Legal
Privacy policy
Last updated: October 14, 2026
PillarScan ("we", "us") provides website accessibility monitoring for public entities. This policy explains what we collect and why.
What we collect
- Account data: name, work email, organization name, password hash, plan and billing status. Payment card details are handled by Stripe and never touch our servers.
- Scan data: the public URLs you ask us to scan, the HTML snippets of elements with accessibility issues, page titles, screenshots of public pages, and the results of automated tests. We only load publicly accessible pages.
- Free scan data: the URL submitted, scan results, an optional email address if you choose to receive results, and a hashed IP address used only for rate limiting (deleted after 30 days).
- Usage data: privacy-preserving analytics (Cloudflare Web Analytics, no cookies, no cross-site tracking) and server logs retained for 30 days.
How we use it
To run scans, show results, send transactional email (scan complete, sign-in links, receipts), provide support, and improve the product. If you opt in to results by email we may send up to four follow-up emails about accessibility compliance; every email has an unsubscribe link.
Sharing
We use Cloudflare (hosting, storage, AI inference), Stripe (payments) and an email delivery provider. We do not sell personal data. Public directory pages show aggregate results for public websites, never account data.
Retention and deletion
Account and scan data are kept while your subscription is active and for 12 months after, so you can renew without losing history. Email support@pillarscan.com to delete your account at any time; we remove it within 30 days.
Security
Data is encrypted in transit and at rest. Passwords are hashed with PBKDF2. Access is limited to staff who need it for support.
Your rights
You can access, correct or delete your data by emailing support@pillarscan.com. California residents have additional rights under the CCPA, which we honor for everyone.
Contact
support@pillarscan.com