Privacy policy
Last updated October 14, 2026. This policy describes how Plainly Accessible, operated from Montréal, Québec, handles personal information, in line with Québec's Act respecting the protection of personal information in the private sector.
Person in charge of the protection of personal information
Othmane Kabbaj, owner. Contact: [email protected].
What we collect and why
- Orders: your name, email address and the website you want tested, to deliver your report, answer you and keep accounting records. Payment is handled by Stripe; we never see or store card details.
- Organizations we contact: business email addresses that organizations publish on their own websites, with the page address, date and surrounding text, so we can show the basis for contacting them under Canada's anti-spam law (CASL).
- Website visits: anonymous, cookie-free, aggregated page-view counts (Cloudflare Web Analytics). Fonts are loaded from Google Fonts.
- Emails you send us: to reply and to honour unsubscribe requests.
How long we keep it
- Order and accounting records: 6 years, as required for tax purposes.
- Reports: 12 months after delivery, then deleted.
- Prospect contact details: deleted 12 months after our last message. If you unsubscribe, we keep only your address on a do-not-contact list so we never write again.
Service providers and transfers outside Québec
We use these providers, which may store information outside Québec. Before using them we assessed the sensitivity of the information, the purpose, and the protection each provider offers (privacy impact assessment):
- Stripe (payments), Google (email), Cloudflare (website hosting and analytics), GitHub (private storage of business records and automation);
- AI assistants that help operate the business: Anthropic (Claude) may process order records and business contact details; OpenAI (Codex) reviews our code and website text only, with customer, prospect and inbox data removed.
We do not sell or rent personal information.
Your rights
You may ask to access or correct your information, withdraw your consent, or ask us to stop disseminating it, by emailing [email protected]. We answer within 30 days. If you are not satisfied, you may file a complaint with the Commission d'accès à l'information du Québec.
Security and incidents
Access is limited to the owner, credentials are kept out of our code, and data is stored in private accounts. We record every confidentiality incident and notify the Commission d'accès à l'information and the people concerned when there is a risk of serious injury.