1. Introduction

Welcome to AccessibilityScan ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website accessibility scanning service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address, full name, and password (stored securely using industry-standard encryption).
• Website URLs: We collect the URLs of websites you submit for accessibility scanning. For multi-page scans, we collect multiple URLs per scan (up to 10 pages for Professional plan, up to 25 pages for Business plan).
• Payment Information: For paid subscriptions and pay-per-scan purchases, we process payments through Stripe. We do not store your credit card information directly; it is handled securely by Stripe in accordance with their privacy policy. We store your Stripe customer ID and subscription details for billing purposes.

2.2 Automatically Collected Information

• Scan Data: When you scan a website, we collect and store the website's HTML, CSS, and JavaScript content (truncated to reasonable limits), along with accessibility violation data, AI-powered analysis results (for paid plans), and scan results. For multi-page scans, we collect and store data for all pages scanned.
• Usage Data: We track the number of scans you perform, your subscription tier (Free, Starter, Professional, or Business), pay-per-scan credits, monthly scan limits, and usage patterns to provide and improve our services.
• Billing Data: We store subscription status, billing cycle dates, payment history, and pay-per-scan purchase records for account management and billing purposes.
• Technical Data: We may collect information about your device, browser type, IP address, and other technical information necessary for service operation.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our accessibility scanning services
• Process your transactions and manage your subscription
• Send you email notifications about scan completions and account updates
• Enforce usage limits based on your subscription tier
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and protect our rights

4. Data Storage and Security

We use Supabase for secure data storage and authentication. Your data is:

• Stored in encrypted databases with industry-standard security measures
• Protected by Row Level Security (RLS) policies to ensure data isolation
• Transmitted over encrypted connections (HTTPS/TLS)
• Accessible only to authorized personnel on a need-to-know basis

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party services that help us operate our business, including:
  • Supabase (database and authentication services)
  • Stripe (payment processing for subscriptions and pay-per-scan purchases)
  • OpenAI (for AI-powered accessibility analysis on paid plans)
  • Email service providers (for notifications and report delivery)
• Public Reports: All scan reports are stored as public reports and are accessible to anyone with the report URL. All reports have shareable public links that can be accessed without authentication, regardless of subscription tier or payment method. This includes reports from free scans, subscription scans, and pay-per-scan purchases.
• Legal Requirements: We may disclose information if required by law or to protect our rights, property, or safety.

6. Your Rights and Choices

You have the right to:

• Access: Request access to your personal information and scan data
• Correction: Update or correct your account information through your settings page
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from email notifications (except essential service communications)

To exercise these rights, please contact us at our contact page.

7. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our service.

8. Children's Privacy

Our service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our service after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our contact page.