Privacy

What we collect

• Order details: your email, company, the site address, product information you enter, and payment status. Payment card details go directly to Stripe and never reach us.
• Test results: pages, screenshots, findings and the documents we produce for you.
• Test accounts you choose to provide, encrypted in your browser to our testing service’s key, deleted 30 days after delivery.
• Free-scan requests: email, site address, and a hashed IP address used only to limit abuse.
• Portal sessions: a cookie that keeps you signed in.
• Ad measurement: when we advertise on Google or Microsoft search, their conversion tags run on this site and set their own cookies so that an order or a free-scan request can be matched to the ad that led to it. At checkout, Google may receive a hashed form of your email for that matching. No other tracking runs here.

Why

To deliver what you ordered, to send you the documents and order emails, to keep the free scan from being abused, and to keep records required by law. We do not sell data, and the only third-party tags on this site are the ad-measurement tags described above.

Where it goes

Data is stored with Supabase (database and file storage, United States), payments with Stripe, email with our transactional email provider, and hosting on Vercel and Railway. Accessibility evidence is analysed with an AI model provider under terms that do not permit training on your data. Each provider processes data under its own privacy terms.

Retention

Order records and delivered documents are kept for seven years for accounting. Screenshots and raw findings are kept for 12 months. Test accounts are deleted 30 days after delivery. Free-scan data is deleted after 90 days if you do not order.

Your rights

Email info@conformancedesk.com to access, correct or delete your data. We answer within 30 days. Canadian law (PIPEDA) applies to us; EU and UK customers have the rights the GDPR gives them and we honour them.

Last updated 2026-09-04.