Privacy Policy — WCAGsafe

The short version

We scan websites for accessibility issues. To do that, we need some basic information from you. We do not sell your data. We do not share it with advertisers. We keep things simple and honest.

1. Who we are

WCAGsafe is an accessibility scanning tool that checks websites for WCAG 2.1 compliance issues. We help business owners understand their legal risk under the Americans with Disabilities Act (ADA) and similar laws worldwide. Our service is operated from wcagsafe.com.

2. What information we collect

Website URLs — the URLs you submit for scanning. We need these to run the scan.
Email address — optional. If you provide it, we use it to send your report and occasional product updates.
Account information — if you sign up, we store your name and email to manage your account.
Scan results — the accessibility violations found on your submitted URLs, stored so you can review them later.
IP address — collected automatically to enforce free scan limits and prevent abuse.
Payment information — handled entirely by Paddle. We never see or store your card details.

3. How we use your information

To run accessibility scans on URLs you submit
To generate and deliver your compliance report
To manage your account and subscription
To send scan results and service updates (you can unsubscribe anytime)
To prevent abuse of the free scan feature
To improve our scanning accuracy and product features

4. Who we share data with

We work with a small number of trusted services to run WCAGsafe:

Neon — our database provider, stores your scan results securely
Clerk — handles account creation and login
Paddle — processes payments as Merchant of Record (we never see your card details)
Groq — generates plain-English explanations of scan results using AI
Vercel / Railway — cloud hosting providers that run our application

We do not sell, rent, or trade your personal data to any third party for marketing purposes. Ever.

5. Cookies

We use only essential cookies required to keep you logged in and maintain your session. We do not use advertising cookies or tracking pixels. We do not use Google Analytics.

6. How long we keep your data

Free scan results — kept for 30 days, then automatically deleted
Account and paid scan data — kept for as long as your account is active
Email addresses — kept until you unsubscribe or request deletion

7. Your rights

You have the right to:

Access the personal data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data ("right to be forgotten")
Unsubscribe from emails at any time
Export your scan data

To exercise any of these rights, email us at privacy@wcagsafe.com. We will respond within 7 business days.

8. Security

We take security seriously. All data is transmitted over HTTPS. Passwords are never stored — we use Clerk for authentication which handles this securely. Our database is hosted on Neon with encryption at rest. We regularly review our security practices.

9. Children

WCAGsafe is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

10. Changes to this policy

If we make significant changes to this policy, we will notify you by email or by showing a notice on our website. Small clarifications may be updated without notice. The date at the top of this page always reflects the latest update.

11. Contact us

Questions about this policy? We are happy to help. Email us at privacy@wcagsafe.com and we will get back to you promptly.