SoxDesk Privacy Policy

Last updated: July 21, 2026

This policy covers both the SoxDesk software and the soxdesk.com website. It is short because there is very little to disclose: SoxDesk is built not to collect data, and the website follows the same principle.

The product: we collect nothing

SoxDesk runs entirely on your own machines. All data you create — audit records, evidence files, user accounts, backups — is stored in a folder on your own infrastructure. The software makes no outbound network connections except email sent through an SMTP server you configure and control. There is:

• no telemetry or analytics,
• no usage tracking or crash reporting,
• no automatic update checks,
• no license activation server (license keys are verified offline, on your machine),
• no account with us — the trial requires no sign-up, and in-app user accounts exist only inside your own installation.

We never receive, access, or process any data from your use of SoxDesk. We could not disclose, sell, or lose your audit data even if compelled to, because we do not have it.

The website: no analytics, no trackers

soxdesk.com is a static site. It uses no analytics, no advertising or tracking scripts, and sets no cookies. Downloading the trial requires no account and no email address. Our hosting provider (Cloudflare) processes standard server logs (such as IP addresses) to deliver the site and protect it from abuse, under Cloudflare's privacy policy; we do not use those logs to identify visitors.

Purchases: handled by Lemon Squeezy

Licenses are sold through Lemon Squeezy as merchant of record. When you buy, Lemon Squeezy — not us — collects and processes your payment details, billing information, and tax data, and issues your invoice. Their handling of that data is governed by the Lemon Squeezy privacy policy. We receive from Lemon Squeezy the order information needed to fulfill your license (such as the buyer name/email on the order), which we use only to issue your license key and provide support.

Support email

If you email [email protected], we keep the correspondence so we can help you, honor your license, and improve the documentation. We do not add support addresses to any marketing list, and we do not share them with anyone. If you want a support thread deleted, ask in the thread and we will delete it unless we need it to document a license or refund.

What we retain, in full

• Support correspondence (see above).
• Order records from Lemon Squeezy needed for license fulfillment, refunds, and taxes.

That is the complete list.

Your rights

Depending on where you live, you may have legal rights to access, correct, or delete personal data we hold. Since the only personal data we hold is support correspondence and order records, requests are simple: email [email protected] and we will handle it within 30 days.

Changes

If this policy changes, we will update this page and the "last updated" date. Given the product's design, material changes are unlikely; we will not add data collection to the product quietly — see the no-telemetry commitment in the license agreement.

Contact

[email protected] (email, asynchronous, 48-hour response target).