Last updated: 2025-12-18

Privacy Policy

Scope

This policy describes how AuditLattice collects, uses, and shares personal information when you visit our marketing site, request information, register for events, or use our training platform. It applies to visitors and business contacts in Japan and other regions where we operate, subject to local law. If you interact with us solely on behalf of a company, we may process your professional contact details as a representative of that organization. The policy does not govern purely anonymous browsing beyond what technical logs require for security.

Contact

AuditLattice is the controller for personal data described here unless we state otherwise for a specific program. For privacy inquiries, contact hello@mind-center.one. We will verify requests to protect account security and may ask for additional information reasonably needed to process your request under applicable law. Enterprise customers may also use the escalation path defined in their order form for coordinated responses across teams.

Use of data

We use information to provide the service, communicate about programs, improve content quality, secure our systems, comply with law, and analyze aggregated usage patterns. We do not sell personal information. Marketing communications are sent only where permitted, and you may opt out using the link in each message or by contacting us. Analytics are designed to reduce re-identification risk where feasible, and we avoid collecting sensitive categories unless a specific engagement requires it with a documented basis.

Data collected

We may collect identifiers (name, email, phone), professional details (title, organization), account credentials (hashed where applicable), technical logs (IP address, device type, browser), and content you submit through forms or training exercises. If you attend live sessions, we may collect attendance metadata and chat transcripts where enabled. We avoid collecting sensitive categories unless a specific engagement requires it and lawful bases are documented. You should not submit regulated health data or government identifiers unless a written data processing agreement explicitly covers those categories.

Third parties

We use subprocessors to host infrastructure, deliver email, and analyze aggregated product usage. Contracts require subprocessors to protect data appropriately. If we transfer data outside Japan, we rely on appropriate safeguards as required by law, such as standard contractual clauses or equivalent mechanisms when applicable. A current list of categories of subprocessors is available upon request for enterprise customers. We evaluate vendors on security practices and contractual obligations rather than informal assurances.

Rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority where applicable. We will respond within reasonable timelines required by law. Some requests may be limited if they adversely affect the rights of others or our ability to meet legal obligations. We will explain any limitations in plain language rather than generic refusals.

Retention

We retain personal data for as long as needed to provide the service, meet contractual and legal obligations, resolve disputes, and enforce agreements. Marketing contacts are refreshed periodically; inactive records may be deleted or anonymized. Training artifacts you upload may be deleted according to program schedules communicated at enrollment. Logs used for security monitoring may be kept for shorter periods consistent with risk programs. When retention ends, we delete or anonymize data using reasonable technical measures.

Questions: hello@mind-center.one