Privacy Policy

Last updated: June 5, 2026

This Privacy Policy explains how Kat ADA (“we,” “us”) collects, uses, and shares information when you use our accessibility monitoring and remediation Service.

1. Information we collect

• Account information: your email address (we use passwordless magic-link sign-in).
• Site information: the URLs you connect, your public page content that we crawl, and the accessibility issues, fixes, and reports we generate.
• Billing information: handled by our payment processor, Stripe. We receive subscription status and a customer identifier; we do not store your full card number.
• Usage and device data: basic logs needed to operate and secure the Service.

2. How we use information

To provide and improve the Service: scanning your site, generating and applying approved fixes, producing reports, processing your subscription, sending transactional email (such as your reports), and securing the Service. We do not sell your personal information.

3. AI processing

To generate suggested fixes (for example, alt-text descriptions and ARIA labels), we send relevant snippets of your page content to our AI provider, Anthropic, via its API. This data is processed to return a suggestion and is handled under Anthropic’s commercial API terms, which do not use API inputs or outputs to train its models. You review fixes (or opt in to auto-applying high-confidence alt text) before they appear on your live site.

4. Service providers (subprocessors)

We share information with vendors that help us run the Service, including:

• Vercel — application hosting.
• Supabase — database and authentication.
• Stripe — payment processing.
• Anthropic — AI-generated fix suggestions.
• Resend — transactional email delivery.

Each processes data only to provide its service to us. We may also disclose information to comply with law or to protect rights and safety.

5. Cookies

We use a small number of strictly necessary cookies to keep you signed in. We do not use advertising cookies.

6. Data retention

We retain account, scan, and report data while your account is active and as needed to provide the Service, comply with legal obligations, and resolve disputes. You may request deletion of your account and associated data.

7. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live (for example, under the CCPA or GDPR), you may have rights to access, correct, delete, or port your personal information, and to object to certain processing. To exercise these rights, contact us at the address below.

9. Children

The Service is for businesses and is not directed to children under 16.

10. Changes

We may update this Policy; material changes will be posted here with a new date.

11. Contact

Privacy questions or requests: hello@katadaapp.com.