Privacy Policy

Who we are

A11yRemedy (a11yremedy.com) provides scheduled crawls, automated accessibility testing, and implementation-ready remediation reports. This policy describes the information we collect when you use the website, public scanner, accounts, and quote requests.

Privacy questions: privacy@a11yremedy.com.

Information we collect

Account data: organisation name, your name, email address, and a hashed password. Team invitations store the invitee's email until they accept or the invite expires.

Site and scan data: page URLs you submit, crawl settings, axe-core findings (CSS selectors, failing HTML snippets, suggested snippets for a human to review), and optional login cookies or form credentials you store so we can scan authenticated pages in our infrastructure.

Public scanner: the page URL you paste, your IP address for rate limiting, and the email address you give to unlock the full report. Unlocking also notifies us that someone requested the full findings.

Quote requests: name, email, company, message, and the scan the request refers to.

Billing: Stripe customer and subscription identifiers. Card details are handled by Stripe, not stored in our database.

Usage and security: timestamps, coarse IP addresses for rate limits, and error reports if Sentry is configured. We do not log full request bodies, auth tokens, or customer session cookies.

How we use it

We use this information to run scans, produce reports, operate your organisation account, send transactional email (password reset, invites, quote acknowledgements), prevent abuse, bill for paid plans, and reply to quote requests.

We do not sell personal information. We do not use public-scan emails for marketing lists.

Scanning other people's pages

When you ask us to scan a URL, a headless browser in our infrastructure fetches that page and injects axe-core as a script for that run only. We do not inject a widget into a live customer site and we do not apply fixes to anyone's code.

Page HTML snippets appear in reports so a developer can implement a change. If you scan a site you do not control, you are responsible for having a legitimate reason to request that scan.

Processors

We use subprocessors to run the product: hosting and databases, Redis for queues and rate limits, Stripe for payments, an email provider (Resend or SMTP) for transactional mail, and optionally Sentry for error diagnostics.

axe-core is open-source testing software we run ourselves. Use of axe-core does not imply endorsement by Deque Systems, Inc.

Cookies

Signed-in sessions use httpOnly cookies that keep you logged in. They are required for the dashboard. The public marketing and scan pages do not require an account cookie.

Retention and your requests

We keep organisation, scan, and lead records while the account is active. You can ask us to correct or delete personal data, or export what we hold, by emailing the address above. We may keep a limited record where we must (for example billing disputes or abuse prevention).

Children

A11yRemedy is aimed at organisations and website owners. It is not directed at children.

Changes

If we change this policy we will update the effective date on this page. Material changes will be called out on the site.