A11YSOLUTIONS PRIVACY POLICY

1. Data Controller

• Controller: A11ySolutions
• Address: Miami, FL, USA
• Email: a11ycontact@a11ysolutions.com
• Phone: +1 (407) 535-1932

For any inquiry or to exercise your rights, email us at a11ycontact@a11ysolutions.com or call +1 (407) 535-1932. We respond within 24 hours.

2. Data we process

2.1 Account data

To create and manage your account, we process:

• Email address, used as your user identifier and for account-related communications.
• Internal user identifier, generated by the authentication provider (opaque, non-reversible string).
• Basic profile data (name and public attributes) when provided by the identity provider.
• Session tokens, encrypted and stored only in the IDE's secret storage. They are automatically renewed and deleted on sign-out.

Passwords are never stored or transmitted in clear text through our systems: the authentication provider manages the full authentication lifecycle.

2.2 Conversation content and source code

To provide the Tool's core functionality (accessibility issue analysis and remediation), we process:

• Prompts and messages you enter in the chat.
• Source code snippets from your project needed for analysis and remediation.
• Tool results (e.g. accessibility diagnostics) generated during tasks.

This content is stored locally on your machine and remains under your control. It is sent to the cloud solely for AI model inference.

2.3 Anonymous telemetry

The Tool collects strictly anonymous telemetry to improve the product: a randomly generated identifier (unrelated to your email or account), feature usage metrics, Tool and IDE versions, platform, and timestamps.

Telemetry is designed to never send prompts, source code, file paths, keys, or personal identifiers. It is automatically disabled when IDE telemetry is disabled.

2.4 Technical connection data

IP addresses and operation logs may be processed ephemerally for security, abuse prevention, and diagnostics, without being permanently associated with your identity.

3. Purposes and legal basis

4. Data recipients

Your data is not shared with third parties for commercial purposes. It is communicated to the following processors, under contract and with adequate safeguards, solely to provide the Services:

Internally, A11ySolutions may review aggregated and anonymous usage metrics for product tracking. These metrics contain no identifiable personal data.

5. Data retention

• Account data: while the account is active and, after closure, for the legally required periods.
• Local conversation content and code: remains on your machine under your control. You can delete it at any time.
• Anonymous telemetry: as long as needed for analytical purposes, with no possibility of re-identification.
• Ephemeral logs: deleted on a rolling basis.

6. Your rights

You may exercise at any time, by writing to a11ycontact@a11ysolutions.com, the following rights:

• Access: know what data of yours we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion where applicable.
• Objection: object to processing based on legitimate interests.
• Restriction of processing: request suspension in certain circumstances.
• Data portability: receive your data in a structured format.
• Withdrawal of consent: withdraw consent for telemetry, without affecting the lawfulness of prior processing.

The Tool does not make automated decisions with legal effects on you: the AI only generates remediation suggestions that you review and approve.

We will respond to your request within the maximum period set by the applicable legal framework (usually 30 days). If you are not satisfied, you may file a complaint with the competent data protection authority in your country or region.

7. Security measures

A11ySolutions applies technical and organizational measures appropriate to the risk, including:

• Encryption in transit (TLS/HTTPS) for all communications.
• Encryption at rest for session tokens.
• Provider keys stored only in cloud services, never on your machine.
• Data minimization: telemetry deliberately excludes prompts, code, paths, and secrets.
• Rate limiting and strict security headers on services.

If you detect a security incident, notify us immediately at a11ycontact@a11ysolutions.com.

8. How to disable telemetry

1. Open VS Code / Windsurf settings.
2. Disable IDE telemetry ("telemetry.telemetryLevel": "off").

The Tool will stop sending telemetry automatically. No further action is required.

9. Minors

The Services are not directed at minors and we do not knowingly collect their data. If you are aware that a minor has provided us with data, write to us so we can delete it.

10. Cookies

The Tool does not use tracking cookies. The authentication page and sign-in flows may use strictly necessary cookies for session functionality. No advertising or profiling cookies are used.

11. Changes to this Policy

We may update this Policy to reflect changes in the Services or the legal framework. We will publish the updated version at https://www.a11ysolutions.com/resolver/privacy and, when changes are material, we will notify you from the Tool or by email. The "last updated" date indicates the current version.

12. Contact

• Email: a11ycontact@a11ysolutions.com
• Phone: +1 (407) 535-1932
• Website: https://www.a11ysolutions.com
• Location: Miami, FL, USA — serving clients globally