Privacy Policy

Tascera, LLC ("we", "us", or "our") operates SiteSense, a web accessibility scanning service available at sitesense.org and app.sitesense.org (the "Service").

This policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information

When you create an account, we collect your name and email address. If you invite team members, we collect their email addresses to send invitations.

Usage and Session Data

We automatically collect IP addresses and browser user agent strings when you log in or use the Service. This is used to maintain your session and for security purposes. We also record usage metrics such as the number of pages scanned per month and AI credits consumed.

Website and Scan Data

When you run a scan, we collect and store:

• The URLs you submit for scanning
• Screenshots of scanned pages
• HTML snapshots of scanned pages
• Accessibility violation data (axe-core results) for each scanned page

Screenshots and HTML snapshots are stored in Cloudflare R2 object storage. Scan results and violation data are stored in our database.

Billing Information

We use Stripe to process payments. We store your Stripe customer ID and subscription details (plan, status, billing period), but we never store your full credit card number or payment details directly — these are handled by Stripe.

AI-Generated Recommendations

When you request an AI fix recommendation for an accessibility violation, we send a portion of the page HTML and violation details to Anthropic's Claude API to generate the recommendation. We cache the result to avoid re-sending the same data unnecessarily.

2. How We Use Your Information

Name and email

Account authentication, transactional emails (scan completion, billing receipts), team invitations

IP address and user agent

Session management, security

URLs and scan results

Delivering the accessibility scanning service; displaying results and analytics to your team

Screenshots and HTML snapshots

Displaying scan results in the app; powering AI fix recommendations

Billing data

Managing subscriptions and processing payments via Stripe

Usage metrics

Enforcing plan limits; generating your analytics dashboard

We do not sell your data or use it for advertising.

3. Data Sharing and Third-Party Processors

We share data with the following third-party service providers solely to operate the Service:

Stripe

PurposePayment processing and subscription management

Data sharedBilling information, payment transactions

Anthropic

PurposeAI-powered accessibility fix recommendations

Data sharedPage HTML snippets, violation details

Cloudflare

PurposeHosting of the marketing site (Cloudflare Pages) and object storage for screenshots and HTML snapshots (Cloudflare R2)

Data sharedIP addresses and request metadata for site visitors; page screenshots and HTML snapshots

Mailjet

PurposeTransactional email delivery

Data sharedYour email address, email content

Hetzner Cloud

PurposeHosting of the application and database

Data sharedAll application data, including account information, scan results, and session data

Each provider processes data only as necessary to provide their service and under appropriate data processing agreements.

4. Data Retention

• Scan results, screenshots, and HTML snapshots are retained as long as your account is active. You can delete individual scans from the app at any time.
• Session data is retained until sessions expire or you log out.
• Billing records are retained as required by applicable law and our obligations to Stripe.
• When you delete your account, your personal data and all associated scan data are deleted, except where retention is required by law.

5. Security

We use industry-standard practices to protect your data:

• All data in transit is encrypted via HTTPS/TLS.
• Database access is restricted to our private network; it is not exposed to the public internet.
• Authentication is handled using secure session tokens with expiry.

No method of transmission or storage is 100% secure. Please use a strong, unique password and keep your credentials safe.

6. Your Rights

Depending on where you are located, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing of your data

To exercise any of these rights, contact us at privacy@sitesense.org. We will respond within 30 days.

7. Cookies and Tracking

We use a single session cookie to keep you logged in. We do not use analytics, advertising, or any other third-party tracking cookies. No tracking pixels or fingerprinting scripts are used on any part of the Service.

8. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top and, for material changes, notify you by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact

Tascera, LLC d/b/a SiteSense
7533 S Center View Ct Ste 210, West Jordan, UT 84084

Privacy inquiries: privacy@sitesense.org

For general support, use the in-app help or email support@sitesense.org.