Trust
Privacy and data retention
You trust us with your website addresses, documents and contact details. Here is exactly what we collect, why, and how long we keep it. Plain language, no surprises. Last reviewed July 10, 2026.
What we collect, and why
- Contact-form inquiries - your name, email, organization and message. Used only to reply to you and route your request to the right person. Never sold, never used for marketing lists.
- Order details - the website address you ask us to scan, your email, organization and package choice. Used to deliver the service you bought and to invoice you.
- Payment information - handled entirely by PayPal or Stripe on their own secure pages. Your card or account details never touch our servers; we receive only a confirmation that payment completed.
- Scan results - the accessibility findings for the pages you asked us to check. Used to prepare your report and verify fixes on re-test.
- Display preferences - text size, theme and similar settings are stored in your own browser, not on our servers.
- AI agent logs - our operational agents record the actions they take on each order (scoping, scanning, drafting, scheduling, invoicing) so every decision is auditable. Logs reference order IDs, not personal profiles.
What we don't do
- No advertising trackers, no analytics cookies that follow you across the web, no sale or rental of your data to anyone.
- We do not use your website's scan results or documents to train AI models.
- We do not send newsletters or promotional email - you hear from us only about your inquiry or order.
Data retention
- Inquiries: kept for up to 24 months so we can pick up the conversation where it left off, then deleted.
- Orders and invoices: kept for 7 years, as financial and tax rules require.
- Scan results and reports: kept for 12 months after delivery so we can support you on re-tests and remediation questions, then deleted on request or on schedule.
- Documents you send for remediation: working copies are deleted within 90 days of delivering the remediated versions.
- Agent logs: retained as operational evidence, with personal details minimised.
Want something removed sooner? Email info@visionaid.org and we will delete your data within 30 days wherever the law allows.
Where your data lives
Ability Bazaar runs on Google Cloud. Durable records are stored in Google Cloud Firestore with access limited to the small Vision-Aid operations team. Payments are processed by PayPal and Stripe under their own privacy policies.
Questions
Anything unclear, or a request about your data? Contact us or email info@visionaid.org - a human reads every message.