Skip to content
Web Quality Assurance

How we work

Privacy policy

We collect as little as we can to run scans, deliver reports and take payment. This page explains what we collect, why, who processes it and how to delete it.

Who we are

Web Quality Assurance, an unregistered business based in Oke Odo, Ileogbo, Osun State, Nigeria. Contact: webqualityassurance.mail@gmail.com.

What we collect

  • Your email address, if you create an account or buy a report. We use it to sign you in and send your reports.
  • What you submit for a scan: the website addresses, and the optional description of your product and customers.
  • The scan results: text and screenshots of the public pages we reviewed, the results of the technical checks, and the report.
  • Payment records: what you bought, when, and the amount. Paddle, our reseller, handles the checkout and card details; they never reach us.
  • A scrambled form of your IP address (a salted hash, never the address itself), used only to limit scans per connection. We delete it after 30 days.

Why we need your website address

The address tells our crawler which public pages to read. It reads only pages anyone can see without signing in, and never asks for passwords to the sites we review. See what our crawler does.

What we don't do

We don't sell personal data, and we don't use it to advertise to you.

Cookies and analytics

We set one cookie, and only when you sign in: it keeps you signed in for up to 30 days. We use no advertising or tracking cookies. When you pay, Paddle's checkout runs on our checkout page and may set its own cookies; see Paddle's privacy notice. To understand how the service is used, we count events such as “a scan finished” or “a report was bought”, without recording who did them or which site was scanned.

Who processes it

  • Neon, which hosts our database, including report screenshots and PDFs (servers in the United States)
  • Vercel, which hosts the website (servers in the United States)
  • Paddle.com, our reseller and merchant of record, which processes payments, handles sales tax and sends receipts
  • Resend, which delivers our emails (sign-in links and report notifications)
  • Anthropic, which provides the AI model that writes reviews. It receives the text and screenshots of the pages being reviewed and the optional description you entered, but not your email address or payment details.

How long we keep it

Scans and reports are kept until you delete them, so you can return to them and compare re-scans. Sign-in links expire after 20 minutes and are removed after a day; sign-in sessions end after 30 days. Hashed IP addresses are deleted after 30 days.

How reports are protected

Each report has a private link containing a signed code that can't be guessed. Only people with that link, or the account that owns the report, can open it. Report pages are hidden from search engines. Anyone you share the link with can open the report, so share it carefully.

Deleting your data

You can delete any report from its page, or your whole account from your account page. Deletion takes effect immediately: the report, page text, screenshots and PDF are removed from our database. Copies may remain for a limited time in our database provider's routine backups. Payment records stay with Paddle for as long as tax law requires. You can also ask us to delete your data by email.

The sites we review

Our crawler reads only public pages. See what our crawler does.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, or to object to how we use it. Email webqualityassurance.mail@gmail.com and we will reply within 30 days.