Privacy Policy

This policy explains what RiskLight collects when you use our free accessibility scanner, why we collect it, and who we share it with. We aim to collect as little as possible and to be plain about it.

What we collect

• The website address you submit, and the content of the pages we scan (their HTML) — this is needed to run the scan.
• Your email address, only if you choose to enter it to unlock or receive your full report.
• Your IP address, used solely to prevent abuse and rate-limit the tool — never for marketing.
• Anonymous usage analytics (for example, which pages you view and whether a scan started or completed). We do not attach your email or other personal details to this analytics data.

How we use it

• To run your scan and generate your plain-English report.
• To email you your report, if you provided an email address.
• To contact you about our paid accessibility audit and remediation service.
• To keep the tool available and prevent misuse.

Who we share it with

We use a small number of trusted service providers (“processors”) to run the tool. We do not sell your data.

• OpenAI— receives the technical findings from your scan, including short snippets of your page’s code, to translate them into a readable report. Data sent through the OpenAI API is not used to train their models.
• Supabase — hosts the database that stores your scan results and, if provided, your email.
• Resend — delivers your report email.
• Upstash — runs our background job queue and rate limiting.
• PostHog (hosted in the EU) — provides anonymous product analytics. We do not send your email address to PostHog.

How long we keep it

We keep scan records and any email you provide until you ask us to delete them, or until they are no longer needed for the purposes above.

Your rights

If you are in the EU/UK, you have the right to access, correct, or delete your personal data, and to object to its use. To exercise any of these, email us at sevastian.secasiu@gmail.com and we will help.

Cookies

Our analytics provider may set cookies to measure usage. These are not used to identify you personally.

Contact

Questions about this policy? Email sevastian.secasiu@gmail.com.

This is a general privacy notice for a small tool and is not legal advice. If you are preparing for a wider launch, consider having it reviewed by a professional.