1) What the Service does

ProofPack is an automated accessibility assessment and compliance-support service. It scans Websites submitted by customers and produces accessibility-related findings, technical outputs, and scores intended to help identify likely accessibility gaps and support internal accessibility and EAA-related work.

The Service does not require customers to upload documents or files for scanning as part of its normal operation, unless expressly stated for a specific feature.

2) Personal data we collect

3) How we use personal data

We use personal data only as necessary for legitimate business and operational purposes, including to:

• provide, operate, and maintain the Service,
• create and manage customer accounts,
• perform scans and generate Outputs,
• provide dashboards, reports, and related functionality,
• process subscriptions, billing, and payment administration,
• communicate with customers about the Service,
• provide customer support,
• secure the Service and prevent fraud, abuse, unauthorized access, or misuse,
• monitor, troubleshoot, and improve performance, reliability, and product quality,
• comply with legal, regulatory, tax, accounting, and enforcement obligations,
• enforce our Terms, Acceptable Use Policy, and related legal rights.

We do not sell personal data.

4) Legal bases for processing (GDPR)

5) Sources of personal data

We collect personal data:

• directly from you when you create an account, subscribe, contact us, or use the Service,
• from your use of the Service and related technical systems,
• from Websites you submit for scanning,
• from payment and billing providers in connection with subscription administration,
• from service providers that support authentication, hosting, analytics, and infrastructure.

6) Sharing of personal data and subprocessors

7) International data transfers

ProofPack is based in Denmark. Some of our service providers may process personal data outside the EU/EEA. Where personal data is transferred outside the EU/EEA, we use appropriate safeguards where required by law, including the European Commission’s Standard Contractual Clauses or other valid transfer mechanisms.

8) Data retention

9) Security

We implement reasonable technical and organizational measures designed to protect personal data, including encryption in transit, access controls, role-based permissions, and monitoring. However, no method is completely secure.

10) Your rights

If the GDPR applies, you may have rights to access, correction, deletion, restriction, objection, portability, and consent withdrawal. To exercise these rights, contact us at info@proofpack.eu. We may ask you to verify your identity.

11) Complaints

If you believe our processing violates applicable law, you may lodge a complaint with your local supervisory authority. For Denmark: Datatilsynet. We encourage you to contact us first.

12) Cookies and similar technologies

If we use cookies, we will describe them in a separate Cookie Policy or notice. Non-essential cookies will be used only with your consent.

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by updating the date above or posting notice through the Service.

14) Contact

1) Authority to scan

2) Prohibited activities

You may not use the Service to:

• attempt to compromise, disrupt, damage, disable, overburden, or impair the Service or its infrastructure,
• bypass authentication, quotas, rate limits, plan limits, access restrictions, or billing controls,
• probe, test, or attempt to discover vulnerabilities in the Service itself,
• gain or attempt to gain unauthorized access to accounts, data, systems, or non-public functionality,
• use the Service in an unlawful, deceptive, fraudulent, infringing, abusive, or harmful manner,
• reverse engineer, decompile, disassemble, copy, or create derivative works from the Service, except where prohibited from restricting such activity by applicable law,
• use the Service to assess third-party Websites without permission,
• use the Service in a manner that could reasonably be expected to overload or disrupt your own infrastructure, a scanned Website, or any related system,
• misrepresent Outputs, scores, or findings as legal advice, legal conclusions, or certifications,
• use the Service to support unauthorized scraping, monitoring, competitive disruption, or other activities outside the intended purpose of the Service.

3) Fair use and plan limits

We may apply plan-based or technical limits on websites, scan frequency, pages per scan, feature access, storage, and API usage. You must not attempt to circumvent these limits or use the Service in a way that undermines its reliability, integrity, or security.

4) Responsible scanning

You are responsible for how and when you initiate scans and for the impact of those scans on systems you control. You should avoid initiating scans in a way that creates unnecessary load on production systems, interferes with performance, or creates avoidable security/availability risks.

5) Verification and enforcement

We may investigate suspected violations of this AUP and may take any action we reasonably consider necessary, including requesting evidence of your authority to scan, temporarily restricting scans, applying rate limits, or suspending/terminating access.

6) Reporting abuse

To report suspected abuse, unauthorized use, or security concerns, contact: legal@proofpack.eu or info@proofpack.eu