Privacy Policy

1. Who is responsible for your data

Selkeo is operated by Samuel Zad, based in Finland (the “data controller” under GDPR). Contact us about anything in this policy at zadbuilds@gmail.com.

2. What we collect

• Account data: your email address, company name (if given), and the website URL you ask us to scan.
• Payment data: handled directly by Stripe — we receive confirmation of payment and a reference ID, never your full card number.
• Scan data: the accessibility reports our scans generate for your website.
• Contact-form data: if you message us through the site, we keep what you submit (email, message, optional site URL) to respond to you.

3. Why we process it

To provide the Service you signed up for (running scans, sending you reports, billing your subscription), to respond to you when you contact us, and to meet legal obligations (e.g. keeping records Finnish tax law requires). Our legal basis is performance of the contract with you, and — for the occasional operational email — our legitimate interest in running the Service.

4. Who we share it with

We don't sell your data. We use a small number of processors to run the Service, each only for the purpose below:

• Stripe — payment processing and billing.
• Supabase — our database and account/login system, where your account and scan data is stored.
• Brevo — sending you scan-report and account-related emails.
• Vercel — hosts the Selkeo website and application itself.

Each of these providers processes data under their own privacy terms and may process it outside Finland (including, for some providers, outside the EU/EEA, under appropriate safeguards such as the EU Standard Contractual Clauses).

5. How long we keep it

We keep your account and scan data for as long as your account is active, and for a reasonable period after cancellation in case you return or we need it for legal/accounting reasons. You can ask us to delete your account and data at any time (see Section 6).

6. Your rights

Under GDPR, you can ask us to: give you a copy of your data, correct it, delete it, restrict how we use it, or transfer it to you in a portable format. You can also object to processing based on our legitimate interest. To exercise any of these, email zadbuilds@gmail.com. If you think we've mishandled your data, you can also complain to Finland's Data Protection Ombudsman (tietosuojavaltuutetun toimisto).

7. Cookies

The Selkeo site itself uses only the cookies needed to keep you logged in. Stripe Checkout, which you're briefly sent to when subscribing, sets its own cookies under its own policies.

8. Security

We rely on our providers' security measures (encryption in transit, access controls, row-level security on our database) and keep access to your data limited to what's needed to run the Service.

9. Changes to this policy

We may update this policy occasionally. Material changes will be announced to active subscribers by email before they take effect.

10. Contact

Questions about this policy or your data? Email zadbuilds@gmail.com.