Last updated
This summary is for orientation only. The full terms below are what apply.
Welcome to WebAbility! This Privacy Policy outlines how we handle your personal information when you use our services, which include our standalone service accessible through the WebAbility website (collectively referred to as the "Service").
We collect various types of information, including Personal Information, when a Customer or a Visitor (including anyone acting on their behalf) accesses or uses our Services as more fully set forth below.
We collect publicly posted data (e.g., feedback, reviews, social handles) from our official social pages. If you'd like content removed, email [email protected].
We use tools like Google Analytics to track site visits, page interactions, session frequency, non-precise geolocation, and referral sources.
We may obtain data from referral partners, service providers (e.g., payment processors, social media), publicly available sources, and marketing providers. Combined with our data, this helps us improve and personalize the Service.
We also collect any data required to verify your identity or comply with legal obligations under applicable laws.
Our AI Alt Text Generator tool processes images you upload to generate accessibility-compliant alternative text descriptions. This processing has specific privacy protections.
AI Service Provider: Replicate.com (US-based AI infrastructure)
Your Control: This tool is entirely optional. You maintain full control over what images you upload and when. No processing occurs without your direct action of uploading an image.
We may contact you via email, telephone, or other means about changes to the Service, updates to your account, billing issues, and important security or account-related notices ("Essential Communications"). You cannot opt out of these Essential Communications as they are necessary for contract performance.
Additionally, we may send newsletters, feature updates, event invitations, and other marketing or promotional emails based on your consent. You may withdraw consent and opt out of these easily by:
Consent withdrawal will be processed immediately and take effect within 48 hours.
WebAbility uses the collected data for various purposes, including:
Your information, including Personal Data, may be transferred to and maintained on servers located outside your state, province, country, or other governmental jurisdiction where data protection laws may differ from your own. If you are located outside Germany and choose to provide information to us, note that we transfer the data to Germany for processing. This transfer is necessary for the performance of our contract with you and to provide our services.
We take reasonable steps to ensure that your data is secure and treated in accordance with this Privacy Policy and applicable data protection laws. Our primary infrastructure — servers, application, and database — is located in Germany, within the European Economic Area. Some of our service providers process data outside the EEA, principally in the United States; these are identified in the Service Providers section below. Where personal data is transferred outside the EEA, we rely on the European Commission’s Standard Contractual Clauses, or on an adequacy decision where one applies, and we do not transfer personal data to an organization or country unless adequate controls are in place.
Since we process data within Germany and the European Economic Area (utilizing secure German data center infrastructure), your personal data benefits from comprehensive protection under European data protection laws. The safeguards that apply are described in the Data Protection Safeguards section below.
WebAbility may disclose your Personal Data in good faith if necessary to:
The security of your data is important to us. We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
Purpose: We implement rate limiting on our AI tools to prevent abuse and ensure fair access for all users.
Legal Basis: Legitimate Interest (Art. 6(1)(f) GDPR) — Service protection and fair usage
Privacy Protection:
Rate Limits: Alt Text (100/5min), Color Tools (200/5min), Palette Generator (500/5min) — generous limits for normal usage
Since we process data within Germany and the European Economic Area, your personal data benefits from comprehensive protection under European data protection laws.
For any question about this policy or about how we handle your personal data, contact our privacy team at [email protected]. We answer privacy requests from the same address.
We keep personal information only for as long as it is needed for the purposes described in this policy, or for as long as the law requires us to. In practice that means:
If you want to know how long we hold a specific piece of information about you, email [email protected] and we will tell you.
After the retention period ends, we take the following actions with your personal data:
You can request earlier deletion of your personal data by contacting us at [email protected]. Note that anonymized data cannot be deleted as it no longer identifies you personally.
Aggregated, anonymized data used for business insights is retained indefinitely, as it cannot identify you and provides valuable insights for service improvement.
The security of your Personal Information is important to us. We implement physical, technical, and organizational safeguards—such as encryption, access controls, and secure development practices—to protect your data from misuse, damage, and unauthorized access.
