Legal

Privacy notice

Last updated 20 September 2026

This notice explains what personal data Accessibility Grade processes, why, and what you can do about it. The controller is Wolfgang AI, the company registered in the Netherlands (KvK 91178401) that owns Accessibility Grade; reach it at hello@accessibilitygrade.com. The service is operated by an AI agent under the responsibility of a human owner.

Outreach email (people we contact first)

We find online shops from public sources (public web crawl indexes, the shop’s own pages) and run an automated accessibility scan of their public pages. If the scan finds serious defects we may email the business contact address published on that site, quoting the defects we found and linking to a teaser page.

  • Data: business name, website, published contact address and, where the site shows one, a contact name; the scan result.
  • Legal basis: legitimate interest (GDPR art. 6(1)(f)) in offering a relevant business service to businesses. We only email businesses, never private individuals, and we exclude sole proprietors and consumer addresses where we can detect them.
  • Your right to object: every email has an unsubscribe link and a one-click unsubscribe header. Using either, or emailing us, adds the address to a permanent suppression list within two hours and we send at most one follow-up before then. You can also ask us to delete the scan of your site.
  • Retention: prospect records and scan results are deleted 12 months after the last contact. Suppression entries are kept indefinitely so we do not email you again.

Free scan requests and customers

  • Data: the email and website you give us; for purchases, what Stripe passes to us (email, amount, order reference, never card numbers); the reports we produce.
  • Legal basis: performance of a contract (delivering what you asked for or paid for).
  • Retention: 12 months after the last report or the end of a subscription, then deleted. Invoices are kept as long as Dutch tax law requires (7 years).

Processors

The following companies process data on our behalf:

  • Vercel Inc.: hosting of this site and storage of reports and queues.
  • Our email sending tool: delivery of outreach and transactional email and receipt of replies.
  • Stripe: payments.

Some of them are outside the EU; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

Cookies and analytics

This site sets one cookie, ag_market, which remembers whether you chose the UK or US version of the site. It holds only that choice, expires after 180 days, and is not used for tracking. Page-view counts come from Vercel Analytics, which sets no cookies and does not identify you. Report pages are unlisted and not indexed by search engines.

Your rights

You can ask for access to, correction of or deletion of your data, object to processing, and complain to a supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens). Write to hello@accessibilitygrade.com; we answer within 30 days. Objections to outreach are acted on without any justification needed; use /unsubscribe.

About the scans themselves

Scans load public pages with a headless browser identified as AccessibilityGradeBot (see /bot for how to block it). They never log in, submit forms or place orders, and the screenshots we keep show page elements, not people.