Skip to main content
Status indicator: Under construction — coming soon

Privacy Policy

Last updated: April 14, 2026

What we collect

  • Account info — email, name (via Clerk authentication).
  • License data — your license key, tier, and credit balance.
  • Usage logs — the URL you audited (or framework name, for CLI scans) and the number of pages counted. Used solely for credit metering and your dashboard history.
  • CLI telemetry — when you run wcag-audit scan, we receive: your license key, route count (not the routes themselves), framework name (e.g. “nextjs-app”), issues-found count (aggregate, not the findings), CLI version, and a timestamp. Your source code, audit findings, and the contents of WCAG_FIXES.prompt.md never leave your machine.
  • Payment info — handled entirely by Stripe. We never see or store your card number.

What runs locally vs what we see

Chrome extension: runs all accessibility checkers inside your browser. Page content is never sent to our servers unless you explicitly enable AI vision review (page screenshots and a subset of the DOM are forwarded through wcagaudit.io to Anthropic Claude; gated to paid plans) or the cloud server connection.

CLI (wcag-audit): all Playwright audits run locally on your machine against your own dev server or a URL you specify. Findings are written to WCAG_FIXES.prompt.md, wcag-report.xlsx, and other local files only. The CLI sends aggregate usage metrics to wcagaudit.io for credit metering — see “CLI telemetry” above for the exact fields.

GitHub Action: same as CLI — the license key is passed as a repo secret, audits run in your GitHub Actions runner, and WCAG_FIXES.md is uploaded as a workflow artifact scoped to your repo. No audit findings are transmitted to wcagaudit.io.

How we use your data

  • To provide and improve the service.
  • To meter credits and display your usage history.
  • To send transactional emails (license key, billing receipts).

Third-party services

  • Clerk
  • Stripe
  • Supabase
  • Resend
  • Vercel

Data retention

We retain usage logs for 12 months. You can request deletion of your account and all associated data at any time by emailing support@wcagaudit.io.

Contact

Questions? Email support@wcagaudit.io.