PreFlight

1. Data controller

Controller: Ellie Miguel

Activity: digital services and SaaS technical verification tools for website projects.

2. Data processed

Depending on how the service is used, the following data may be processed:

• Account data: email address and the information needed to manage subscriptions.
• Technical data: analyzed URL, audit results, HTTP headers, and publicly visible signals detected during analysis.
• Usage data: the basic information needed to operate the service, keep it stable, and prevent abuse.

PreFlight does not access the internal contents of analyzed sites or private data from the server or database.

3. Purpose of processing

Data is used to:

• Run the technical audit requested by the user.
• Manage user accounts and subscription plans.
• Store audit history when the user has an account.
• Improve the stability, security, and performance of the service.
• Prevent abusive or malicious use.

Data is not used for external marketing purposes and is not shared with third parties for advertising.

4. Legal basis

The main legal basis for processing is:

• The performance of the service requested by the user.
• The legitimate interest in ensuring the security and proper functioning of the platform.
• Where applicable, compliance with legal obligations.

5. Retention

Data is retained:

• While the account remains active.
• For the time required to comply with legal or tax obligations.
• After cancellation, only the minimum data required for legal compliance will be kept.

6. Data processors

Technology providers may participate in the delivery of the service, such as cloud hosting or payment processors. They act as data processors under their own privacy policies and data-processing agreements.

When paid plans are purchased, billing and payment details are handled by the external payment provider, and PreFlight does not directly store card or bank information.

7. User rights

Users may exercise their rights of access, rectification, erasure, restriction, or objection in accordance with applicable law.

To exercise these rights, contact the service owner through the support channel available on the platform.