Privacy Policy

1. Information We Collect

Account information: your name, email, workspace/company name, and password (stored hashed) when you create a workspace.

Target Application data: to provide the Service, we access, crawl, and run tests against the web application you connect. We process the pages, structure, form fields, and content the Service observes in order to generate and run tests. You control which application you connect.

Test credentials: if you provide credentials or a captured session for a test user, we store these secrets in encrypted form and use them only to operate the Service on your behalf.

Usage and telemetry: how you use the Service, including tests, runs, results, token consumption, feature usage, log data, device and browser information, and IP address.

Payment information: subscriptions and top-ups are processed by PayPal. We do not store full payment card or bank details; we receive limited transaction and subscription status information from our processor.

Communications: information you provide when you contact us or submit an enterprise inquiry (such as name, email, company, and message).

2. How We Use Information

We use information to:

• provide, operate, secure, and improve the Service, including generating, running, and healing tests;
• process subscriptions, tokens, and payments, and prevent fraud and abuse;
• communicate with you about your account, support requests, and enterprise inquiries;
• monitor performance, debug, and develop new features; and
• comply with legal obligations and enforce our Terms.

We may create aggregated, de-identified data that does not identify you or your Target Application, and use it to operate and improve the Service.

3. AI Processing

The Service uses third-party AI model providers to generate test code, suggestions, and summaries. To do this, relevant context (such as observed page structure and instructions) may be sent to those providers to return output. We do not sell your data, and we work to limit what is shared to what is needed to provide the Service.

4. How We Share Information

We do not sell your personal information. We share information only with:

• service providers/processors that help us run the Service (for example, cloud hosting, our payment processor PayPal, and AI model providers), under obligations to protect it;
• authorities or third parties where required by law, to protect rights and safety, or to prevent fraud or abuse; and
• a successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Data Retention

We retain information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal, accounting, or security obligations. You can request deletion of your account and associated data as described below. Please export anything you need before deleting your workspace.

6. Security

We use reasonable technical and organizational measures to protect information, including encryption of stored test credentials and access controls. No system is completely secure; you are responsible for using appropriately scoped, dedicated test accounts and for keeping your own credentials safe.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can manage much of your data in the Service, and you can contact us to exercise these rights. We will respond consistent with applicable law.

8. International Transfers

We and our providers may process information in countries other than yours. Where required, we use appropriate safeguards for such transfers.

9. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice (for example, by posting the updated Policy with a new effective date or notifying you in-app).

11. Contact

Questions or requests about this Policy can be sent to privacy@testvault.app.