Privacy Policy

Last updated: 6 April 2026

1. Who we are

Vaudr is operated by Prahlad Pty Ltd (ABN 12 636 618 169), an Australian company. In this policy, “we”, “us” and “our” refer to Prahlad Pty Ltd.

2. Information we collect

When you sign in with Google or Microsoft, we receive and store:

• Your name
• Your email address
• Your authentication provider (Google or Microsoft)

We do not collect passwords. Authentication is handled entirely by your chosen provider.

3. How we handle your files

CSV and XLSX files are processed entirely in your browser. They are never uploaded to or stored on our servers.

PDF files are sent to our server for text extraction, then immediately returned to your browser. We do not store PDF files or their contents after processing.

Reconciliation results are generated in your browser and are not stored on our servers.

4. How we use your information

We use your name and email address to:

• Identify you within your organisation
• Send invitation emails when you invite team members
• Communicate important service updates

We do not sell, rent or share your personal information with third parties for marketing purposes.

5. Where your data is stored

Your account information is stored in a Supabase-hosted database. Our application is hosted on Fly.io. Static assets are served via Cloudflare.

6. Data retention

We retain your account information for as long as your account is active. If you or your organisation administrator deletes your account, your personal data is removed from our systems.

7. Your rights

All users

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data

Australian residents

Under the Australian Privacy Principles (Privacy Act 1988), you have the right to access and correct your personal information. You may also complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

EU/UK residents (GDPR)

Under the General Data Protection Regulation, you have additional rights including data portability, restriction of processing, and the right to object to processing. Our lawful basis for processing is legitimate interest (providing the service you signed up for).

US residents

Depending on your state of residence, you may have additional rights under state privacy laws (such as the CCPA for California residents). We do not sell personal information.

8. Cookies

We use a session cookie to keep you signed in. We do not use tracking cookies or third-party analytics.

9. Security

We use HTTPS for all connections, OAuth 2.0 for authentication, and follow industry-standard practices to protect your data. Financial data in your uploaded files never leaves your browser (except PDFs for extraction, which are not stored).

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or through the application.

11. Contact

For privacy enquiries or to exercise your rights, contact us at: privacy@vaudr.com