Privacy · AODAChecker

Who is responsible?

Cognivex Next Intelligence Inc.

Data and purposes

The free preview requires no email, account or identity. It processes the authorized URL, rendered HTML needed for checks, findings and retained excerpts. A necessary opaque cookie retrieves the private result; a network hash enforces abuse limits. For an account, first name, last name, email, URLs, evidence references, generated documents and necessary usage events provide the service, secure access, manage billing and handle requests. Stripe hosts payments; we do not collect full card numbers.

Do not include medical information, employee names, passwords or government sign-in details. Evidence links are stored without being fetched.

We do not sell your data or use it to train models. When enabled, OpenAI can improve explanations. Only rule identifiers, severities, counts and minimized technical attributes (tag, role, type) are sent: no URLs, raw HTML, observed text, names or emails. Scanner facts remain unchanged. Marketing is optional and separate; necessary security and payment messages remain part of the service.

For OpenAI explanations, store: false disables application storage; abuse-monitoring logs may still be retained for up to 30 days by default. Contracts and regions must be validated before production. OpenAI data policy

Providers and transfers

The proposed Canadian PostgreSQL region does not mean all processing stays in Canada. Email, payments, hosting, support and backups may involve other countries. Actual regions will be published after provisioning. See subprocessors.

Retention

Anonymous previews: access expires after 24 hours, followed by purging. You can delete the temporary preview from the landing page; a copy already saved in an account remains separate. Previews and their tokens are cleared after a backup restoration.
A preview saved in an account joins check history, retained for 365 days by default.
Unconfirmed accounts: purge after 7 days.
Active scan history: 365 days by default; minimized technical logs: 30 days.
Documents: during the service and a 30-day recovery window after subscription end.
Contact and support: 12 months after closure.
Invoices and tax records: separate retention based on the operator’s obligations, to be validated.
Backups: rotation to be confirmed before launch, deletions reapplied after restore.

Your requests and cookies

Download your ZIP export directly or delete your account in My account → Data and privacy. Deletion makes the account inaccessible immediately; provider cleanup may finish in the background. Only necessary session and private-preview cookies are used; no pixels, advertising, session replay or third-party analytics. Free preparation choices stay in this browser session, without declaring a completed correction.