Privacy Policy

We collect information in two primary contexts: as a Service Provider (processing data for our customers) and as a Business (interacting with our own customers).

A. Information Provided by Customers

• Account Data: Names, email addresses, billing information, and company details required to create an account.
• Communication: Any information provided when contacting our support or sales teams.

B. Information Collected via the Inclusify app Script

When our Service is installed on a customer's website, we collect non-identifiable technical information from end-users to ensure the accessibility interface functions correctly:

• Technical Metadata: Browser type, operating system, device type, and screen resolution.
• Usage Data: Interactions with the accessibility widget (e.g., which features are enabled, such as "High Contrast" or "Screen Reader").
• IP Addresses: We may process IP addresses for security and localization purposes, though these are typically anonymized or used only for session-level duration.

We use the collected data for the following purposes:

• Service Delivery: To provide, maintain, and improve the accessibility features on our customers' websites.
• Personalization: To remember an end-user's accessibility preferences across different pages of a specific website.
• Analytics: To monitor the performance of our script and identify technical bugs.
• Compliance & Legal: To comply with legal obligations, such as the GDPR, CCPA, and web accessibility standards (WCAG).

As a company based in Europe (IDT Media SIA), we prioritize data protection and adhere to the General Data Protection Regulation (GDPR).

• No Selling of Data: We do not sell, rent, or trade personal data to third parties for marketing purposes.
• Data Minimization: We only collect the minimum amount of data necessary to provide a functional accessibility experience.
• Encryption: All data transmitted between our servers and our script is encrypted via SSL/TLS.

On our own website

When you first visit inclusifyapp.com we load nothing non-essential until you answer the cookie banner. If you choose Accept all, we load Google Analytics 4 (Google LLC), which sets the following cookies to measure how the site is used:

• _ga and _ga_*: Distinguish returning visitors so page views can be counted per person rather than per click. Kept by Google Analytics for up to two years.
• _gid: The same distinction over a single day. Expires after 24 hours.

If you choose Reject all, none of this loads and no analytics cookie is set. Your answer itself is stored in your browser (a localStorage entry named inclusify-consent, no cookie) and expires after 182 days, after which we ask again. You can change your mind at any time via the Cookie settings link in the footer of every page; switching to reject stops further tracking and removes the Google Analytics cookies.

Signing in to the customer panel, partner portal or admin uses session cookies from our authentication provider. These are strictly necessary to keep you signed in, are not used for tracking, and are only set once you sign in.

On websites that use the Inclusify widget

The widget sets no tracking cookies on our customers’ sites. It keeps a visitor’s accessibility preferences in that site’s own localStorage — the entries named inclusify-settings (the features they turned on, such as font size or contrast), inclusify-language (their chosen widget language) and inclusify-hidden-forever (their choice to hide the widget). These exist solely so the feature the visitor asked for still works on the next page, stay in their browser, and never follow them across unrelated websites.

To count each site’s monthly visitors, the widget sends a single beacon request to our servers. We hash the IP address and use the hash only to avoid counting the same visitor twice in a month; the beacon sets no cookie and creates no identifier that could track anyone across sites.

You can connect Inclusify to services you already use. These connections are optional, you start them, and you can end them at any time from the Integrations page in your Inclusify panel.

Slack

When you add Inclusify to a Slack workspace, we store the access token Slack issues us, encrypted, along with your workspace’s name and ID, the ID of the person who installed it, and the ID and name of each channel you choose to receive alerts in. We also keep a record of each message we attempted to send and whether Slack accepted it, so that “nothing arrived” has an answer.

We hold no permission to read your channels. Inclusify posts messages, receives the /inclusify command, and reads the questions you type directly to it in its own direct message, which is how the assistant answers them. Those questions and our replies are processed to produce an answer and are not used to train any model.

Removing Inclusify in Slack, or disconnecting it in your Inclusify panel, revokes the token and stops all messages. Disconnecting from the panel also deletes your channel choices immediately; the stored token is deleted at the same time.

Jira

When you connect Jira, we store the authorization Atlassian issues us, encrypted, along with the name of your Atlassian site and the project key each website files tickets to. We use it only to create the tickets you ask for. We do not read your existing issues.

Keeping and deleting this data

Connection data is kept for as long as the connection exists, and is deleted when you disconnect the service or close your account. Delivery records are kept with the rest of your account’s activity history and removed on the same schedule. To ask what we hold for a connected service, or to have it deleted, write to support@inclusifyapp.com and we will respond within 30 days.

We sometimes contact businesses that are not yet our customers to share the results of an automated accessibility check of their website’s homepage. This section explains what data that involves.

What we use

• Domain: The website's domain name.
• Contact address: One business contact address for that website: an address the business publishes on its own website (we prefer general mailboxes such as info@ or contact@), or one listed as the contact for that website in a public directory. We never use personal webmail addresses, and we never buy contact lists.
• Check results: The results of the automated check of the public homepage.
• Email events: Whether the email was delivered, opened or bounced, whether its link was followed, and whether it was unsubscribed from or reported as spam. Opens are recorded by a small image in the email that loads when the email is displayed.

Why, and on what basis

We send these emails because it is in our legitimate interest to tell businesses about accessibility barriers on their own website and about our service (GDPR Article 6(1)(f)). We have weighed that interest against your rights and limited what we do: each website receives one email only, the email says where we found your address, and you can object at any time.

Your choices

Every email has a one-click unsubscribe link. You can also reply to it or write to support@inclusifyapp.com. Once you object, or if the email bounces or is reported as spam, we add the address and its domain to a permanent do-not-contact list and never email them again.

How long we keep it

The list of affected page elements from the check is deleted after 30 days. The score and a summary of up to ten issues stay on the public result page. Domains we checked but never emailed, and their check results, are deleted after 12 months. We keep the record of which domain and address we emailed, and the do-not-contact list, for as long as we send these emails, because that is how we make sure no one is contacted twice or after objecting.

Our email provider, Resend, sends these emails for us from its EU region (Ireland).

Depending on your location, you may have the following rights regarding your data:

• Access: The right to request copies of your personal data.
• Rectification: The right to request that we correct inaccurate information.
• Erasure: The right to request that we delete your data under certain conditions.
• Data Portability: The right to request that we transfer your data to another organization.

If you have any questions about this Privacy Policy or the practices of IDT Media SIA, please contact us at: