information to operate and improve the platform.
Communication data: Messages you send to us via the contact form or email.

2. How We Use Your Information

To provide, operate, and maintain the XceptionIQ platform.
To respond to your enquiries and support requests.
To send transactional communications related to your account.
To improve the platform through aggregated, anonymised usage analysis.
To comply with legal and regulatory obligations.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Data Isolation

XceptionIQ is a multi-organisation platform. Your organisation's data, uploaded files, policies, and user accounts are strictly isolated at the database level. No cross-organisation data access is technically possible.

4. Data Retention

We retain your account information and uploaded data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us at contactus@xceptioniq.com.

5. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted connections (TLS). Access to customer data is restricted to authorised personnel on a need-to-know basis.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your personal information.
Object to or restrict certain processing activities.
Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at contactus@xceptioniq.com.

7. Cookies

We use essential cookies required for the platform to function (authentication sessions, security tokens). We do not use third-party advertising cookies. Analytics, if used, are anonymised and aggregated.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact Us

For any privacy-related questions or requests, please contact us at contactus@xceptioniq.com or via our contact form.