Accessa privacy policy

Last updated: 2026-10-23

Accessa is a Shopify app published by Accessa. It helps merchants audit and improve their store’s accessibility (WCAG 2.1 AA, European Accessibility Act). This page explains what data the app processes, why, and how it is protected.

Data we process

• Store information: myshopify domain, store name, admin language and the access tokens Shopify provides at install.
• Public storefront pages: the HTML of a few pages (home, products, collections…) is downloaded for the audit. Only the results (failing rules, code excerpts) are kept.
• Catalog: product titles, product images and their alt text, to suggest and write new descriptions.
• Theme: Liquid files related to an issue are read to propose a fix; a copy is kept so the fix can be undone.
• Settings: the storefront password (if the store is protected), and the company name and contact email entered for the accessibility statement.

Accessa does not collect any personal data about the store’s customers (orders, addresses, payments) and does not request access to it.

Purpose

This data is used only to provide the service: running audits, generating alt text and fixes, publishing the accessibility statement and managing the subscription. It is never sold or used for advertising.

Subprocessors

• Render (hosting and database, Frankfurt region, European Union).
• Anthropic (artificial intelligence, United States): receives the product images and product titles needed for each generation. By default, Anthropic does not train its models on data sent through its API.
• Resend (alert emails, United States): receives the recipient address and the alert content (score and issues found), only when alerts are enabled.
• Shopify (platform, authentication and billing).

Retention and deletion

Data is kept while the app is installed. Sessions are deleted as soon as the app is uninstalled. 48 hours later, Shopify sends us a deletion request and all of the store’s data (audits, suggestions, settings) is then erased automatically.

Security

All traffic is encrypted (HTTPS). Database access is restricted to the Accessa service. No theme change is applied without the merchant’s action.

Your rights

Under the GDPR and the Swiss Federal Act on Data Protection (nFADP), you may request access to, correction or deletion of your data by writing to hermanndally15@gmail.com.

Contact

Accessa · hermanndally15@gmail.com