Privacy Policy

In plain words

We collect what we need to run TestSapien and talk to you. We never sell personal data, track you across sites or use your data to train AI models. Data in your workspace, including test evidence, belongs to you; we process it only on your instructions. Email hello@testsapien.com to see, fix or delete your data.

1. Who we are and what this covers

TestSapien LLC ("TestSapien", "we", "us") provides TestSapien, a service that manages manual test cases and runs automated Playwright tests for software teams. This policy explains how we handle personal data on testsapien.com, in the TestSapien application, and when you contact us.

We handle personal data in two roles:

As a controller for data about our website visitors, prospective customers, and the people who use TestSapien accounts (for example, your name, email and how you use the app). This policy covers that data.
As a processor for personal data our customers put in their workspaces: for example, names in test cases or linked Jira issues, commit authors in connected repositories, and whatever appears in screenshots, videos and traces of the applications they test. We process that data only on our customer's instructions, under our Data Processing Agreement. If your data appears in a customer's workspace, that customer is responsible for it; please contact them first.

2. Personal data we collect

Data you give us

Early access requests and contact: name, work email, company, and anything you write to us.
Account data: name, email address, workspace, role, and sign-in details, handled through our authentication provider.
Billing data: billing contact and address. Card details go directly to our payment processor, Stripe; we never see or store full card numbers.

Data collected automatically

Audit records: who changed people, roles, settings and billing in a workspace, and who started each run, kept because the audit log is part of the product.
Logs: server and security logs, including IP addresses, browser type and request details.

Neither the marketing website nor the app uses analytics or advertising cookies. The website serves its own fonts rather than loading them from a third party.

3. How we use it and our legal bases

To provide the Service: create accounts, sign you in, run tests, store their evidence, send notifications. Legal basis: performance of our contract with you or your organization.
To reply to you, including early access requests. Legal basis: our legitimate interest in responding to business enquiries, or steps you ask us to take before entering a contract.
To bill you. Legal basis: contract, and legal obligations such as tax and accounting.
To secure the Service: detect abuse, investigate incidents, keep audit records. Legal basis: legitimate interests in protecting our customers and systems, and legal obligations.
To send product and service updates to customers. You can opt out of non-essential email at any time.

We do not sell personal data, share it for cross-context behavioral advertising, or use it for automated decisions that have legal or similarly significant effects on you.

4. AI features

TestSapien does not offer AI features yet. Before it does, we will update this policy and our Subprocessors page. We will not use your data, or data in your workspace, to train AI models.

6. Cookies

The TestSapien app uses cookies and similar storage only where they are strictly necessary to sign you in and keep your session secure. The marketing website sets no cookies; it keeps your scroll position in your browser's session storage so the Back button returns you to the same place, and that data is deleted when you close the tab.

7. Where your data is stored

TestSapien is hosted in the United States (Azure East US 2), and our service providers are based in the United States. If your workspace chooses a runner location outside the United States, runs and their evidence are processed there. If you are in the European Economic Area, the United Kingdom or Switzerland, we transfer your data to the United States under the European Commission's Standard Contractual Clauses (with the UK Addendum where relevant) or another lawful transfer mechanism, and require our providers to protect it accordingly.

8. How long we keep it

Account data: while your account is active.
Run evidence (screenshots, videos, traces and logs): for the period your plan includes, from 30 days on Team to one year on Enterprise, as shown on our Pricing page.
Other workspace data, including test cases and audit records: for the life of your subscription, then deleted within 30 days after the 30-day export window, as set out in the DPA.
Early access requests and enquiries that do not lead to a subscription: up to 24 months, unless you ask us to delete them sooner.
Billing records: as long as tax and accounting law requires.
Security and application logs: up to 90 days.

9. How we protect it

We encrypt data in transit and at rest, isolate each workspace's data, keep connection credentials in a secrets vault, limit staff access to what is needed, and record changes in an audit log. More detail is on our Security page. No system is perfectly secure; if a breach affects your personal data, we will notify you as the law requires.

10. Your rights

Depending on where you live, including the European Economic Area, the United Kingdom, California and other US states with privacy laws, you may have the right to:

access the personal data we hold about you and get a copy;
correct inaccurate data;
delete your data;
object to or restrict certain processing;
receive your data in a portable format;
withdraw consent where we rely on it;
opt out of sale, sharing or targeted advertising (we do none of these);
not be treated differently for exercising these rights.

To exercise a right, email hello@testsapien.com. We will verify your request and reply within the time the law requires, usually 30 or 45 days. If we decline, you can appeal by replying to our answer. You may also complain to your local data protection authority. An authorized agent may make a request for you with your signed permission.

For personal data in a customer's workspace, we will pass your request to that customer and help it respond.

11. Do Not Track and Global Privacy Control

We do not track you across other websites and do not allow third parties to do so on our website or in the app, so there is no tracking for a Do Not Track signal to turn off. We treat a Global Privacy Control signal as a request to opt out of the sale or sharing of your personal data; we do neither in any case.

12. Children

TestSapien is a business service and is not directed to children under 16. We do not knowingly collect their personal data.

13. Changes to this policy

We will post any changes on this page with a new effective date. If a change is material, we will also tell customers by email or in the app before it takes effect.

14. Contact

TestSapien LLC, a Wyoming limited liability company. Questions and requests: hello@testsapien.com.