Privacy policy
What we collect, why, and what we refuse to hold.
Version 1.0 · effective August 2026
Uditus is a trading name of Air2U LLC, an Indiana limited liability company. This policy covers this website, our assessment reports, and any website we host for a client.
When we scan a website
We collect only what your server sends to any visitor: the HTML of the page, its scripts and stylesheets, the response headers, and the results of running standard accessibility tests against it. We record which technologies we detected and how the page scored. We do not collect personal information from your website and we do not collect anything about your visitors. Our scanning policy sets out exactly how the scanner behaves and how to be excluded permanently.
When you become a client
We hold your name, business name, email address, telephone number, billing details, and the records of work we have done for you. Payments are processed by Stripe; we never see or store your card number.
When we host your website
If we host a site for you, we hold whatever your visitors submit through its forms, on your behalf and under your instructions. We keep it encrypted and we do not use it for anything other than delivering it to you.
What we will not hold
No form we host may be used to collect Social Security or other government identification numbers, payment card numbers or financial account credentials, health information, biometric identifiers, or information about anyone known to be under 13.
This is a term of our services agreement, not a preference. If your business needs to collect any of it, we will tell you so and point you to a provider set up for it.
Email we send you
Every message we send carries a working unsubscribe link and our postal address. If you unsubscribe we stop contacting you and we also stop scanning your website — permanently, with no expiry and no second attempt later.
Who else sees your data
Our hosting and database providers, our email provider, and Stripe, each only to the extent needed to run the service. We do not sell data to anyone, and we do not share it for advertising.
How long we keep it
Scan results are kept while a business remains a prospect or a client, and deleted on request. Client records are kept for seven years after the engagement ends, for tax and insurance reasons. Suppression-list entries are kept permanently — that is the point of them.
Your choices
Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, and we will. Email us and say which.
If something goes wrong
If data we hold is exposed, we will notify affected people and the Indiana Attorney General as required by Indiana law, within the timeframe it sets.