Privacy Policy

We collect information in three ways: what you give us directly, what we collect automatically, and what we receive from third parties.

Information you provide. Account details (name, email address, password), billing information (processed by our payment provider, not stored on our servers), workspace and team data, support and contact form submissions, and any test scripts, recordings, or configuration data you upload to run automated tests.

Information collected automatically. Usage data about how you interact with the Service, and cookies or similar tracking technologies as described in Section 5.

Information from third parties. If you sign in via a third-party identity provider (e.g., Google or GitHub) or connect an integration (e.g., a CI/CD pipeline or issue tracker), we receive the profile and account information that provider shares with us based on your permissions.

We use the information we collect to:

• Provide, operate, and maintain the Service, including running and storing your automated tests;
• Create and manage your account, and authenticate access to your workspace;
• Process payments and send billing-related communications;
• Send service updates, security alerts, and administrative messages;
• Respond to support requests and communications you send us;
• Monitor and analyze usage trends to improve the Service's performance and reliability;
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity; and
• Comply with legal obligations.

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following: performance of a contract (providing the Service you signed up for), legitimate interests (improving and securing the Service), consent (e.g., for optional marketing communications or non-essential cookies), and compliance with legal obligations.

We do not sell your personal information. We may share information with:

• Service providers who perform functions on our behalf, such as cloud hosting, payment processing, analytics, customer support tooling, and email delivery — bound by contractual confidentiality obligations;
• Integrations you enable, such as CI/CD platforms, issue trackers, or version control systems you explicitly connect to your workspace;
• Legal and safety purposes, where required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, property, or safety of TestOwl, our users, or the public; and
• Business transfers, such as a merger, acquisition, or sale of assets, subject to standard confidentiality arrangements.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. Essential cookies are required for the Service to function and cannot be disabled. Analytics cookies help us understand aggregate usage patterns. You can control non-essential cookies through your browser settings or any in-product cookie preferences we provide.

We retain personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Test artifacts (recordings, logs, run history) are retained according to the retention settings available in your plan, and are deleted or anonymized after account closure except where retention is required by law.

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and routine security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may process and store information in countries other than your own. Where required, we rely on appropriate safeguards — such as standard contractual clauses — to ensure your information receives an adequate level of protection wherever it is processed.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information; object to or restrict certain processing; and withdraw consent where processing is based on consent. You can exercise most of these rights directly from your account settings, or by contacting us as described in Section 12. We will respond to verifiable requests within the timeframe required by applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Effective” date above. Material changes will be communicated through the Service or by email where appropriate.

If you have questions about this Privacy Policy or how we handle your information, please contact us and we'll get back to you.