1. Introduction

Welcome to AccessibilityScan ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website accessibility scanning service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address, full name, and password (stored securely using industry-standard encryption).
• Website URLs: We collect the URLs of websites you submit for accessibility scanning.
• Payment Information: For paid subscriptions, we process payments through Stripe. We do not store your credit card information directly; it is handled securely by Stripe in accordance with their privacy policy.

2.2 Automatically Collected Information

• Scan Data: When you scan a website, we collect and store the website's HTML, CSS, and JavaScript content (truncated to reasonable limits), along with accessibility violation data and scan results.
• Usage Data: We track the number of scans you perform, your subscription tier, and usage patterns to provide and improve our services.
• Technical Data: We may collect information about your device, browser type, IP address, and other technical information necessary for service operation.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our accessibility scanning services
• Process your transactions and manage your subscription
• Send you email notifications about scan completions and account updates
• Enforce usage limits based on your subscription tier
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and protect our rights

4. Data Storage and Security

We use Supabase for secure data storage and authentication. Your data is:

• Stored in encrypted databases with industry-standard security measures
• Protected by Row Level Security (RLS) policies to ensure data isolation
• Transmitted over encrypted connections (HTTPS/TLS)
• Accessible only to authorized personnel on a need-to-know basis

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party services that help us operate our business, including:
  • Supabase (database and authentication services)
  • Stripe (payment processing)
  • Email service providers (for notifications)
• Public Reports: All scan reports are stored as public reports and are accessible to anyone with the report URL. All reports have shareable public links that can be accessed without authentication, regardless of subscription tier.
• Legal Requirements: We may disclose information if required by law or to protect our rights, property, or safety.

6. Your Rights and Choices

You have the right to:

• Access: Request access to your personal information and scan data
• Correction: Update or correct your account information through your settings page
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from email notifications (except essential service communications)

To exercise these rights, please contact us at our contact page.

7. Cookies and Tracking

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our service.

8. Children's Privacy

Our service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our service after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our contact page.