Privacy policy

What we collect, why, and the choices you have. For a shorter overview see Security and privacy.

What we collect

• Account data: your email address and a salted hash of your password.
• Scan data: the URLs you scan, the scan time and the results, which include HTML snippets of the elements that failed.
• Usage-limit data: for scans run without an account, a salted hash of your IP address, used only to apply rate limits.
• Billing data: your plan, subscription status and Stripe's customer reference. Card details are entered on Stripe and are never stored by Allie.
• Cookies: one HTTP-only session cookie when you are logged in. We do not use advertising or analytics cookies.

How we use it

To run scans, show your history and reports, process payments, send account emails (verification, password reset), prevent abuse and respond to your messages. We do not sell personal data.

Who we share it with

Service providers that help us run Allie: Stripe (payments), Resend (email delivery) and our hosting provider. Anyone with a report's link can view that report.

Retention and deletion

Scan results are kept until you delete them from your history. Account data is kept while your account exists. To delete your account and data, email hello@a11ie.io. Our hosting provider may keep standard request logs for a limited time.

Your choices

You can ask to access, correct or delete your personal data by emailing hello@a11ie.io.

Changes

We may update this policy and will change the page when we do.