Privacy Policy
This policy explains what data True Access Now ("the Plugin," "the Service") processes, why, and where — in line with the EU General Data Protection Regulation (GDPR/AVG). It is provided by Vorlexa (KVK 94308411, Postbus 8, 4357 ZG Domburg, the Netherlands — "we," "us"), info@vorlexa.com.
1. Free tier (the Plugin, static scan)
The free scanning features run entirely inside your own WordPress installation. No content from your site, no URLs, and no scan results are sent to Vorlexa or any third party. The audit log is stored in your own WordPress database, under your own control. We do not have access to it, and it is deleted along with the rest of your site's data if you remove your WordPress installation.
2. Paid tier (external scanning service)
The paid, browser-rendered scanning service (tan-scan.vorlexa.com) is live and processes the following in order to function:
- The public URLs of the pages you ask it to scan (not private/logged-in pages), sent to Vorlexa's scanning infrastructure to be rendered and analyzed.
- A rendered copy of each scanned page (HTML/CSS/screenshots as needed for contrast/keyboard-navigation analysis) and the resulting findings, which are stored to power your dashboard and audit-log evidence trail.
- Your account/license identifier, to associate scan results with your subscription.
We act as a data processor for this content on your behalf; you remain the data controller for your own website's content. A Data Processing Agreement (DPA) is available on request, consistent with GDPR Art. 28.
Scan data is retained for 30 days. Scan jobs, their results (rendered-page evidence, findings) and associated URLs are automatically and permanently deleted from our infrastructure 30 days after the scan ran. This is enforced server-side (not a manual process) and applies to all existing and future scan data.
3. What we do NOT do
We do not sell your data. We do not use scanned website content to train AI models without separate, explicit consent. We do not share scan data with third parties except sub-processors strictly necessary to run the Service (e.g. hosting infrastructure, the AI vision provider named in section 4), under contract.
4. AI-assisted features
AI-generated alt-text suggestions are a live feature on the Pro and Agency tiers. Images submitted for suggestion generation are sent to Anthropic (the company behind the Claude models) via their API for analysis. The image content is used only to generate the suggestion and is not stored by Vorlexa beyond what is needed to produce and log that suggestion. Because Anthropic's infrastructure may process data outside the EEA, appropriate international-transfer safeguards apply, per Anthropic's own privacy policy and API terms; full contractual details will be confirmed in the DPA referenced in section 2.
5. Website analytics (trueaccessnow.com)
If this marketing website uses analytics, it will use privacy-respecting, cookie-consent-compliant tooling. Details will be added here to reflect the site's actual current configuration.
6. Your rights
Under the GDPR, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Since the free tier stores no data with us, these rights are primarily relevant to the paid tier. Requests can be sent to info@vorlexa.com.
7. Data retention
Free tier: none (nothing leaves your site). Paid tier: 30 days, enforced automatically — see section 2.
8. Changes to this policy
We will update this policy as our data-processing practices evolve, and will flag material changes via the Plugin's changelog or this website.
9. Contact
info@vorlexa.com — for GDPR requests specifically, please include "GDPR request" in your subject line.