1. Introduction

Welcome to AccessiSight ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect when you use our website accessibility scanning service, which third parties process that data on our behalf, and what rights you have over it.

AccessiSight is operated by TR Futuretech LLP, Noida, Uttar Pradesh, India. TR Futuretech LLP decides how and why your personal data is processed (it is the "data controller" or "data fiduciary").

2. Data We Collect

Identity Data: name, username, or similar identifier if you create an account.
Contact Data: email address, and organisation name if provided.
Account & Billing Data: password (stored as a salted hash, never in plain text), subscription plan, and payment metadata processed by our payment providers (see Section 3; we never see or store your full card number).
Technical Data: IP address, browser type and version, time zone, operating system, and device information.
Usage Data: how you use the Service, including scan history and export activity.
Scanned Site Content: the URL you submit for scanning, and content the Service extracts from that page in order to analyze it: HTML structure, visible text, images and their attributes, screenshots, and accessibility-tree data. If you use authenticated-scan features, this may include content from behind your own login on the site you asked us to scan. Do not submit URLs or credentials you do not have the right to scan.

Browser extension: when you click “Scan this page” in the AccessiSight extension for Chrome, it sends the address (URL) of the current tab to accessisight.com, together with your AccessiSight sign-in cookie if you are signed in, so the scan runs and is saved to your account. It does not send the page’s content, your browsing history or anything you type into websites, and it has no analytics or tracking.

3. Third-Party Processors

We share the minimum data necessary with the following processors so they can perform services on our behalf. We do not sell your data to any of them, and each is bound by its own privacy/data-processing terms:

AI providers (only with your own key): AI-assisted features run on our in-house, rule-based engine by default, and nothing is sent to an AI provider. Only if you add your own API key for Anthropic, OpenAI or Google is the relevant scanned content (HTML snippets, screenshots or extracted text; never your password) sent to that provider, under your own agreement with it, for the specific feature you invoke.
Hosting & database (Supabase): Account records, scan results, and usage data are stored in our Supabase-hosted Postgres database.
Payments (Razorpay, Stripe): Subscription billing and one-time credit-pack purchases are processed by Razorpay and/or Stripe, or handled as a manually-reviewed UPI payment for some regions. See our Refund & Cancellation Policy for details. We never receive or store your full card number.
Integrations you enable: If you connect Jira or GitHub to create issues from scan findings, the relevant finding details are sent to that service using the credentials/tokens you provide.
Transactional email: Account and notification emails are sent via our email delivery provider using your email address.

Some of these processors are based in, or process data in, the United States and other countries. Where required, we rely on the safeguards our processors provide for such transfers, such as standard contractual clauses in their data processing terms.

4. How We Use Your Data

We use personal data to: provide and operate the scanning service and generate your reports; process payments and manage your subscription; prevent fraud and abuse (for example, using IP addresses to limit repeated free-credit sign-ups from one network); respond to support requests; send account-related and (with consent, where required) marketing emails; monitor and improve the reliability and accuracy of the Service; and comply with legal obligations.

5. Data Retention

We retain scan results and account data for as long as your account is active, plus a reasonable period afterward to comply with legal, tax, or dispute-resolution obligations. Abuse-prevention records such as IP addresses are kept only as long as needed for that purpose. You can request deletion of your account and associated scan data at any time (Section 7).

6. Cookies

We use strictly necessary cookies to keep you signed in and remember your session, and local-storage flags to remember onboarding/tour preferences. We do not use third-party advertising cookies.

7. Your Rights

Depending on your location, you may have the right to: access the personal data we hold about you; request correction or deletion of it; object to or restrict certain processing; receive your data in a portable format; and (for California residents under the CCPA) opt out of the "sale" or "sharing" of personal information (we do not sell personal data). To exercise any of these rights, contact us at accessisight@gmail.com. We will respond within the timeframe required by applicable law.

8. Data Security

We use industry-standard measures (encryption in transit, hashed credentials and access controls) to protect your data from unauthorized access, alteration, or disclosure. Access to personal data is limited to personnel and processors who need it to operate the Service.

9. Children's Privacy

The Service is not directed at anyone under 18, and we do not knowingly collect personal data from them.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

For privacy questions or to exercise your data rights, contact accessisight@gmail.com.

Grievance Officer: for complaints about the Service or about how we handle your personal data, email accessisight@gmail.com with the subject "Grievance". We acknowledge complaints within 48 hours and aim to resolve them within one month.

Privacy Policy