Privacy Policy
Last Updated: JUNE 18, 2026
This Privacy Policy describes how Pally ("Pally," "we," "us," or "our") collects, uses, and shares information when you use our website accessibility audit service (the "Service").
1. Information We Collect
Account Information
When you create an account, we collect your email address and authentication credentials, processed securely through our authentication provider.
Scan Data
When you submit a URL to be scanned, we collect and store:
- The URL you submit
- Automated accessibility scan results, including descriptions of accessibility issues, relevant WCAG (Web Content Accessibility Guidelines) references, and small HTML snippets of the specific elements flagged as non-compliant
- Risk level and violation counts generated by our scanning engine
We do not store full copies of the pages you scan, screenshots, or unrelated page content beyond what is necessary to identify and describe the specific accessibility issues found.
Payment Information
Payments are processed by Stripe. We do not store your full payment card details. We receive and store a Stripe customer ID and your subscription or purchase status.
Usage Data
We may collect standard server logs and analytics data, including pages visited, browser type, and referring URLs, to operate and improve the Service.
2. How We Use Your Information
We use the information we collect to:
- Provide and improve the Service
- Generate accessibility reports and AI-assisted summaries based on your scan data
- Process payments and manage your account
- Send transactional emails (account confirmation, receipts, report delivery)
- Comply with legal obligations
We do not sell your personal information to third parties.
3. AI-Assisted Processing
Our Service uses AI to generate plain-English summaries and prioritized fix lists based on the technical scan output. This processing is performed via Anthropic's API. Scan data submitted to the AI summarization feature is subject to Anthropic's data usage policies. We do not use your scan data to train AI models.
4. Data Sharing
We share data only with the following categories of service providers, and only as necessary to operate the Service:
- Authentication: Supabase
- Payment processing: Stripe
- AI summarization: Anthropic
- Hosting and infrastructure: Vercel, Supabase
We do not share your data with advertisers or data brokers.
5. Data Retention
We retain your account information and scan history for as long as your account is active. You may request deletion of your account and associated data by contacting us at policy@mypally.app.
6. Your Rights
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at policy@mypally.app.
7. Cookies
We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.
8. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date.
10. Contact
If you have questions about this Privacy Policy, contact us at:
Pally Compliance, LLC