# PRIVACY POLICY
**DigiAudit AI Engine**
**Effective Date:** February 13, 2026
---
## 1. INTRODUCTION
Digi Cosmos ("we," "us," "our"), a division of HealthCart Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the DigiAudit AI Engine.
---
## 2. INFORMATION WE COLLECT
**2.1 Account Information**
- Name, email, company name
- Contact information
- Account credentials (securely hashed)
**2.2 Assessment Data**
- Audit questionnaire responses
- Business information you provide
- Document uploads (if applicable)
**2.3 Usage Data**
- Log data (IP addresses, browser type)
- Platform interaction patterns
- Report generation metadata
**2.4 Payment Information**
- Processed through secure third-party providers
- We do not store full payment card details
---
## 3. HOW WE USE YOUR INFORMATION
**3.1 Service Delivery**
- Generate digital transformation assessments
- Provide personalized recommendations
- Improve our AI algorithms
**3.2 Communication**
- Send service-related notifications
- Respond to inquiries
- Provide customer support
**3.3 Legal Compliance**
- Comply with legal obligations
- Respond to legal requests
---
## 4. DATA SHARING
**4.1 We DO NOT sell your personal data to third parties.**
**4.2 We may share data with:**
- Service providers (hosting, payment processing)
- As required by law or legal process
- In case of business transfer (with notice)
---
## 5. DATA SECURITY
**5.1** Data at rest: AES-256 encryption (AWS S3)
**5.2** Data in transit: TLS 1.3 encryption
**5.3** Database: Infrastructure-level encryption
**5.4** Access controls and monitoring in place
---
## 6. DATA RETENTION
**6.1** We retain data as long as your account is active.
**6.2** After deletion request, data is removed within 30 days.
**6.3** Some data may be retained for legal compliance.
---
## 7. YOUR RIGHTS
Depending on your jurisdiction, you may have rights to:
**7.1 Access** - Request copies of your data
**7.2 Correction** - Correct inaccurate data
**7.3 Deletion** - Request data deletion
**7.4 Portability** - Receive data in portable format
**7.5 Objection** - Object to certain processing
**7.6 Withdraw Consent** - Where processing is consent-based
To exercise these rights, contact:
[email protected]
---
## 8. INTERNATIONAL TRANSFERS
Your data may be transferred to and processed in Canada and the United States. We implement appropriate safeguards for international transfers.
---
## 9. COOKIES
We use essential cookies for Platform functionality. See our Cookie Policy for details.
---
## 10. COMPLIANCE
**10.1 GDPR** - We comply with EU data protection requirements for EU users.
**10.2 CCPA** - California residents have additional rights under CCPA.
**10.3 PIPEDA/CASL** - We comply with Canadian privacy laws.
---
## 11. CHILDREN'S PRIVACY
Our services are not intended for individuals under 18. We do not knowingly collect data from children.
---
## 12. CHANGES TO THIS POLICY
We may update this Policy. Material changes will be communicated via email or Platform notice.
---
## 13. CONTACT US
**Data Protection Contact:**
Email:
[email protected]
**Digi Cosmos (A division of HealthCart Inc.)**
*Last Updated: February 13, 2026*
*Version: 2.0*