Privacy Policy

1. Controller and contact

The controller for the personal data described in this policy is Oleks Tech OÜ, an Estonian company. You can contact us about privacy, security, or data-rights requests at hello@a11yops.tech.

2. What we collect

• Account data. Your email address, authentication method, account status, and settings. If you sign in with Google, we receive the limited Google profile data listed in section 3.
• Scan data. When you run a scan we process the website URLs you submit, public page content we retrieve at those URLs, screenshots, page metadata, detected accessibility issues, scores, and remediation output. You are responsible for having authority to submit those URLs.
• Reports and communications. If you request a free-scan report, contact us, or ask for support, we process the email address and messages you provide.
• Billing data. Paid plans are processed by Stripe. We do not see or store your full card details. We store plan, subscription, invoice, tax, and payment status data returned by Stripe.
• Technical and security data. IP address, browser and device information, request logs, error logs, and the cookies or tokens needed to keep you signed in and protect the service.
• Product usage data. Basic events such as scans started, reports opened, and account actions, so we can operate the service, troubleshoot issues, and prevent abuse.

We do not intentionally collect special-category data, and we do not sell personal data or run advertising/cross-site tracking.

3. Signing in with Google

If you choose “Sign in with Google,” Google shares a limited set of profile information with us — your name, email address, profile picture, and a Google account identifier — so we can create and authenticate your account. We use this data only to provide A11yOps's sign-in and account features.

A11yOps's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it. You can revoke A11yOps's access at any time from your Google account's security settings.

4. How we use data and our legal bases

Where the GDPR applies, we rely on these legal bases:

• Contract. To create your account, authenticate you, run requested scans, generate reports, provide remediation output, manage plans, and provide support.
• Legitimate interests. To secure, maintain, debug, and improve the service; prevent abuse; understand whether the service works; and keep a record of operational activity.
• Legal obligation. To keep invoices, tax/accounting records, and records required by law.
• Consent. Where we ask for it, such as optional communications or optional integrations. You can withdraw consent at any time.

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

5. Scan data and third-party personal data

A11yOps is intended for websites you own or are authorised to test. Public pages can still contain personal data, such as names, profile photos, reviews, or contact details. If you submit URLs on behalf of an organisation, you are responsible for having the required authority, notices, and lawful basis for that use. Do not submit private, authenticated, or sensitive pages unless you have the legal right to do so.

6. Who we share data with

We do not sell your personal data. We share it only with service providers that help us run A11yOps, under appropriate data-processing terms. These providers may include Stripe for payments, Google for sign-in, hosting/database/storage and scan-worker infrastructure, email delivery, support tooling, analytics limited to product operation, and professional advisers where needed. We may also disclose data where required by law, to enforce our terms, or to protect the service, our users, or the public.

7. International transfers

Some of our providers may process data outside your country, including outside the EEA. Where that happens, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

8. How long we keep data

We keep personal data only for as long as needed for the purposes above. In practice, account and service data are kept while your account is active; scan reports, screenshots, and remediation records are kept while they are needed to provide the report, support your account, preserve a progress trail, or resolve issues; support messages are kept while useful for support and business records; and billing/tax records are kept for the periods required by law. If you ask us to delete data, we will delete or anonymise it unless we need to keep it for legal, security, accounting, or dispute reasons.

9. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in, remember security state, and operate the site. We do not use advertising or third-party tracking cookies.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; restrict or object to processing; and withdraw consent where processing is based on consent. To exercise these rights, email hello@a11yops.tech. We may need to verify your identity before acting on a request. Where GDPR applies, we aim to respond within one month, unless the request is complex or we are legally allowed to extend the deadline.

You can also lodge a complaint with your local supervisory authority. In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate.

11. Security

We protect your data with measures including encryption in transit, hashed passwords, access controls, and least-privilege practices. No system is perfectly secure, but we work to keep your data safe and to respond quickly to any incident.

12. Children

A11yOps is not intended for anyone under 16, and we do not knowingly collect their data.

13. Changes

We may update this policy as the service evolves. We will change the “last updated” date above and, for material changes, give notice through the service or by email.

14. Contact

Questions or requests: hello@a11yops.tech.