Privacy Policy
Last updated: June 13, 2026
This Privacy Policy explains how Kat ADA LLC (“Kat ADA,” “we,” “us,” “our”) collects, uses, shares, and protects information when you use our accessibility monitoring and remediation Service. It is part of, and incorporated into, our Terms of Service. We are the controller of personal information about our account holders. For content on a customer’s website that we process to provide the Service, the customer is the controller and we act as their processor/service provider.
1. Information we collect
- Account information: your email address (we use passwordless magic-link sign-in) and the business/site name you provide.
- Site information: the URLs you connect, your public page content that we crawl, and the accessibility issues, fixes, change records, and reports we generate.
- Billing information: handled by our payment processor, Stripe. We receive your subscription status and a customer identifier. We do not collect or store your full payment card number.
- Communications: messages you send us (for example, support or application emails) and your consent and acceptance records (such as when you agree to our Terms).
- Usage, log, and device data: basic logs (such as IP address, timestamps, and request data) needed to operate, secure, and debug the Service.
2. How we use information
We use information to: provide and operate the Service (scanning your site, generating and applying fixes, producing reports); process your subscription and prevent fraud; send transactional email (such as your reports, account, and billing messages); provide support; secure, debug, and improve the Service; and comply with law and enforce our Terms. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
3. AI processing
To generate suggested fixes (for example, alt-text descriptions and ARIA labels), we send relevant snippets of your page content to a third-party AI provider via its commercial API. That data is processed only to return a suggestion and is handled under the provider’s commercial API terms, which do not use API inputs or outputs to train its models. Our team reviews suggestions before they are applied to your live site.
4. How we share information (service providers)
We share information with vendors that help us run the Service, in the following categories: application hosting, database and authentication, payment processing, AI processing for fix suggestions, and transactional email delivery. Each processes data only to provide its service to us, under terms that protect your information, and none is permitted to use it for its own purposes. A current list of the specific providers we use is available on request at the contact below.
We may also disclose information to comply with law or valid legal process, to enforce our Terms, or to protect the rights, property, or safety of Kat ADA, our customers, or others, and in connection with a merger, acquisition, or sale of assets (subject to this Policy).
5. Cookies
We use a small number of strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising or cross-site tracking cookies. Because we do not track you across sites for advertising, we treat browser “Do Not Track” and Global Privacy Control signals consistent with not selling or sharing personal information.
6. Data retention
We retain account, scan, change, and report data while your account is active and for as long as needed to provide the Service, keep your good-faith documentation record, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or de-identify it. You may request deletion of your account and associated personal information as described below; some records may be retained where required by law or for legitimate business purposes (such as billing and fraud prevention).
7. Security
We use reasonable technical and organizational measures designed to protect your information, including encrypted transport and access controls. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
8. Your privacy rights
Depending on where you live, you may have rights to access/know, correct, delete, or port your personal information, and to opt out of certain processing. We honor these rights as required by applicable law and will not discriminate against you for exercising them. To make a request, email hi@katadaapp.com; we will verify your request (typically by confirming control of your account email) and respond within the time required by law. You may use an authorized agent where the law allows.
California (CCPA/CPRA)
If you are a California resident, you have the right to know the categories and specific pieces of personal information we collect, the right to delete and to correct, and the right to opt out of the “sale” or “sharing” of personal information. The categories of personal information we collect are identifiers (such as email and IP address), commercial information (such as subscription status), internet/usage activity (such as logs), and the website content you ask us to process. We collect it for the business purposes described in Section 2, from you and from your use of the Service. We have not sold or shared personal information for cross-context behavioral advertising, and we do not knowingly do so. California residents may also request information about disclosures for direct-marketing purposes (we do not make such disclosures).
9. International users and data transfers
We operate in the United States, and our providers may process information in the United States. If you access the Service from outside the United States, you understand your information will be processed in the United States, where data-protection laws may differ from those in your country.
10. Age
The Service is intended for businesses and for users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.
11. Browser extension
The Squarespace Accessibility Checker by Kat ADA Chrome extension runs entirely inside your browser. It does not collect, transmit, or store any personal data. Scan results are displayed only to you in the extension popup and are never sent to our servers or any third party. Nothing you analyze with the extension leaves your device.
12. Changes
We may update this Policy; material changes will be posted here with a new “Last updated” date.
13. Contact
Privacy questions or requests: hi@katadaapp.com.