Privacy Policy

What We Collect

When you use ADA Compliance Scanner, we collect the following information:

• URL scanned — the web address you submit for analysis.
• IP address — used solely for rate limiting to prevent abuse. Not tied to any personal profile.
• Payment information — if you purchase a report or subscribe to monthly monitoring, payment is processed entirely by Stripe. We never see or store your card number, CVV, or billing details.
• Email address — collected only if you subscribe to monthly monitoring. Used to deliver your monthly diff report and service notifications. Not used for marketing.

One-Time Reports vs. Monthly Monitoring

Free scans and one-time paid reports do not require an account or email address. We do not collect personal information for these transactions beyond what Stripe requires to process payment.

Monthly monitoring is a subscription service. To deliver diff reports and re-scan notifications, we store your email address and the URL(s) enrolled in monitoring. This data is retained for the duration of your active subscription and deleted within 30 days of cancellation.

Scan Results & Data Retention

Scan results from free and one-time paid scans are stored in our database to generate your compliance report and are automatically deleted after 90 days.

For monthly monitoring subscribers, scan results are retained for the life of your subscription so we can generate accurate month-over-month diff reports. Retained data includes scan scores, issue counts, and violation details for each monitored URL. All monitoring data is deleted within 30 days of subscription cancellation.

We do not sell, share, or use scan data for any purpose other than delivering your report or monitoring service.

Cookies

We do not use marketing cookies or social media pixels. Essential cookies are used for the service to function (e.g., Stripe checkout session handling). We use conversion cookies from Google Ads and Microsoft Advertising on the payment confirmation page only — these track whether a purchase followed an ad click and are not used for behavioral targeting.

Third-Party Services

We use the following third-party services:

• Stripe — processes all payments. Stripe is PCI DSS Level 1 certified, the highest level of payment security certification. Their privacy policy is available at stripe.com/privacy.
• Anthropic — powers the AI analysis in paid reports. When you purchase a report, scan results (URLs and HTML snippets from the scanned page) are sent to Anthropic's API to generate remediation guidance. No personal information is included. Their privacy policy is available at anthropic.com/privacy.

Analytics & Tracking

We use Vercel Analytics for anonymous page view metrics (no cookies, no personal data collected). We use Google Ads and Microsoft Advertising (Bing) conversion tags to measure the effectiveness of our advertising — these fire only on the payment confirmation page. No Facebook pixels or similar third-party tracking services are used.

Changes to This Policy

If we make material changes to this privacy policy, the updated version will be posted on this page with a new “Last updated” date.

Contact

Questions about this policy? Reach us at support@ada-scanner.com.