TestForge ("we", "us", or "our") operates the TestForge platform and website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
1. Information We Collect
Account Data. When you create an account, we collect your name, email address, and authentication credentials. If you sign up via GitHub OAuth, we receive your GitHub username, avatar, and public profile information.
Usage Data. We automatically collect information about how you interact with our service, including pages visited, features used, test generation requests, and performance metrics.
Repository Data. When you connect a GitHub repository, we access source code, commit history, and pull request data solely to generate and run tests on your behalf. We do not store your source code beyond the duration needed for analysis.
Cookies. We use essential cookies for authentication and session management, and optional analytics cookies to understand how our service is used.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the TestForge platform
- Generate AI-powered tests and analyze your codebase
- Process payments and manage your subscription
- Send transactional emails (account confirmations, billing receipts, security alerts)
- Respond to your support requests and inquiries
- Monitor and prevent fraudulent or unauthorized activity
- Comply with legal obligations
3. Data Sharing and Third Parties
We do not sell your personal data. We share information only with the following categories of third parties, and only as necessary to operate our service:
- Stripe — for payment processing and subscription management
- GitHub — for repository access and OAuth authentication
- Anthropic — for AI-powered code analysis and test generation (code snippets are sent for analysis and not retained by Anthropic)
- Analytics providers — for aggregated usage analytics (no personally identifiable information is shared)
- Cloud infrastructure providers — for hosting and data storage
4. Data Security
We implement industry-standard security measures to protect your data, including encryption at rest and in transit (TLS 1.3), secure credential storage using bcrypt hashing, regular security audits, and access controls based on the principle of least privilege. While no system is 100% secure, we are committed to protecting your information and promptly addressing any security incidents.
5. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request that we correct any inaccurate or incomplete data
- Deletion — request that we delete your personal data, subject to legal retention requirements
- Export — receive a portable copy of your data in a structured, machine-readable format
- Objection — object to certain processing activities, including direct marketing
7. Data Retention
We retain your account data for as long as your account is active. Usage data and logs are retained for up to 12 months. When you delete your account, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).
8.Children's Privacy
TestForge is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on our website. Your continued use of the service after the changes take effect constitutes your acceptance of the revised policy.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email: privacy@testforge.dev