Privacy Notice — Audit-Scan.app

1. Who we are

Audit-Scan.app ("we", "us", "our") is the provider of the Accessibility & SEO Audit Scanner web application available at audit-scan.app (the "Service"). Audit-Scan.app is the data controller responsible for your personal data in connection with the Service, except for payment data which is controlled by our payment provider, Paddle (see section 6).

2. Personal data we collect

Account data — the email address and password you use to sign in, and your account identifier.
Scan data — the URLs you submit for scanning, the time of each scan, and the audit findings we generate for them.
Lead enquiry data — if you contact us through a form, your name, email, website URL, business type, and message.
Usage and telemetry — pages visited, device type, browser, approximate region, and error reports that help us keep the Service running.
Device identifiers and IP address — used to enforce free-tier scan limits and to protect against abuse.

3. Why we use it (and our legal basis)

To provide the Service (account creation, running scans, saving results) — based on the performance of our contract with you.
To enforce free-tier limits and prevent abuse (counting daily scans, rate limiting) — based on our legitimate interests in protecting the Service.
To respond to enquiries you send us — based on your consent, which you can withdraw at any time.
To improve the Service (aggregated analytics, error reporting) — based on our legitimate interests in product improvement.
To meet legal obligations (records, tax, fraud prevention) — based on legal obligation.

4. Aggregated and anonymous data

We may aggregate or anonymise scan data so that it can no longer identify you, and use that data to analyse trends and improve our coverage of accessibility and SEO checks. Anonymous data is not personal data and is not covered by this notice.

5. Data retention

We keep account data and scan history for as long as your account is active. Free-tier scan records are retained to enforce daily limits and are removed or anonymised when no longer needed for that purpose. Lead enquiry data is kept for up to 24 months after your last contact, after which it is deleted. You can request deletion at any time (see section 8).

6. Data sharing

We do not sell your personal data. We share it with the following categories of recipients:

Paddle — our Merchant of Record for the sale of paid subscriptions. Paddle handles payments, subscription management, tax compliance, and invoicing. Payment card data is collected by Paddle and never reaches Audit-Scan.app.
Service providers — hosting, analytics, and error-reporting tools that help us operate the Service, under instructions and safeguards appropriate to their role.
Professional advisers — legal, accounting, and audit advisers where necessary.
Authorities — where required by law, regulation, or legal process.

7. International transfers

Your data may be processed outside your country of residence, including in the United States and the European Union. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions, and we only transfer data to recipients that provide a level of protection consistent with applicable law.

8. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you;
Ask us to correct inaccurate or incomplete data;
Request deletion of your personal data;
Restrict or object to certain processing;
Receive a copy of your data in a portable format;
Withdraw consent at any time where processing is based on consent;
Complain to your local data protection authority.

To exercise any of these rights, contact us at privacy@audit-scan.app. We respond to verified requests within one month.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular reviews. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access, alteration, and disclosure.

10. Cookies and local storage

We use essential storage to keep you signed in and remember your display preferences (such as theme and font size), and analytics storage to understand how the Service is used. You can manage or clear these in your browser settings. We do not use cookies for tracking you across other websites.

11. Children

The Service is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this notice

We may update this notice from time to time. We will indicate the latest revision by updating the "Last updated" date at the top of this page and, for material changes, provide a more prominent notice.

13. Contact

If you have any questions about this Privacy Notice or your personal data, contact us at privacy@audit-scan.app.