This policy explains what EduA11y collects when you use edua11y.org, how we use it, who we share it with, and the choices you have. We collect as little as we can and never sell your data.
What we collect
- Account information. Your email address, used to sign you in with a one-time code and to notify you when files are ready.
- Documents. The PDFs you upload and the remediated versions we produce, together with file names, sizes, and processing logs.
- Payment information. Payments are handled by a third-party payment processor. We receive a record of the transaction (amount, date, and last four digits of the card) but never your full card number.
- Technical data. IP address, browser type, and basic request logs collected by our hosting provider to run and secure the site. We do not use advertising trackers.
How we use it
- To sign you in and keep your account secure.
- To remediate your documents and deliver the results to you.
- To charge you, issue refunds, and keep tax and accounting records.
- To email you about your files, your account, and changes to our terms or prices. We do not send marketing email without your consent.
- To diagnose failures and improve the remediation pipeline.
We do not use your documents to train AI models.
Who we share it with
We share data only with service providers that help us run the Service, and only as needed for that purpose:
- AI model providers. We use models from Anthropic, OpenAI, and Google to read page content and generate tags and alt text. Document content is sent to them during processing only, under terms that prohibit them from training on it.
- Payment processing. A PCI-compliant payment processor handles checkout and holds your card details.
- Hosting and infrastructure. Providers that host the website, store our database and your files, run the isolated sandboxes where documents are processed, and deliver our email notifications.
- Authentication. A provider that sends sign-in codes and manages sessions.
We may also disclose information when required by law or to protect the rights and safety of our users or the public. We do not sell personal information or share it for advertising.
Retention
Your uploaded and remediated files stay in your account until you delete them from your dashboard, which removes them from our storage. Processing logs are kept for up to 90 days. Payment records are kept for as long as tax law requires. We may delete files and accounts inactive for more than 12 months after emailing you a notice.
Security
All traffic to edua11y.org is encrypted with HTTPS. Files are stored encrypted at rest and are only accessible to your account and to our staff when needed to support you. Payment data is handled entirely by our payment processor, which is certified to PCI DSS Level 1.
Your choices and rights
- Delete any file at any time from your dashboard.
- Request a copy of your data, or deletion of your account, by emailing support@edua11y.org. We respond within 30 days.
- If you are in the EU, UK, or California, you also have rights to access, correct, port, and restrict processing of your personal data, and to complain to your local supervisory authority.
Students and education records
EduA11yis intended for instructors and institutions, not for direct use by children, and we do not knowingly collect personal data from anyone under 13. When an institution uploads documents that contain student education records, we act as a service provider under the institution's direction and use those records only to provide the Service.
Cookies
We use one strictly necessary session cookie to keep you signed in. We do not use analytics or advertising cookies, so there is no cookie banner to click through.
Changes
We will post any changes here with a new effective date and email account holders about material changes. See also our Terms of Service and Refund Policy.
Contact
Privacy questions or requests: email support@edua11y.org.