Suhoolah Accessibility Scanner Privacy Policy
This policy applies to the Suhoolah Accessibility Scanner Chrome extension provided by A11y Oman and Suhoolah through a11y.om.
What the extension does
The extension lets an authenticated Suhoolah user request an accessibility scan of the current web page, view the results, save them to the user's Suhoolah account and export reports. The extension does not run an accessibility engine inside the browser. It sends the selected page address and scan settings to Suhoolah so the service can perform the requested scan.
Information processed
- Account and authentication information, including the username or email address, password, authentication session and a security-question answer when the service requests one.
- The address and title of a page the user explicitly chooses to scan.
- The first main heading on the selected page. This is used only to suggest an editable Guided Path step name.
- Scan settings, including the selected WCAG level and whether best-practice or ARIA checks are included.
- Guided Path names, step names, scan job identifiers, results and reports.
- Technical information needed to protect, operate and diagnose the service, such as request time, extension identifier, IP address, response status and security logs.
The extension does not read or transmit passwords or other values entered into forms on the web page being scanned. It does not continuously monitor browsing activity. Page information is accessed when the user starts a scan or adds a Guided Path step.
Local information
The extension stores its language, scan preferences, active scan identifier and unfinished Guided Path information in Chrome's local extension storage. This information is used to preserve the interface and resume an interrupted scan. It is not used for advertising.
How information is used
Information is used to authenticate the user, perform requested accessibility scans, display progress and results, save results to the user's account, generate exports, prevent abuse, protect accounts and maintain the reliability of the service. It is not used for behavioural advertising, credit decisions or unrelated profiling.
Sharing and disclosure
A11y Oman and Suhoolah do not sell extension user data. Information may be processed by infrastructure or service providers acting on our instructions where needed to operate and secure Suhoolah. Information may also be disclosed where required by law, to investigate fraud or abuse, or as part of a business transfer subject to applicable notice and consent requirements. Staff access is limited to user-authorised support, security investigations, legal requirements and necessary service operations.
Retention and deletion
Scan results saved to a Suhoolah account are retained while needed to provide the account and reporting service, or until they are deleted through available account controls or following a verified deletion request. Local extension information can be removed by clearing the extension's data or uninstalling it. Security and operational logs are retained only for the period needed to protect and operate the service and meet legal obligations.
Security
The extension communicates with a11y.om using HTTPS. Access to account data requires authentication. The service uses extension-origin validation, request security tokens, access controls and operational logging. No system can guarantee absolute security, but reasonable technical and organisational safeguards are maintained for the information processed.
Chrome Web Store Limited Use
The use of information received from Chrome APIs follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only to provide or improve the extension's disclosed accessibility-scanning purpose and related security and reliability functions.
User choices and requests
Users may choose which pages to scan. They may request access, correction or deletion of their Suhoolah account information by contacting support@a11y.om. We may need to verify the account holder before acting on a request.
Changes to this policy
This policy may be updated when the extension, service or applicable requirements change. The effective date above will be updated when material changes are published.
Contact
A11y Oman and Suhoolah
Email: support@a11y.om
Website: https://a11y.om/