1. Who we are
Vexsai ("Vexsai", "we", "us") operates the Vexsai website and audit platform. For information you submit through this website, such as a demo request, we are the data controller.
For audit data that our customers collect through the platform, the customer is the controller and we process that data on their behalf, following their instructions. If you completed an audit sent to you by one of our customers, please contact that organisation about your data first.
2. Information we collect
Information you give us
- Demo, partner and contact requests: the type of request, name, work email, company, industry, the audit types you are interested in, and your message.
- Audit readiness check: your Yes/No answers are kept only in your browser session to show your score. If you ask for an expert review, we store your answers and score with your name, email and company.
- Account information: name, email, organisation, role and login details when you sign up.
- Audit content: audit templates, answers, reasons, uploaded documents and reports entered by customers and their Respondents.
Information collected automatically
- Technical data: IP address, browser type, device information and pages visited, recorded in server logs.
- Cookies: a session cookie that keeps forms secure. See our Cookie Policy.
3. How we use information
- To respond to demo requests and enquiries.
- To provide, maintain and secure the platform, including generating reports and AI analysis that customers request.
- To manage accounts, billing and customer support.
- To send service-related messages, such as security notices or changes to our terms.
- To detect and prevent spam, abuse and fraud.
- To meet legal obligations.
We do not sell personal information, and we do not use audit content to advertise to anyone.
4. Legal bases
Where data protection law requires a legal basis, we rely on: contract (to provide the Service you signed up for), legitimate interests (to respond to enquiries, keep the Service secure and improve it), legal obligation, and consent where we ask for it. You can withdraw consent at any time.
5. AI processing
When a customer requests AI analysis, audit content is processed by AI models to generate scores, summaries and recommendations. This processing is carried out to provide the Service. We do not use customer audit content to train AI models made available to other customers unless the customer has agreed to this in writing.
7. International transfers
Our service providers may process information in other countries. Where we transfer personal information across borders, we use appropriate safeguards required by applicable law.
8. How long we keep information
- Demo requests that do not lead to an account: up to 24 months.
- Account and audit data: for as long as the customer's account is active, then deleted within 90 days of closure unless the customer asks us to export it or the law requires us to keep it.
- Server logs: up to 12 months.
9. Security
We protect information with measures including encryption in transit, access controls, password-protected audit links and activity logging. No system is completely secure, so please use strong passwords and keep audit link passwords confidential.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email [email protected]. You may also complain to your local data protection authority.
11. Children
The Service is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the date above, and notify account holders of material changes.
Contact us
If you have questions about this page, email [email protected].