Legal

Privacy policy

Last updated 10 November 2026

QAFind provides QA review, test evidence and hosted test runs. This policy explains the data we process and why.

Data we collect

• Account data: name, email, password hash, workspace and API-key metadata.
• GitHub data: installation identifiers, repository names, pull-request diffs, comments and review results needed to provide the review service.
• Run data: workflows, target URLs, step results, screenshots and request logs from tests you choose to run.
• Billing data: Stripe customer and subscription identifiers, plan and billing status. Card data is handled by Stripe, not stored by us.
• Operational logs: request metadata and errors used for security and reliability.

Why we process it

To provide and secure the service, enforce plan limits, prevent abuse, bill paid plans, and meet legal obligations. We do not sell personal data or use it for advertising.

Processors

We use infrastructure providers to host the service, Stripe for payments, and configured model providers to generate review findings. Credentials for model providers are held server-side and are never sent to browsers.

Retention

Run and review records follow the workspace retention settings and a bounded default. Account data is kept while the account is active and for a reasonable period afterwards for legal and security purposes. Backups are rotated.

Your rights

You can request access, correction or deletion of your account data by contacting privacy@qafind.si. Deleting a workspace removes its runs and review records subject to backup rotation and legal retention.

Contact

Privacy questions: privacy@qafind.si.