Privacy Policy

01Scope and Roles

This Privacy Policy explains how Autonomy QA collects, uses, discloses, and protects information when you visit our websites, use our application, APIs, agents, documentation, support, or related services.

For account, billing, marketing, and website information, Autonomy QA acts as the controller or business responsible for that information. For personal information contained in customer applications, Test Plans, Runs, screenshots, DOM snapshots, network logs, recordings, prompts, responses, or other customer test artifacts, Autonomy QA generally acts as a processor or service provider on behalf of the customer, unless an applicable agreement says otherwise.

Customers who require a Data Processing Agreement (DPA) covering personal information we process on their behalf can request one from us.

02Information We Collect

We collect information needed to provide, secure, support, and improve the Autonomy QA platform.

• Konto ja organisatsiooni andmed: nimed, töömeiliaadressid, autentimisandmed, organisatsioonide nimed, rollid, kasutajaeelistused, tugisõnumid, salvestatud sisselogimiste kontosildid ning krüpteeritud testkonto mandaadid või sessiooniandmed, mille otsustate salvestada, ja muu sarnane teave.
• Billing information: plan, subscription, invoice, tax, and payment status information. Payment card data is processed by our payment providers and is not stored by Autonomy QA in full.
• Kliendi sisu ja testiartefaktid: testiplaanid, käivituse sammud, siht-URL-id, rakenduse kuvatõmmised, lehe tekst, visuaalsed salvestised, DOM-i tõmmised, võrgumetaandmed, logid, veaväljund, e-posti/SMS-i testitõendid, tööruumi failiteekidesse lisatud failid, mudeli viibad ja vastused ning teenuse osutamisel loodud silumismärkmed.
• Technical and usage data: IP address, device and browser metadata, API usage, feature events, agent performance, latency, token usage, cost metadata, diagnostic logs, and security events.
• Cookies and similar technologies: session, security, preference, analytics, and attribution identifiers as described below.

03How We Use Information

We use information to operate Autonomy QA, including to create and manage accounts, execute Runs, generate reports, maintain Product Graph evidence, provide support, process payments, detect abuse, secure the platform, and comply with legal obligations.

We may use aggregated or de-identified telemetry to improve reliability, agent routing, product quality, and cost controls.

04AI Model Providers and Training

Autonomy QA on tehisintellektipõhine platvorm. Käivituste tegemiseks, tõrgete analüüsimiseks, testiplaanide ja soovituste loomiseks, tõendite klassifitseerimiseks ning aruannete koostamiseks saadame asjakohase testikonteksti kolmandatest isikutest tehisintellekti mudelite pakkujatele ja marsruutimisväravatele, kes tegutsevad meie alltöötlejatena. See kontekst võib hõlmata kuvatõmmiseid, lehe teksti, siht-URL-e, viipasid, vastuseid ja muid tõendeid teie testitavast rakendusest. Vaikimisi tehisintellekti pakkuja on Google Gemini ning käitaja võib kasutada ka OpenRouterit, OpenAI-d, Anthropic-ut või muid pakkujaid, mille te seadistate või mida teie pakett lubab. Kasutatavad pakkujad sõltuvad teie paketist, tööruumi seadistusest ja valitud mudelisuunamisest.

Failid, mille lisate oma tööruumi failiteeki (Seaded → Failid), muudetakse teie testide jaoks otsitavaks. Saadame failinimed, kirjeldused, tüübi- ja suuruseandmed ning, kuni administraatori juhitav säte „Otsi failide seest” on sisse lülitatud, toetatud failisisu Google Gemini API tasulisele tasemele otsingu-embedding’ute loomiseks. Toetatud sisu hõlmab praegu PNG-, JPEG-, WebP- ja esimese kaadriga GIF-pilte, PDF-e mudeli sisendipiiranguni ning tekstifaile nagu CSV, TXT, JSON ja Markdown. Google töötleb seda teavet meie tehisintellekti alltöötlejana ega kasuta seda tasulise API tingimuste kohaselt Google’i mudelite treenimiseks. Failid ise salvestatakse Cloudflare’i teenuses (R2) ning saadud embedding’ud salvestatakse meie Convexi majutatud backend’i; embedding’uid kasutatakse ainult teie tööruumis otsimiseks. Sätte väljalülitamine peatab failisisu saatmise ja kustutab sisust tuletatud embedding’ud; faili eemaldamine kustutab selle embedding’ud.

