Legal
Privacy Policy
Last updated: July 2026
1. Who we are
ComplyShield ("we," "us") operates complyshield.org and provides website accessibility scanning services. This policy explains what personal data we collect, why, and what rights you have over it.
2. What we collect
When you request a scan, we collect the email address and website URL you submit. If you contact us directly, we collect whatever information you include in that message. Our hosting and infrastructure providers may also log standard technical data (like IP address and browser type) as part of normal operation.
3. How we use it
We use your email to send your scan report and, where you've agreed to it, updates about ComplyShield. We use the website URL solely to run the scan you requested. We do not use your data to train AI models or sell it to third parties.
4. Legal basis for processing (EU/UK visitors)
Where the GDPR applies, we process your data based on your consent (when you submit the scan form) and our legitimate interest in operating and improving the Service. You can withdraw consent at any time by contacting us.
5. Who we share it with
We share data with the infrastructure providers that run the Service — currently Supabase (database) and Vercel (hosting) — solely as needed to operate it. We share your information with a Remediation Partner only if you explicitly ask to be connected with one. We do not sell your personal data.
6. International data transfers
Our infrastructure providers may process data outside your home country, including in the United States. Where required, we rely on standard contractual clauses or equivalent safeguards for such transfers.
7. Data retention
We keep your scan submission and email on file until you ask us to delete it, or until it's no longer needed for the purpose it was collected for.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, email hello@complyshield.org — we'll respond within a reasonable time, and no later than any deadline required by applicable law.
9. Cookies
The public site uses minimal, functional cookies required for the admin login to work. We don't currently use advertising or cross-site tracking cookies.
10. Children's privacy
The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16.
11. Changes to this policy
We may update this policy from time to time. We'll update the "last updated" date above when we do; material changes will be reflected here.
12. Contact
Questions about this policy, or to exercise your data rights: hello@complyshield.org
This document is a general template and hasn't been reviewed by a lawyer for your specific situation or jurisdiction. It's a reasonable starting point, not a substitute for legal advice.