Privacy Policy

1. Who is responsible

Conforma (https://conformahq.com) is the controller for the personal data described here. Contact: support@conformahq.com. We process data in line with the GDPR.

2. What we collect, and why

• Account data: name, email, password (hashed), agency name and logo. Needed to provide your account (contract, art. 6(1)(b)).
• Report-email addresses: if you request a full report from the free scanner, we store your email to deliver that report link (art. 6(1)(b)). We don't add you to a newsletter.
• Scan data: URLs you submit, page titles and HTML snippets of failing elements. This is website content, processed to produce your results (art. 6(1)(b), and legitimate interest for the free scanner, art. 6(1)(f)).
• Billing data: handled by our merchant of record, Paddle, who act as an independent controller for payment and tax purposes (see Paddle's privacy policy). We store only your subscription status and plan.
• Technical logs: IP addresses in server logs and rate-limiting counters, kept briefly to keep the service secure (art. 6(1)(f)).

3. What we don't do

No advertising, no selling of data, no tracking cookies on the public site. The only cookies we set are strictly necessary (session, CSRF).

4. Processors

We use a small set of processors to run the service: our hosting provider (EU region), our transactional email provider, and Paddle for payments. Each is bound by a data processing agreement.

5. Retention

• Anonymous free-scan results: deleted after 90 days.
• Free-scan results with a report email: deleted after 12 months.
• Account and site data: kept while your account exists; deleted when you delete your account.
• Server logs: rotated within 30 days.

6. Your rights

You can access, correct, export or delete your data: account settings cover most of it, and anything else via support@conformahq.com. You also have the right to lodge a complaint with your supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).