Legal
Privacy Policy
Last updated November 4, 2026
This policy explains what Shortfall collects, how it's used and the choices you have. It applies to the website, the public demo and the app. It works alongside our Terms of Service.
1.What we collect
- Account details: your work email, agency name, a securely hashed password, and when you accepted these terms.
- Saved audits: the export files you upload, exactly as uploaded, the findings, your review notes and any supporting documents you attach.
- Activity records: a log of key actions in your agency (audits created or deleted, findings reviewed, documents added or removed, Excel reports exported, agency renamed) so your team can see who did what.
- Technical data: our hosting and authentication providers record standard request data, such as IP addresses, for security and to prevent abuse.
2.What the demo does
Files you use in the public demo, or when you run an audit without saving it, are read in memory to produce results and are not stored.
3.Personal data in your files
Shortfall needs worker IDs, not personal identifiers. Columns such as names, Social Security numbers, emails and phone numbers are removed before analysis, and in full program audits any such values found in other columns are masked too. Saved files are stored as you uploaded them, so please remove sensitive columns before uploading when you can.
4.How we use it
Only to provide and secure the service: running your audits, showing your results, storing your files and keeping your account safe. We don't sell your data or use it for advertising.
5.Who can see it
Your audits, files and documents are visible only to members of your agency. This is enforced in the database (row-level security) and in file storage. We use service providers to run Shortfall, such as Supabase for the database, authentication and file storage; they process data on our behalf.
6.Retention and deletion
Saved audits and their files are kept until they're deleted. Agency owners and admins can delete an audit, which removes its findings and stored files. To close your account and delete all of its data, contact us at support@aeque.co.
7.Security
Data is encrypted in transit, passwords are hashed, stored files are private and are only ever served to signed-in members of the agency they belong to. No system is perfectly secure, so please use a strong, unique password.
Questions? Email support@aeque.co.