Privacy Policy & DPDP Act Notice

1. Local-First Browser Architecture

WCAGBrief is engineered so that automated webpage DOM inspections, guided keyboard checklists, element screenshot cropping, studio logo embedding, and PDF report compilation execute locally inside your web browser. Free users can audit webpages without creating an account or transmitting client HTML to our servers.

2. Personal Data Collected (Data Minimization)

In accordance with the Digital Personal Data Protection Act, 2023 (India) and GDPR principles, we collect strictly the minimum personal data necessary to fulfill paid software licenses:

• Work Email Address: Used solely to deliver and verify your Solo Pass or Agency White-Label license key.
• Consent Timestamp & Policy Version: Recorded when you explicitly accept this notice prior to checkout.
• Aggregate Monthly Quota Counters: Numeric counters tracking clean PDF exports and optional AI code patch requests per billing month.

3. Sub-Processors & Merchant of Record

• Dodo Payments (Merchant of Record): Processes credit card, UPI, and international payments, calculates GST/VAT/sales tax, and issues tax invoices. WCAGBrief never touches or stores raw payment card details.
• Cloudflare Pages & Neon Serverless Postgres: Hosts our static web application, edge API functions, and encrypted license records over TLS.
• Google Gemini API (Agency Pro Optional Feature Only): When an Agency White-Label user clicks "AI Custom Patch", only the selected failing HTML snippet and WCAG rule ID are sent to generate a framework code fix.

4. Your Right to Access, Correction & Instant Erasure

You may permanently erase your email address, consent log, and license records at any time using our self-serve portal at /account or by contacting our Data Protection & Grievance Officer at privacy@wcagbrief.com.