Privacy Policy

Which notice applies

Papaya Privacy Co. runs more than one product. This page covers the marketing site at papayacomply.ai and Agent Aria, the accessibility product. It does not cover Consent Checker.

Papaya Consent Checker — including Composer, got pixels?, the hosted app, CLI, HTTP API, and MCP server — is covered only by the Consent Checker Privacy Policy. That policy describes consent tests, payment data, and Consent Checker subscriptions. It does not describe Agent Aria.

Marketing site

papayacomply.ai does not ask you to create an account or submit a form to Papaya. “Meet with Us” opens a Google Calendar page operated by Google. Product buttons leave this site for Consent Checker or Agent Aria. LinkedIn and GitHub links leave this site as well. Those services apply their own privacy policies.

This marketing site does not include a first-party analytics tag. If you email ram@papayacomply.ai, we use that message to respond.

Agent Aria

Agent Aria tests whether a blind or low-vision user can complete a task, using keyboard and screen-reader behavior. The hosted product is a separate service from Consent Checker. Signing in to Agent Aria is not covered by the Consent Checker privacy policy.

When you use hosted Agent Aria, we collect:

• Account information: the email address you use to request a magic link, and account identifiers from Supabase, our authentication provider.
• Test inputs: website URLs, tasks, and prompts you submit.
• Results we generate for that run, such as screen-reader and keyboard traces, screenshots, scores, and related records stored with your account in Supabase.
• Operational data needed to run the service, including browser sessions in Browserbase, queue data in Redis, application logs on our host, and prompts or result context sent to OpenAI when a summary is generated.

We use this information to authenticate you, run the test you asked for, store results for your account, keep the service reliable, and answer support requests. We do not sell personal information.

We share information with service providers that operate Agent Aria: Supabase (authentication, database, and storage), Browserbase (cloud browsers), OpenAI (summaries), and Heroku (hosting and Redis). We may also disclose information when the law requires it, to protect the rights and safety of Papaya, our users, or others, or as part of a merger, financing, or sale of assets.

We keep account and run records while your account is active, or until you ask us to delete them. We may retain security logs and records we are required to keep. Email ram@papayacomply.ai to request access to or deletion of Agent Aria data.

Agent Aria is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you use Agent Aria from outside the United States, your information may be processed in the United States, where our providers operate.

Contact

Questions about this policy: ram@papayacomply.ai. Questions about Consent Checker data should use the contact on the Consent Checker Privacy Policy.