Legal
Privacy Policy
AccessProof helps you find, fix and document accessibility issues — using only your product catalog, images and theme, plus your public storefront HTML. It never reads your orders or customers.
Last updated: July 12, 2026
PCD LEVEL 0
Summary
AccessProof is a Shopify app that audits your storefront against WCAG 2.1 AA (the standard the EU Accessibility Act relies on), helps you fix the issues it finds — starting with AI alt-text written back to your images — and exports an evidence report. It operates at Protected Customer Data Level 0: it does not request or read orders, customers, or checkouts, and it stores no customer personal data.
Data we collect
Product & image data
Product titles and their images (URL + existing alt text) — read via the Shopify Admin API to audit accessibility, and written back (alt text only) when you approve a change.
Audit results
The WCAG issues found on your audited storefront pages and each image's alt-text status — the data that powers your dashboard, issue list and evidence report.
Shop & account data
Your shop domain, app settings, billing/subscription status, and encrypted Shopify access tokens — the operational data needed to run the app.
Public storefront HTML
We fetch your public storefront pages (home, a collection, cart, search) the way any visitor's browser would, to check them against WCAG. No login, no scope, no personal data.
What we never collect
Names, emails, addresses, phone numbers, or any order / line-item data. AccessProof does not request read_orders or read_customers and is structurally unable to read them. It operates no tracking pixel and collects no shopper analytics.
How we use your data
- Audit your storefront pages and images against WCAG 2.1 AA and produce a worst-first fix list.
- Draft alt text from your own product images with AI, for you to review before saving (paid plans).
- Write the alt text you approve back to the image — reversible, alt text only.
- Generate a print-friendly EAA/WCAG evidence report.
- Operate billing, support, and the app itself.
Content changes & reversibility
The only thing AccessProof writes to your store is image alt text, and only after you approve it — never orders, customers, or product content. AI-generated alt text is always a draft you review before anything is saved, and every write snapshots the previous alt so it can be reverted.
Third parties
- Shopify — the platform that hosts your store and authorizes the app's Admin API access.
- Anthropic — used for AI alt-text, to describe your product images only. No orders, customers, or personal data are ever sent to it, and generation runs zero-retention.
We do not sell your data or share it for advertising.
Retention & security
- Encrypted at rest: Shopify access tokens are stored with AES-256-GCM encryption.
- Zero-retention AI: the image sent to the vision model and its response are not logged or retained; only coarse, non-content metadata (token counts, latency) is recorded.
- Deleted on uninstall: on app uninstall and on a Shopify shop-redaction request, your data is removed. We honor the mandatory GDPR data-request / data-erasure webhooks.
Your rights (GDPR / CCPA)
Depending on where you operate, you may have the right to access, correct, export, or delete the data we hold. Because AccessProof holds no customer personal data, most data-subject requests concern only your merchant account data. To exercise any right, contact us at carcucatalin@gmail.com. We also respond to Shopify's customers/data_request, customers/redact and shop/redact compliance webhooks.
Honesty
The accessibility score measures how many WCAG 2.1 AA checks pass — it is not legal advice or a guarantee that your store is compliant, and no tool can guarantee that. We do not sell an accessibility overlay. You remain responsible for meeting your legal obligations.
Contact & support
Questions about this policy or your data? Email us at carcucatalin@gmail.com. We aim to respond within a few business days.