Privacy Policy

1. Who we are

1.1 Primary entity. Unless 1.2 applies, Accessify Labs Inc., a New Jersey corporation, 169 Union Blvd., Suite 2A, Totowa, NJ 07512, USA, is responsible for your information.

1.2 Customers in India. Accessify Labs Private Limited (CIN U62013DC2026PTC469090), registered office Kh No. 385, Near 100 Futta Road, Ghitorni, New Delhi 110030, India, is responsible for your information if:

• you are located in India,
• your organisation is incorporated in India, or
• you pay in Indian Rupees.

1.3 Defined terms and responsibility. In this policy, "AccessifyLabs", "we", "us" and "our" mean whichever AccessifyLabs company is responsible for your information under Sections 1.1 and 1.2. Where we process information on behalf of your organisation, Section 9 applies.

2. Information we collect

This depends on the Services you use.

• Contact and account: name, business email, phone, job title, organisation, account identifiers and login details.
• Organisation: organisation name, memberships, roles, settings and service configuration.
• Content and accessibility: website addresses and titles, page content or code, findings, screenshots, reports, comments and other material you process, save or submit. This can include personal or confidential information from pages you test.
• Academy: enrolments, course progress, assessment answers and results, certificates issued, and posts or projects you share in community spaces.
• Payment: billing name, address, tax details and transaction records. Our payment provider handles card and bank details. We do not store them.
• Technical and usage: browser and device type, a random extension installation ID, feature usage, diagnostics and approximate country.
• Communications: support requests, feedback, survey responses and anything else you send us.

Some features keep information only in your browser or device. Each feature's notice says whether information stays local, comes to us, or goes to another provider.

3. How we use information

What we never do. We do not sell personal information or use Your Content (as defined in our Terms) to train AI models. We do not use extension data for personalised advertising or credit and lending decisions, or transfer it to advertising platforms or data brokers.

You can unsubscribe from marketing at any time using the link in our emails or by contacting us.

4. Consent and withdrawal

Accepting our Terms is not consent to data processing. Where we rely on consent, including under the DPDP Act, we ask for it separately and explain what we need and why. You can withdraw consent at any time as easily as you gave it: in your account settings, through the in-product control, or by emailing privacy@accessifylabs.com. Withdrawal does not affect processing that happened before it.

5. Browser extension and AI features

• Permissions: the AccessifyOS extension uses browser permissions to inspect pages, record findings, save settings and capture optional evidence in your browser. It may access non-public pages you are authorised to test. Access does not mean that page's content is sent to us.
• Separate data flows: local testing, local downloads, submissions to AccessifyOS and usage reporting are separate. The extension's notices explain which applies and what controls you have.
• AI providers: when you confirm an AI request, the selected code, page excerpts, images and issue context go to the AI providers set up in the product. Under our disclosed fallback, the same request may go to more than one provider. They handle it under their own terms and privacy policies. Share only material you are authorised to disclose.
• Chrome Web Store: our use of extension data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use it only for the extension's disclosed accessibility purposes. Our people see it only with your specific consent, for security, to comply with law, or in aggregated and anonymised form for internal operations.

6. When we share information

We share information only with:

• service providers that host, support, secure or bill for the Services, under contracts that limit their use of it
• our payment provider, to process payments
• your organisation and its authorised users, where an organisation account or agreement allows it
• AI providers and other integrations you choose to use
• employers or others who ask us to verify a certificate you shared, only to confirm it is genuine
• the AccessifyLabs group, where needed to provide the Services
• others where the law requires it, or to protect rights, safety and security
• a buyer in a merger, acquisition or sale of the relevant business, under confidentiality and with any notice the law requires (extension data stays under Limited Use rules)

7. Cookies

We use cookies and local storage for sign-in, preferences, security and running the Services. Where the law requires, we use analytics and marketing tools only with your consent. You can change your choice at any time in our cookie settings. The extension's local browser storage is separate from website cookies.

8. Retention and security

How long we keep information. Only as long as we need it for the purposes above.

Information stored only in your browser stays until you or the product clears it. Copies you download or share are outside our control.

Security. Accessify Labs Private Limited is certified to ISO/IEC 27001:2022. We use technical and organisational safeguards appropriate to the information involved, including access controls and encryption in transit. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as the law requires.

9. Organisation accounts

If your organisation uses the Services, it usually decides why and how its information is processed, and we follow its instructions under our agreement. For that information, your organisation is the controller (or Data Fiduciary) and we are its processor, so we may refer your requests to it. We stay responsible for information we use to run accounts, secure the Services and manage business relationships.

10. International transfers

We and our providers may process information outside your country, including in India and the US. Where the law requires, we protect transfers with appropriate safeguards, such as standard contractual clauses (regulator-approved contract terms) for information from the European Economic Area, United Kingdom or Switzerland. We follow any restrictions the Government of India notifies under the DPDP Act.

11. Your rights

Depending on where you live, you may have the right to:

• access, correct, update or delete your information
• get a copy in a portable format
• restrict or object to certain processing, including direct marketing
• withdraw consent at any time
• nominate someone to act for you if you die or become incapable (India)
• have grievances addressed by us, and complain to a regulator: the Data Protection Board of India (after using our grievance process) or a supervisory authority in the EU or UK

To make a request, email privacy@accessifylabs.com. We may need to verify your identity or authority. We respond within the time the law requires, and always within 30 days.

12. Children and persons with disabilities

The Services are for adults. We do not knowingly process information of anyone under 18, except through Academy enrolment by a school or organisation that has an agreement with us and has obtained verifiable parental consent where the law requires. We do not track, behaviourally monitor or target advertising at children. If a child's information reached us any other way, contact us and we will delete it.

If a person with a disability cannot make a legally binding decision about their information, we rely on verifiable consent from their lawful guardian, as the DPDP Act requires. If you need this policy or any privacy process in an accessible format, contact us and we will provide it.

13. Updates to this policy

We may update this policy as our Services or legal obligations change, and will update the effective date. For material changes, we give at least 30 days' notice by email or in-product notice. If a change needs your consent, we ask for it before applying the change to you.

14. Contact us