Kui esitate küsimuse meie veebisaidi, dokumentatsiooni või juhtpaneeli abis, saadame teie küsimuse, kuni neli varasemat küsimust ja vastust samast vestlusest ning meie enda abi- ja dokumentatsioonitekstid Cloudflare Workers AI-le, mis koostab vastuse. Mudel (praegu DeepSeeki avaldatud avatud mudel) töötab Cloudflare'i võrgus, seega teie küsimust DeepSeekile ei saadeta. Cloudflare ei kasuta neid küsimusi mudelite treenimiseks. Cloudflare'i AI Gateway säilitab iga küsimuse ja vastuse logi kuni 7 päeva, mida kasutame kulude kontrollimiseks ja kuritarvitamise vältimiseks. Kasutame teie IP-aadressi umbes minut, et piirata küsimuste arvu. Ärge lisage abiküsimustesse isiku- ega konfidentsiaalset teavet.

We do not use your customer content, test artifacts, or personal information to train foundation models, and we rely on the commercial API terms of our AI model providers, which prohibit them from using data submitted through those APIs to train or improve their models. We will not enable training on your data without your explicit opt-in or a separate written agreement.

You are responsible for limiting the secrets, credentials, and production-sensitive data exposed to Runs. Where feasible, design your Test Plans and test accounts so that highly sensitive values are not transmitted to model providers.

05Data Sharing

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We disclose information only where needed for the Service or where legally permitted.

• Subprocessors: we engage subprocessors to help provide the Service, including AI model providers, email and communications providers, payment processors, analytics and product-telemetry providers, and customer support tools, together with other providers that help us securely host and operate the platform. All subprocessors process information under confidentiality and data-processing terms. A current list of subprocessors is available to customers on request. Customers under a data processing agreement may receive advance notice of material subprocessor changes and may object to a new subprocessor on reasonable data-protection grounds.
• Customer-directed integrations: services you connect, such as CI/CD, repositories, issue trackers, communications tools, identity providers, or test environments.
• Legal and safety disclosures: where required by law, court order, valid legal process, or to protect rights, safety, security, or the integrity of the Service.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

06Data Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, encryption at rest where supported by the underlying service, monitoring, logging, and least-privilege operational practices.

No internet service can guarantee absolute security. Customers are responsible for configuring test environments safely, limiting credentials and secrets exposed to Runs, masking or avoiding production-sensitive data where possible, and using appropriate access controls for their own users.

If we become aware of a personal data breach affecting your information, we will notify affected account owners or administrators without undue delay and provide reasonable assistance to help you meet your own notification obligations.

07Restricted Data

Unless we agree in writing, you must not submit protected health information, payment cardholder data, government identifiers, biometric identifiers, children’s data, export-controlled data, or other highly regulated sensitive data to the Service.

If your use case requires regulated or sensitive data, contact us before using Autonomy QA so we can evaluate whether additional terms, technical controls, or a separate data processing agreement are required.

08Retention and Deletion

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support backups and audit logs.

Customer test artifacts are retained according to your plan, workspace settings, order form, or applicable agreement. Where no specific retention setting applies, we retain artifacts only for as long as needed for the product purpose for which they were collected and then delete or de-identify them in the ordinary course of business.

