Privacy Policy

Last updated: August 6, 2026

This Privacy Policy describes how Testver (“we”, “us”) collects, uses, and shares information when you use testver.com — our marketing site, your Testver account dashboard, and the prepaid AI credit plans that power Testver's managed AI (together, the “Service”). The self-hosted Testver tool runs on your own infrastructure; this policy covers the account and billing platform, not data inside your own installation.

1. Information we collect

1.1 Information you give us

Account information — name, email address, and password (hashed with a modern memory-hard algorithm; never stored in plaintext). Your Testver account is shared with our support platform at support.testver.com.
Billing information — the plan you purchase, order and invoice identifiers, amount, currency, and payment status. We never see or store your card, UPI, or bank details — payment is handled entirely by our payment processor, Razorpay.
Team information — team name, member email addresses you invite, and per-member credit allocations, when you use a team plan.
Contact-sales submissions — name, work email, company, country, team size, and any details you include when you contact our sales team.
Communication preferences — your activity-email and unsubscribe settings.

1.2 Information collected automatically

Session data — IP address, user agent, and sign-in timestamps, used for session management and to help detect unauthorized access.
Payment context — the IP address, user agent, and approximate location associated with a payment, recorded for fraud prevention and tax purposes.
Approximate location from your IP — used once per visit to suggest your display currency (INR in India, USD elsewhere). We look up the country only; we do not build location profiles.
AI usage metering — the AI credits your account consumes, recorded as usage totals so your dashboard, team pool, and billing stay accurate. Your prompts and test data are not stored by this platform — they flow from your own Testver installation to the AI gateway that serves your requests.
Cookies — see our Cookie Policy.

2. How we use your information

To operate the Service — authenticate you, fulfil plan purchases, meter AI credits, and render your dashboard.
To send transactional email — receipts, plan and credit notifications, security alerts, and team activity (activity emails are opt-out).
To protect the Service — prevent free-tier abuse, detect fraud, enforce rate limits, and respond to security incidents.
To improve the Service — aggregated usage and revenue reporting that does not target individuals.

We do not sell your personal information, use it for targeted advertising, or share it with ad networks.

3. How we share your information

Payment processing — Razorpay processes your payments; the details you enter at checkout go directly to them under their privacy policy.
AI gateway — we provision a metered key for your account with our AI gateway provider so your Testver tool can reach AI models; the provider sees the requests your tool sends and reports usage totals back to us.
Service providers — cloud hosting (Google Cloud), transactional email delivery, and IP-to-country lookup. These providers process information only on our instructions.
Your team — if you join a team, its owner and admins can see your email, allocation, and credit usage within the team.
Legal requirements — we may disclose information if required by law or to protect the rights, property, or safety of Testver, our users, or others.
Business transfers — if Testver is acquired or merged, your information may transfer to the successor; we will notify you in advance.

4. Data retention

Account data is retained for as long as your account is active.
Payment and invoice records are retained as required by applicable tax and accounting law, even after account deletion.
Session and refresh-token records are retained until they expire or are revoked.
Aggregated usage history is retained for reporting; it does not contain your prompts or test content.

5. Security

HTTPS is enforced for all traffic.
Passwords are hashed with a memory-hard, brute-force-resistant algorithm.
Session tokens are HttpOnly cookies with the Secure and SameSite attributes; refresh tokens rotate on every use and token reuse triggers full session revocation.
AI keys are stored encrypted and can be rotated at any time.
Two-factor authentication (TOTP) is available for your account.

6. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your account and associated data (subject to the retention rules above).
Object to specific uses of your data, or withdraw consent where consent applies.

To exercise any of these rights, email support@testver.com.

7. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

8. International transfers

The Service is hosted in Google Cloud data centers. By using it, you understand that your data may be processed in countries other than your own, which may have different data protection laws.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version here and update the “Last updated” date; material changes will be notified by email.

10. Contact us

Questions, requests, or complaints? Email support@testver.com.