Who we are
Testapp is run by [Company legal name], [Street, city, province or state, postal code, country]. We are responsible for the personal information described here. [Name or title of the person responsible for privacy] is accountable for how we handle it; write to privacy@example.com.
What we collect
- Your account: your name, email address and password (stored only as a one-way hash), and, if you add them, a phone number, a profile picture and passkeys.
- What you put in the service: the content you and the people you work with create, and the files you upload.
- Billing: your plan, your invoices and a billing address. Card details go straight to our payment provider; we never see or store the card number.
- Security records: when and where you sign in (device, browser and IP address), so you can review your sessions and we can protect your account.
- Messages: the email, text and in-app notifications we send you, and the preferences you set for them.
Why we use it
To provide the service you signed up for, keep your account secure, take payment for a paid plan, send you the messages you have chosen to receive, answer you when you write to us, and meet our legal obligations. We do not sell your personal information, and we do not use it for advertising.
Cookies
We use only the cookies the service needs to work: one that keeps you signed in, and one that protects your forms from forgery. Your light or dark theme is remembered in your own browser, not sent to us.
Where it is kept, and who helps us
These services handle personal information for us, under contract, only to do the job described:
| Service | What it does | What it handles | Where |
|---|---|---|---|
| OVHcloud | Hosts the service, its database and the files you upload. | Everything you keep in the service. | [Country where your servers are] |
| Postmark | Sends our email. | Your email address and the email we send you. | United States |
Where a service is outside your country, your information may be accessed by that country's courts and authorities under its laws.
How long we keep it
- Your account and content, for as long as you use the service.
- Sign-in and security records, 90 days.
- Notifications you have read, 90 days; unread ones, a year.
- An organisation its owner deletes can be restored for 30 days, then is removed for good, except its invoices and audit records, which we keep as long as the law requires.
- An account that was never verified, 7 days.
Your rights
You can see and correct your account details in the app at any time, and close your account from Settings. You can also ask us for a copy of the personal information we hold about you, to correct it, or to delete it; write to privacy@example.com and we will answer within 30 days. If you are not satisfied with our answer, you can complain to the privacy regulator where you live.
Children
The service is not meant for children under 16, and we do not knowingly collect their information.
Changes to this policy
When we change this policy we will update the date at the top, and tell you in the app or by email before a change that matters takes effect.
Contact
[Name or title of the person responsible for privacy], [Company legal name], [Street, city, province or state, postal code, country]. Email privacy@example.com.