Privacy policy

Tigran Avakov, a self-employed individual, Mirzo-Ulugbek 45A, 100007 Tashkent, Uzbekistan, trading as RoutePayAudit, decides how the data described here is processed. Write to support@routepayaudit.com with any question about it.

We collect your email address, a salted hash of your password and your company name to provide and protect access to the service. We store the documents you upload or forward, the readings verified from them, the rate versions you confirm, your answers, assessments and request texts, and the filing dates and outcomes you record. A file may contain personal information you supplied; share only information you are entitled to share and leave out unnecessary customer or driver details. You decide what to share. Enter only what your agreement lets you share.

• Technical records needed to run the service: the time of a request, the address it came from while limiting abuse of the sign-in form, and the state of your plan.

We process this data to perform the contract you entered into when you signed up: without the files and information you supply there is nothing to check. Technical records rest on our legitimate interest in keeping the service secure and working.

We keep the documents you supplied and the readings, answers, rate versions, assessments and request records while the company account is open. You can export the company's data and stored document files before closing it.

Raw email messages and ZIP archive containers are temporary intake sources. They are removed after unpacking; cleanup also removes unread or failed containers after the applicable seven-day waiting period. Extracted PDF and CSV documents follow the document retention above. The incoming-mail journal is kept for 13 months and then removed by scheduled cleanup.

Closing the company account stops access and starts permanent erasure of its business records and files after any live subscription has been canceled. This is deletion, not a hidden flag. Erasure runs in background steps. The company name and contact addresses needed for closure messages remain until the email service accepts the required messages. A send failure can delay removal of those details while we retry or resolve the problem. People who also use another company keep their access to that company.

A limited closure and payment record remains to prevent late payment notifications from restoring a closed account and to handle cancellation or a refund. A subscription reference can remain while a notice asking a person to check Paddle is pending. Contact details used only for the closure are removed after the email service accepts the required client messages. We do not keep the deleted documents in this record.

Billing records are held by our payment provider for as long as tax law requires, which is outside our control.

Cloudflare runs the application, database, file storage and email infrastructure. Files are encrypted before they are stored. Paddle is our merchant of record: it handles checkout, card payments, receipts and taxes. We do not receive your card details.

Anthropic receives the text of document pages so that Claude Haiku can read their fields. A model answer is not enough: a value and its meaning must be verified against the supplied source before it is used. Missing or uncertain values are not filled in by guessing. We use it under Anthropic's Commercial Terms of Service, which cover how it handles the data. Its Data Processing Addendum is part of those terms by reference. Anthropic does not train its models on your files.

That is the entire list. We do not sell data and do not share it with advertisers.

We use a session cookie to keep you signed in. The site has no analytics, advertising or tracking pixels. Fonts are served by us. The payment page loads Paddle's checkout script so that you can pay; card details go to Paddle, not to us.

Any person signed in to the company can export its data as JSON and CSV and its stored document files in ZIP parts. Raw email and ZIP intake containers are not included. Only the person who created the company can close its account from Export and close. The person who created the company can also ask us by email to close the account: we check that the message comes from that person, and then erase the data in the same order as when you close the account yourself.

Ask us and we will send you the data we hold about your account, correct anything wrong in it, or help the person who created the company close its account and erase its data.

We answer within 30 days and usually within one business day. If you are in the UK, the EU or another region with a data protection authority, you may complain to it, though we would rather you told us first and gave us the chance to fix the problem.

The application runs on Cloudflare infrastructure distributed across regions, so data may be processed outside your country. Cloudflare and Paddle both operate standard contractual clauses for international transfers.

Anthropic's Data Processing Addendum, which is part of its Commercial Terms of Service by reference, includes the standard contractual clauses of the EU and the addendum of the UK for international transfers.