Kui konto suletakse või kustutamistaotlus täidetakse, kustutame või deidentifitseerime seotud kliendisisu äriliselt mõistliku aja jooksul, tavaliselt 90 päeva jooksul, välja arvatud juhul, kui seadus nõuab pikemat säilitamist. Salvestatud sisselogimise eemaldamine kustutab selle salvestatud sisselogimisoleku ja seotud salvestatud väärtused ning tööruumi faili eemaldamine kustutab selle otsingu-embedding’ud. E-kirjad, mille rollipostkast käivituse ajal sisselogimiseks saab, kustutatakse käivituse lõppedes. Krüpteeritud varukoopiates olevad jääkkoopiad kustutatakse meie tavapärase varukoopiate rotatsioonitsükli käigus.

09International Transfers

We may process information in countries other than where you are located. Some subprocessors, including certain AI model providers, may process data in the United States or other countries.

Where required for transfers out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable), supplemented by data-processing terms and vendor security reviews.

10Your Rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about how your personal information is used. California residents may also have rights to know, delete, correct, opt out of sale or sharing, and limit certain uses of sensitive personal information.

We will not discriminate against you for exercising privacy rights. If your information is controlled by an Autonomy QA customer, we may direct your request to that customer or assist them in responding.

11Cookies and Tracking

Kasutame hädavajalikke küpsiseid autentimiseks, seansihalduseks, turvalisuseks, pettuste ennetamiseks ja eelistuste jaoks. Autonomy Chrome'i laiendus loeb küpsiseid ainult jaotises 12 kirjeldatud viisil. Võime kasutada analüütika- ja omistamistehnoloogiaid, et mõista toote kasutust ning parandada veebisaiti ja Teenust. Küpsiseid saate juhtida oma brauseri seadetes, kuid hädavajalike küpsiste keelamine võib takistada Teenuse osade toimimist.

12The Autonomy Chrome Extension

Autonomy Chrome'i laiendus on valikuline. Sellel on kaks funktsiooni ja kumbki käivitub ainult siis, kui teie selle käivitate:

• Sisselogimise salvestamine või uuendamine. Kui klõpsate Salvesta või Uuenda ja lubate saidi, loeb laiendus selle saidi küpsiseid ja brauserimälu (localStorage ja sessionStorage) ning saadab teie valitud sisselogimisandmed teie Autonomy tööruumi, kus need salvestatakse krüpteeritult Saved Sign-inina.
• Testi salvestamine. Kui salvestate lubatud saidil, salvestab laiendus selle saidi lehtede aadressid, mida külastate, elemendid, millel klõpsate, ja väärtused, mida sisestate, ning saadab need teie tööruumi testisammudena. Sisestatud paroole ei lisata kunagi sammudesse. Laiendus hoiab neid mälus, kuni lõpetate, ja salvestab parooli teie tööruumi ainult siis, kui otsustate selle säilitada Saved Sign-ini või Environmenti saladusena. Salvestamine lõpeb, kui selle lõpetate või kõrvale heidate.

Laiendus loeb ainult teie lubatud saite ja alles pärast seda, kui klõpsate Salvesta, Uuenda või Alusta salvestamist. Loetu saadetakse ainult teie Autonomy tööruumi ning teie brauserisse koopiat ei jäeta. Me ei müü neid andmeid ega kasuta neid reklaamiks, krediidivõime hindamiseks ega laenamiseks ega muuks otstarbeks peale teie testide loomise ja käivitamise. Meie andmekasutus vastab Chrome Web Store'i kasutajaandmete eeskirjadele, sealhulgas piiratud kasutuse (Limited Use) nõuetele.

13Children

Autonomy QA is intended for business users and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us so we can take appropriate action.

14Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by updating this page, changing the date above, and, where appropriate, notifying account owners or administrators.

15Contact Us

If you have questions about this Privacy Policy, your data rights, or our security practices, contact us at:

Ettevõte

Autonomy QA

Attention

Privacy Team

E-kiri

hello@autonomyqa.com