However, no system is entirely foolproof. While we strive to use industry-standard measures, we cannot guarantee absolute security for information transmitted over the Internet or stored on our servers or those of our third parties.
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, the GDPR, UK GDPR, and Swiss FADP apply. In addition to the rights in this policy, you have the additional rights listed below.
We process your Personal Information on these lawful grounds:
You have the right to:
For a full summary of your EU data protection rights, see the European Commission's guide to data protection rights for citizens (opens in a new tab).
To exercise these rights, contact us at [email protected]. We may request information to verify your identity and will respond within 30 days.
When we act as an independent data controller, you may contact us directly. If we process data on behalf of another controller, please contact that controller to exercise your rights.
If you're unsatisfied with our response, you may lodge a complaint with your local Data Protection Authority. Find contacts in the European Commission's directory of national data protection authorities (opens in a new tab).
In the past 12 months, we have collected:
We collect this information to provide, maintain, and improve the Service, as described in the How We Use Your Data section.
We obtain Personal Information directly from you, from your use of the Service, and from third-party providers.
We share your data with service providers and affiliates (see the Service Providers section). We do not "sell" your data under CCPA or CPRA, but we do share it with advertising partners for cross-context behavioral advertising. You have the right to opt out of that sharing: Do Not Sell or Share My Personal Information. We also honor Global Privacy Control signals sent by your browser.
In the past 12 months, we have disclosed for business purposes:
We have not sold Personal Information in the past 12 months.
You may:
To submit a request, email us at [email protected]. Only you or an authorized agent may make a request. You may make two requests per 12 months. We will verify your identity and respond within 45 days (possible extension of 45 more days with notice). We do not charge a fee unless the request is excessive or unfounded.
We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
GDPR Compliance: All service providers are contractually bound to:
We may use third-party Service Providers to monitor and analyze the use of our Service.
The following providers process personal data on our own website, webability.io. Several are located in the United States; where that is the case we rely on Standard Contractual Clauses as described in the Data Transfer section above.
You can opt out of the advertising and measurement providers above at Do Not Sell or Share My Personal Information, and we honor Global Privacy Control signals. The WebAbility widget that runs on our customers’ websites loads none of these providers.
For our AI Alt Text Generator tool, we use:
This service is only activated when you voluntarily upload an image to the Alt Text Generator. No other personal data is shared with this provider.
Since we process data within Germany and the EEA, international data transfers are minimized. Where transfers outside the EEA occur (e.g., to cloud service providers), we ensure adequate protection through:
Our Service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
If you are located in the European Economic Area (EEA), the following additional provisions apply:
WebAbility is the data controller responsible for your personal data under the GDPR.
Contact:
WebAbility
Email: [email protected]
We process your personal data only where we have a lawful basis to do so, such as:
Under the GDPR, you have the right to:
To exercise any of these rights, please contact us at [email protected]. We will respond within one month, or sooner if required by law.
If you are located in the European Economic Area and believe that our processing of your personal information violates data protection laws, you have the right to lodge a complaint with a supervisory authority responsible for data protection. You can find contact details in the European Data Protection Board's list of member supervisory authorities (opens in a new tab).
We use cookies and similar technologies on this website: essential cookies required for basic functionality, product analytics, and — subject to your consent — advertising and measurement cookies set by Google, Microsoft and LinkedIn. Our AI-powered tools (Alt Text Generator, Color Contrast Checker) work without any cookies, and the WebAbility widget sets no third-party cookies on our customers’ websites.
You can opt out of advertising and measurement cookies at Do Not Sell or Share My Personal Information, and we honor Global Privacy Control signals.
For full details — the specific cookies we set, their retention periods, how to opt out of Google Analytics, and how to manage cookies in your browser — see our Cookie Policy.
Key changes in that version include:
We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page.
For material changes that affect your rights or significantly change how we process your data, we will provide at least 30 days' notice via email and/or a prominent notice on our Service, and update the "Effective Date" at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Data Controller:
WebAbility
Email: [email protected]
Privacy contact:
Email: [email protected]
For GDPR-related inquiries:
Email: [email protected]