Audit3PL Invoice Reconciliation
Home / Privacy Policy
Security & Data Protection • Last Updated: November 2026

Privacy Policy

Audit3PL (operated by Orvex Software) is designed with an institutional, privacy-first architecture for DTC brands and enterprise operators. We enforce strict data minimization, zero AI model training, and automated 24-hour auto-purge routines.

1. Information We Collect & Purpose

We collect and process only the minimal information required to execute deterministic billing reconciliation:

  • Uploaded Invoice & Rate Card Files: CSV, Excel, or PDF documents containing warehouse line items, tracking numbers, and rate schedules uploaded voluntarily by the user for automated audit reconciliation.
  • Transient Transaction Metadata: Order identifiers and transaction confirmation tokens issued by our payment processor (Lemon Squeezy) to verify payment and release unlocked Excel deliverables.
  • Technical Telemetry: Standard non-identifying server request logs (IP address, user-agent, response codes) retained strictly for DDoS protection and system diagnostics.

2. Zero Retention Principle (24-Hour Auto-Purge)

Automated GDPR & SOC-2 Compliant Purge Worker

All uploaded customer invoice files, temporary parsing databases, and generated Excel reports are automatically, irreversibly, and permanently purged from server memory and disk storage after 24 hours. Zero long-term storage is maintained.

3. Strict No-AI-Training Policy

Your proprietary fulfillment data, order volumes, customer addresses, shipping destinations, and warehouse contract rates are never used to train, fine-tune, or benchmark public or proprietary artificial intelligence or machine learning models.

Data is processed 100% deterministically using isolated algorithmic reconciliation rules. We never sell, license, or share merchant data with 3PL brokers, competitors, or external data aggregators.

4. Payment Processing & PCI-DSS Compliance

Audit3PL does not collect, process, or store credit card numbers, CVVs, or bank account credentials. All financial transactions are processed securely by:

Lemon Squeezy, LLC (a Stripe company) — PCI-DSS Level 1 Compliant Merchant of Record.

Payment communications are encrypted using bank-grade 256-bit SSL/TLS encryption. For information on Lemon Squeezy’s security standards, visit Lemon Squeezy Legal.

5. Infrastructure & Transit Security

All data in transit is encrypted using TLS 1.3. Our computational infrastructure operates exclusively in US Tier-III secure data centers. Access to internal systems is restricted via cryptographic key authentication and principle of least privilege.

6. Zero Advertising Cookies

Audit3PL maintains a zero tracking cookie policy. We do not use third-party behavioral advertising cookies, Facebook pixels, or tracking beacons. Only minimal session storage required to preserve your audit report during the scan session is utilized.

7. Your Rights & Data Erasure Contact

Under GDPR, CCPA, and global privacy standards, you maintain full rights to access or request immediate deletion of any transient records. While all records auto-purge within 24 hours, you may request instant manual erasure at any time by contacting:

Email: support@audit3pl.com
Subject: Data Privacy & Erasure Request