Privacy policy

AuditClaude — Privacy Policy

Last updated: May 29, 2026 · Effective immediately upon posting.

1. Who we are

This Privacy Policy describes how GFIP Holdings ("we," "us," "our"), operating the brand AuditClaude at auditclaude.com, collects, uses, and protects your personal information.

For privacy questions or to exercise your rights described below, email hello@auditclaude.com.

2. Information we collect

Information you provide directly

Email address — when you download the free brief, sign up for our email list, or make a purchase
Name and billing address — when you purchase a product
Shipping address — when you purchase the printed edition
Payment information — processed by Shopify Payments / Stripe; we do not store your full credit card number on our servers
Customer support messages — when you email hello@auditclaude.com or use a support chat widget

Information collected automatically

Device and browser information — IP address, browser type, operating system, referring URL
Site usage — pages viewed, time on page, click paths, search queries (via cookies and analytics scripts)
Order history — products purchased, dates, amounts (via Shopify)
Download activity — which AuditClaude files you accessed and when (via SendOwl)

3. How we use your information

To deliver the products you ordered (digital delivery via SendOwl, print fulfillment via Lulu Direct)
To send order confirmations, download links, and customer support replies
To send marketing emails about AuditClaude updates, related products, and educational content (you can unsubscribe at any time)
To improve the AuditClaude product, the website, and the customer experience
To detect and prevent fraud, refund abuse, and rental-cycling
To comply with legal obligations (tax reporting, regulatory inquiries)

4. Who we share information with

We share limited information with the following service providers, only to the extent necessary to deliver our products and operate the business:

Shopify — commerce platform, hosting, order management, payments processing
SendOwl — digital product delivery, PDF stamping, download tracking, email automation
Lulu Direct — printed-edition fulfillment (name and shipping address only, for print orders)
Google Analytics (or equivalent) — site usage analytics, in aggregated form
Email service providers (e.g., Google Workspace, future Klaviyo or Mailchimp) — for transactional and marketing email delivery

We do NOT sell your personal information to third parties for advertising purposes.

We may disclose your information if required by law, court order, or government request, or if necessary to enforce our Terms of Service or protect the rights, property, or safety of our users or the public.

5. Cookies and tracking

We use cookies and similar technologies for:

Essential cookies — to make the site work (cart, checkout, login)
Analytics cookies — to understand how people use the site (Google Analytics or equivalent)
Marketing cookies — if and when we run paid advertising (Meta Pixel, Google Ads tag, etc.)

You can control cookies through your browser settings. Disabling essential cookies may prevent you from completing a purchase.

6. Marketing communications and unsubscribing

If you give us your email (free brief download, purchase, or signup), we may send you marketing emails. Every marketing email includes an unsubscribe link. Click it once and you're out — no questions, no friction.

Transactional emails (order confirmations, refund notifications, customer support replies) are sent regardless of marketing preferences because they relate to your account or order.

7. Data retention

Order records — kept for at least 7 years to comply with tax and accounting requirements
Customer email and account info — kept until you request deletion (see Section 8)
Blocked-rebuy list (refunded buyers) — kept indefinitely to enforce the one-refund-per-buyer policy
Analytics data — typically retained 14-26 months in aggregated form

8. Your rights

If you're in the European Economic Area (EEA), UK, or Switzerland (GDPR)

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (subject to legal retention requirements in Section 7)
Restrict or object to certain processing
Receive your data in a portable format
Withdraw consent at any time
File a complaint with your local data protection authority

If you're a California resident (CCPA / CPRA)

You have the right to:

Know what categories of personal information we collect and the purposes
Request a copy of your personal information
Request deletion of your personal information
Opt out of "sale" or "sharing" of personal information (we do not sell, but you can still opt out of marketing)
Be free from discrimination for exercising these rights

How to exercise any of these rights

Email hello@auditclaude.com with the subject line "Privacy Request." We will respond within the timeframes required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

9. International data transfers

AuditClaude operates primarily in North America. If you're accessing the site from outside North America, your information may be transferred to and processed in the United States or Canada. By using AuditClaude, you consent to this transfer.

10. Children's privacy

AuditClaude is not directed at children under 18. We do not knowingly collect information from children under 18. If you believe we have collected information from a child under 18, email hello@auditclaude.com and we will delete it.

11. Data security

We rely on the security practices of our service providers (Shopify, SendOwl, Stripe, Lulu Direct, Google Workspace) to protect your information. While no method of internet transmission is 100% secure, we use industry-standard practices including encryption in transit (HTTPS), encryption at rest where supported by our providers, and access controls.

If we become aware of a data breach affecting your personal information, we will notify you in accordance with applicable law.

12. Third-party links

auditclaude.com may contain links to third-party sites (e.g., Anthropic, OpenAI, Google, IRS, TIGTA, source citations). We are not responsible for the privacy practices of those sites. Review their policies before providing them with any information.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be announced via email and/or a prominent notice on auditclaude.com.

14. Contact

Privacy questions, requests, or complaints:

hello@auditclaude.com