Privacy Policy

1. Introduction

SiteDNA ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our accessibility auditing service.

2. Information We Collect

Account Information: When you register, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe).

Usage Data: We automatically collect information about how you use the Service, including URLs scanned, scan frequency, features used, and interaction patterns.

Scan Data: When you scan a website, we temporarily process the HTML content and accessibility issues found. Scan results are stored to provide you with reports and historical data.

Device Information: We collect device type, browser type, IP address, and similar technical information to improve our Service and for security purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraud

4. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third parties who perform services on our behalf (payment processing, hosting, analytics)
• Team Members: With other members of your account/team as part of collaboration features
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your account information for as long as your account is active. Scan data is retained according to your subscription plan limits. You can request deletion of your data at any time by contacting us.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL)
• Secure password hashing
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a portable copy of your data
• Objection: Object to certain processing activities

To exercise these rights, contact us at [email protected].

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (session management, CSRF protection, authentication). These cannot be disabled.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our Service. These cookies collect information anonymously and help us improve our Service.

Google Analytics Cookies:

• _ga - Distinguishes unique users (expires: 2 years)
• _gid - Distinguishes unique users (expires: 24 hours)

Your Cookie Choices:

• When you first visit our website, we ask for your consent before setting analytics cookies (except in the United States where consent is not required).
• You can withdraw consent at any time by clearing your browser cookies and revisiting our site.
• You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
• You can control cookies through your browser settings.

For more information about how Google uses data, see Google's Privacy Policy.

9. Third-Party Services

Our Service integrates with third-party services including:

• Stripe: For payment processing (Stripe Privacy Policy)
• Google Analytics: For website analytics (Google Privacy Policy)
• Pusher: For real-time notifications (Pusher Privacy Policy)
• DigitalOcean: For file storage and hosting (DigitalOcean Privacy Policy)

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

11. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]