Privacy Policy

1. Who operates AccessPilot

AccessPilot is an independent software service operated by Hasan Iqram in Sweden. For the purposes of applicable data-protection law, Hasan Iqram acts as the controller for personal data processed directly through the AccessPilot service, unless another role is stated for a specific processing activity.

2. Information we process

We may process account information such as your name and email address; website URLs you submit; accessibility scan results; monitoring configuration and alerts; subscription and billing metadata; support requests; and technical or security logs needed to operate the service.

3. Payment information

Payments are handled by Stripe. AccessPilot does not store complete payment-card numbers or card security codes. Stripe may process payment, billing and fraud-prevention information under its own privacy and security terms.

4. Why we process data

We use data to create and secure accounts, run scans, save scan history, enforce plan limits, schedule monitoring, detect regressions, manage subscriptions, respond to support requests, prevent abuse and meet legal or accounting obligations. The legal basis may include performance of a contract, legitimate interests, consent or legal obligations depending on the context.

5. Service providers

AccessPilot currently relies on Vercel for hosting, Supabase for authentication and database services, Stripe for billing, and Resend for transactional email delivery. These providers may process limited data needed to deliver their services.

6. International transfers

Some service providers may process data outside Sweden or the European Economic Area. Where required, the relevant provider or AccessPilot should rely on recognized transfer safeguards.

7. Retention

Account, scan and monitoring data is retained while reasonably needed to provide the service, maintain security and meet contractual or legal obligations. Billing and accounting records may be retained longer where required by law.

8. Your rights

Where the GDPR applies, you may have rights to request access, correction, deletion, restriction, objection or portability of your personal data, subject to applicable exceptions. You may also have the right to lodge a complaint with a competent supervisory authority.

9. Security

AccessPilot uses HTTPS, authentication controls, Row Level Security, restricted backend credentials and third-party infrastructure controls. No online service can guarantee absolute security.

10. Contact

For privacy questions, use the AccessPilot support form. Please do not submit passwords, card numbers or other sensitive credentials.

11. Changes to this policy

This policy may be updated as AccessPilot evolves. Material changes should be reflected by changing the effective date and, where appropriate, providing additional notice.