Privacy Policy
Short version: ComplyKit has no servers, no accounts, no analytics and no tracking. Your audits, branding and settings stay in your browser. The only data that leaves your device is your license key and a device label, which go to Lemon Squeezy to activate and check a Pro license.
1. Who we are
ComplyKit is a Chrome extension run by Franco Banina, an individual developer based in Argentina ("we", "us"). Contact: zndevs@outlook.com. For the data described in section 4, we are the data controller under the EU and UK General Data Protection Regulation (GDPR).
2. What the extension reads, and when
ComplyKit reads a web page only when you ask it to:
- when you click Run audit on the current tab, and
- when you pick pages for a multi-page scan (Pro). ComplyKit then opens those pages one at a time in background tabs, audits them and closes them. To list the pages, it reads the site's
sitemap.xmlor the links on the current page.
To audit a page, ComplyKit runs the open-source axe-core engine inside it and looks at its structure: HTML, colors, labels and element positions. For the PDF report it can take screenshots of the affected parts of the page. It does not read your browsing history, form entries, passwords or cookies, and it does not run on pages you did not ask it to audit.
Results are processed and stored on your device. We never receive the pages you audit, the results or the screenshots.
3. Data stored on your device
ComplyKit uses chrome.storage.local, which lives in your Chrome profile on your computer:
| Data | Why |
|---|---|
| Agency branding: the name, website, email, color and logo you enter | To put your brand on PDF reports |
| Audit history: page URLs, dates and the issues found (the latest audit on the free plan, up to 20 on Pro; no screenshots) | So you can reopen past results |
| Daily counter: today's date and the URLs scanned today | To apply the free plan limit of 2 scans per day |
| License: key, activation ID, status and date of the last check | To keep Pro features unlocked |
| Settings: paper size and marker animation | Your preferences |
You can delete this data at any time by removing the extension or clearing its data in Chrome. PDF files you export are saved where you choose and stay under your control.
4. Data sent to Lemon Squeezy (Pro only)
Pro licenses are sold and managed by Lemon Squeezy, our Merchant of Record. When you activate a license, when the extension re-checks it (about once a week) and when you deactivate it, the extension sends to Lemon Squeezy's license API:
- your license key,
- a device label such as "Chrome · Windows" (on activation), and
- the activation ID Lemon Squeezy assigned to that device.
As with any web request, Lemon Squeezy also sees your IP address. When you buy, Lemon Squeezy collects your name, email, billing address and payment details directly; we only see what Lemon Squeezy shares with sellers, such as your name, email, country and order. Lemon Squeezy's handling of that data is described in the Lemon Squeezy Privacy Policy.
Legal basis under the GDPR: performance of a contract (art. 6(1)(b)), to deliver and verify the license you bought, and our legitimate interest (art. 6(1)(f)) in preventing license misuse.
5. What we do not do
- We do not run our own servers or collect analytics, telemetry or crash reports.
- We do not use cookies or tracking technologies in the extension.
- We do not sell, rent or share personal information, and we do not "sell" or "share" it as the California Consumer Privacy Act (CCPA, as amended by the CPRA) defines those terms.
- We do not use data for advertising, profiling or credit decisions, and we do not use it to train AI models.
- We do not load remote code. The "copy AI prompt" feature only copies text to your clipboard; ComplyKit sends nothing to any AI service.
6. Chrome Web Store User Data Policy
The use of information received from Chrome APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. ComplyKit:
- uses page content only to provide the accessibility audit you request, which is its single purpose;
- does not transfer user data to third parties, except the license data in section 4, which is needed to provide Pro features, or when required by law;
- does not use or transfer user data for personalized advertising;
- does not use or transfer user data to determine creditworthiness or for lending purposes;
- does not allow humans to read user data, unless you give explicit consent (for example, by sending us a report for support), it is needed for security purposes, or it is required by law.
7. Permissions
| Permission | Use |
|---|---|
activeTab, scripting | Run the audit on the tab where you clicked Run audit, and take screenshots of the issues for the report |
sidePanel | Show the ComplyKit panel |
storage | Save the local data listed in section 3 |
Access to api.lemonsqueezy.com | Activate and check licenses |
| Optional site access | Requested one site at a time, only when you click, for re-audits and multi-page scans. You can revoke it in Chrome's extension settings. |
8. Retention
Local data stays until you delete it or uninstall the extension. We do not hold copies. Lemon Squeezy keeps order and license records as described in its policy and as tax laws require. Emails you send us are kept as long as needed to help you, and for up to 12 months after that.
9. Your rights
EU, EEA and UK residents (GDPR)
You may ask to access, correct, delete, restrict or port your personal data, and object to processing based on legitimate interest. You may also complain to your local data protection authority. Most of your data exists only on your device, so you can view and delete it yourself.
California residents (CCPA)
You have the right to know what personal information we collect, to delete and correct it, and not to be discriminated against for using these rights. We do not sell or share personal information, so there is nothing to opt out of. In the last 12 months we collected only identifiers (license key, device label and IP address, through Lemon Squeezy) and commercial information (purchase records, through Lemon Squeezy), for the purposes in section 4. We do not collect sensitive personal information.
How to ask
Email zndevs@outlook.com. We answer within 30 days (45 days for CCPA requests) and may ask for your license key or order number to verify the request. For purchase records, we may forward your request to Lemon Squeezy.
10. International transfers
We are based in Argentina, which the European Commission recognizes as providing adequate data protection. Lemon Squeezy processes data in the United States and describes its own transfer safeguards in its policy.
11. Children
ComplyKit is a professional tool and is not directed at children under 16. We do not knowingly collect their data.
12. Security
Data stays in your Chrome profile, and license calls use HTTPS. Anyone with access to your computer and Chrome profile may see your local ComplyKit data, so keep your device protected.
13. Changes
If we change this policy, we will update the date above. If a change affects what data leaves your device, we will announce it in the extension's release notes before it takes effect.