OSO Audit

DRAFT — NOT FOR PUBLICATION. Prepared by the founder with AI assistance. This is not legal advice and has not been reviewed by counsel. Items marked [CONFIRM] depend on facts that must be verified before this is published, and the whole document should go to a lawyer alongside the trademark question. Remove this banner and the noindex tag only after that review.

Legal

Privacy Policy

This policy covers this website. Data your firm processes inside the product is a different matter, governed by your agreement with us — see the last section.

Last updated: [CONFIRM — set on publication]

1. Who we are

This website is operated by AuditLens Inc., a Delaware corporation trading as OSO Audit ("we", "us"). Registered address: [CONFIRM — registered agent address; do not publish a home address].

For any privacy question, contact Omar@osoaudit.com.

2. What this website collects

Essentially nothing. This site is static HTML. It sets no cookies, runs no JavaScript, loads no third-party fonts, embeds no trackers, and has no analytics, advertising pixels or session recording. There is no login and no form.

Specifically, we do not collect or store:

  • cookies or similar local identifiers;
  • analytics or behavioural data about your visit;
  • any information you have not deliberately sent us.

3. What our hosting provider records

Like any web server, our host keeps short-lived technical logs — typically IP address, timestamp, requested page and user agent — for security and reliability. We do not use these to build a profile of you and do not combine them with anything else.

[CONFIRM] Name the host once chosen (Vercel or Netlify), its log retention period, and whether a data processing agreement is in place. If visitors from the UK or EU are expected, confirm the transfer mechanism for US hosting.

4. If you email us

Email addresses on this site are ordinary mailto: links — nothing is submitted through the website. If you write to us, we receive and retain that correspondence, including your name, address and anything you choose to tell us, so that we can reply and keep a record of the discussion. Our email is hosted on Microsoft 365.

Legal basis, where UK or EU law applies: our legitimate interest in responding to business enquiries, and steps taken at your request prior to entering a contract.

[CONFIRM] Decide and state a retention period for business correspondence.

5. Who we share with

We do not sell personal information and do not share it for advertising. The only third parties involved in this website are our hosting provider and our email provider, each acting on our instructions.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict use of your personal information, to object to processing, to data portability, and to complain to a supervisory authority. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them — note that we do not sell or share personal information as those terms are defined.

To exercise any right, email Omar@osoaudit.com.

7. Children

This is a business product. The site is not directed to children and we do not knowingly collect information from them.

8. Changes

If this policy changes we will update the date above. Material changes will be stated plainly rather than buried.

9. Data inside the product is a separate matter. When an audit firm runs OSO Audit, that firm is the controller of its own client data and we act as a processor on its instructions under a written agreement and, where applicable, a data processing agreement. This website policy does not govern that relationship, and nothing here should be read as describing it. [CONFIRM] A separate DPA and sub-processor list should exist before any pilot handling real client data begins.