Skip to main content
← Back to Home

Privacy Policy

Last updated: October 27, 2025

1. Introduction

At Aelira, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your personal data and your right to privacy. If you have any questions or concerns about our policy or our practices, please contact us at privacy@aelira.ai.

2. Information We Collect

2.1 Information You Provide

  • Email Address: When you join our waitlist or create an account
  • Account Information: Username, password, and profile information
  • Payment Information: Processed securely through third-party payment processors (we do not store credit card details)
  • Communication Data: Your interactions with our support team

2.2 Website Scan Data

When you scan a website with Aelira, we collect and process the following data:

  • Website URLs: The web addresses you submit for ADA compliance scanning
  • Scan Results: Accessibility issues detected, WCAG 2.2 AA compliance scores, page elements analyzed
  • HTML/CSS Data: Temporarily processed during scans to detect accessibility issues (not stored permanently)
  • Scan History: Date/time of scans, compliance scores over time, issue tracking
  • User-controlled: You can view, export, or delete your scan results at any time
  • Encrypted in transit: All scan data is transmitted over HTTPS/TLS

2.3 Automatically Collected Information

  • Usage Data: How you interact with Aelira (features used, frequency, session duration)
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, timestamps, error logs for debugging
  • Cookies: Small data files to maintain sessions and preferences

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Aelira service
  • Improve and personalize your experience
  • Process transactions and manage subscriptions
  • Send you updates, newsletters, and marketing communications (with your consent)
  • Respond to support requests and customer inquiries
  • Monitor and analyze usage patterns to improve our service
  • Detect, prevent, and address technical issues or security vulnerabilities
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We may share data with trusted third-party service providers who assist us in operating our service:

  • Cloud infrastructure providers (database hosting, storage)
  • Payment processors (Stripe, PayPal)
  • Email service providers (for transactional and marketing emails)
  • Analytics providers (aggregated, anonymized data only)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement enterprise-grade security measures to protect your data:

  • Secure transmission: HTTPS/TLS encryption for all data in transit
  • Encrypted storage: All scan results and user data stored with encryption
  • Access controls: Strict internal access policies with audit logging
  • Per-user isolation: Your scan data is stored separately and never mixed with other users
  • Regular security monitoring: Continuous monitoring and vulnerability assessments
  • Secure infrastructure: Hosted on enterprise-grade cloud providers with SOC 2 certification
  • Data minimization: We only store scan results, not full website HTML/CSS

We follow industry-standard security practices for SaaS applications. While we implement industry-leading security measures, no method of transmission over the internet is 100% secure.

6. Your Privacy Rights

Depending on your location, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Data Portability: Export your data in a machine-readable format
  • Objection: Object to processing of your personal data for certain purposes
  • Withdraw Consent: Opt out of marketing communications at any time

To exercise these rights, contact us at privacy@aelira.ai. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide our service. Specific retention periods:

  • Scan results: Retained for the duration of your subscription or until you delete them
  • Account information: Retained for 30 days after account deletion (for recovery purposes)
  • Transaction records: Retained for 7 years (legal/tax requirements)
  • Log data: Retained for 90 days

8. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

9. Children's Privacy

Aelira is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it immediately.

10. Third-Party Services

Aelira uses the following third-party services to provide our ADA compliance scanning:

  • Axe-core: Open-source accessibility testing engine (no data shared with third parties)
  • Payment processors: Stripe for secure payment processing (subject to their privacy policy)
  • Cloud hosting: Enterprise-grade infrastructure providers with SOC 2 certification
  • Email services: For transactional emails and notifications

We do not sell or share your website URLs or scan results with any third parties for marketing or advertising purposes.

11. Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Essential cookies: Required for authentication and security
  • Functional cookies: Remember your preferences and settings
  • Analytics cookies: Understand how you use our service (anonymized)

You can control cookie settings through your browser. Disabling cookies may affect functionality.

12. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the service. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

  • Email: privacy@aelira.ai
  • Website: https://aelira.ai

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to be informed about data processing
  • Right to restrict processing
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is your consent, contractual necessity, and legitimate interests.

15. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your rights