Privacy Policy

What we collect

Running a scan doesn't require an account or an email address — just the web address you want checked. We also collect the information described below:

• To send you the full report: your email address, and optionally your name and organization.
• To set up ongoing monitoring: your email address and the domain being monitored. Payment is handled entirely by Stripe — we never see or store your card details, only a reference ID Stripe gives us for the subscription.
• Site usage: after you accept analytics cookies, Google Analytics collects usage information such as page views, approximate location and browser type. We use its reports to understand usage in aggregate. See Cookies & analytics below.

We collect technical information, including IP addresses, request times and requested pages, to operate the service, prevent abuse and troubleshoot problems.

How we use it

To generate and deliver your accessibility report, run scheduled re-scans for active subscriptions, and follow up about what a scan found — including, if you request a report, occasional emails about related iCityWork services (you can unsubscribe from these anytime). We don't sell your information.

Your scan summary is available to anyone who has its results link. The full report is delivered by email. Anyone you share the results link or report with can read it. We ask before using an identifiable scan as a public case study.

The site we scan

A scan only ever looks at what's already publicly accessible — the same pages, links, and documents any visitor to that site could reach. We never request a login, an admin account, or any credential for the site being scanned.

Who we share it with

• Hosting and backup providers — store service data and recovery copies so we can operate and restore the service.
• Stripe — payment processing for monitoring subscriptions.
• Resend — delivers the emails we send you (reports, follow-ups, receipts).
• Google Analytics — aggregated site-usage analytics.
• Brevo — if you request a report, your email and scan results (domain, score) so we can follow up and send occasional emails about related iCityWork services.

These providers support the service described here. We don't sell your information.

Cookies & analytics

We use Google Analytics to understand how the site is used in aggregate — which pages get visited, roughly how many people scan a site each week. It sets standard analytics cookies in your browser to help measure visits and returning browsers.

Analytics cookies only load after you accept them in the banner shown on your first visit. Choosing "Necessary only" keeps the site fully usable — you just won't be counted in our analytics.

Manage cookie preferences

How long we keep it

Scan, report and contact records do not currently have a fixed deletion period. We keep them to provide reports, monitoring history and follow-up. You can request deletion by emailing us below; some records may need to be retained to meet legal obligations, such as payment recordkeeping.

We normally keep operational logs for about two weeks and routine backups for up to four weeks.

Some backup copies may be kept longer for recovery or under our providers' retention policies. Deleted information may remain in these copies until they expire or are removed. Contact us below to discuss a deletion request.

Your choices

Every follow-up email we send about a free scan includes an unsubscribe link — one click stops all future follow-ups for that address. Subscriptions can be canceled anytime from the receipt/portal link Stripe emails you. To request a copy or deletion of your data outside of that, just email us.

Changes to this policy

If this changes in a meaningful way, we'll update the date at the top of this page. We won't use information collected under this policy for a materially different purpose without telling you.