This policy explains what personal information A11y Ledger collects, how we use it, and the choices you have. We keep this plain and specific — no filler.
Effective date:
When you register, we collect your name, email address, and password. If you are invited to a workspace, we receive your email address from the inviting party.
We store the data you enter into A11y Ledger, including client names, project details, audit findings, WCAG issue logs, and any recommendations or notes you create. This data belongs to you and your workspace.
Payment details are processed and stored by Stripe. We do not store full card numbers or sensitive payment credentials on our servers. We receive and retain billing metadata such as plan tier, subscription status, and transaction IDs.
We collect standard server logs and usage telemetry including IP addresses, browser type, pages visited, and feature interactions. This is used to operate, improve, and secure the service.
If you contact us by email or phone, we retain records of that correspondence to provide support and improve our service.
We use your information to authenticate you, deliver the features you use, process billing, and send transactional emails such as invitations, password resets, and receipts.
Aggregated, de-identified usage data helps us understand how the product is used and where to focus development effort.
We may send product update emails, security notices, and support responses. You can opt out of non-essential communications at any time.
We may process or disclose personal data where required by applicable law, regulation, or lawful government request.
We do not sell, rent, or trade your personal information or audit data to third parties for marketing purposes.
We share data with trusted sub-processors necessary to operate the service: Supabase (database and authentication), Stripe (billing), and Resend (transactional email). Each sub-processor is bound by data processing agreements and handles data only as directed by us.
Data you create within a workspace is visible to other members of that workspace according to their assigned role (admin or member). You are responsible for managing who has access to your workspace.
We may disclose information if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect the rights or safety of A11y Ledger, our users, or the public, or prevent fraud or abuse.
We retain your data for as long as your account is active or as needed to provide the service.
If you delete your account or workspace, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or preventing fraud.
Deleted data may persist in encrypted backups for up to 90 days before being permanently purged.
A11y Ledger is built on Supabase with Row Level Security (RLS) enforced at the database level. All data is encrypted in transit via TLS and at rest. Access to production systems is restricted to authorized personnel.
All workspace data is isolated using RLS policies. Users can only access data belonging to workspaces they are members of, enforced at the database query level — not just in application logic.
You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Notify us immediately at support@a11yledger.com if you suspect unauthorized access.
You can access and export your workspace data from within the platform at any time. You may also contact us to request a copy of personal data we hold about you.
You can update your account information directly in your profile settings. Contact us if you need assistance correcting other data.
You may delete your account at any time from your account settings. Workspace admins may delete workspaces and all associated data.
You may object to or request restriction of certain processing of your personal data by contacting us. We will respond within 30 days.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice within the application at least 14 days before they take effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.
For privacy-related inquiries, to exercise your rights, or to report a concern, contact us at support@a11yledger.com or by phone at +1 (541) 600-4904.