Security
AltGrade scans public pages you ask us to scan. Account data, scan results and screenshots are stored so you can read the report and the history.
What we store
We store the account email, a password hash, the site URL, issue text, scores, and optional screenshots of elements. We store a hash of the IP address only to enforce the free-scan limit. Payment card numbers are handled by Stripe, not stored by AltGrade.
Where it runs
The web app and the scanner run as separate services. The database is Postgres. The owner chooses the hosting region when the Railway project is created. Secrets such as API keys live in environment variables.
Deletion
Email [email protected] to ask for deletion of an account and its scans. Prospect report links expire after 30 days. We do not publish a named site's issues on a public page.