Privacy Policy

Who we are

Testfolk (testfolk.co) runs virtual AI website testing. For the data described here we are the controller. Contact: privacy@testfolk.co.

What we collect

• Account details — your name, email address and password hash, so you can sign in and we can reach you about your tests.
• Test details — the web address you test, your written brief, the testers you pick, the ownership confirmation you sign (your name and the date), and the site verification code and result.
• Payment records — amount, currency, status and a Stripe reference. Card numbers are handled by Stripe and never reach us.
• Test activity — tester run transcripts, screenshots or evidence links produced during a test, mail received at the tester addresses used for your test, and the AI-written feedback.
• Technical logs — errors and basic request data needed to keep the service working and secure.

We do not sell or share personal information for cross-context behavioural advertising, and we run no advertising trackers. We do not knowingly collect data from children under 16.

Why we may use it (legal bases)

To perform our contract with you (running your tests, taking payment, sending you the results); for our legitimate interests (security, fraud prevention, improving the service); and to meet legal obligations (tax and accounting records). Where we rely on consent — for example optional product emails — you can withdraw it at any time.

Who processes it for us

Lovable Cloud (hosting, database, authentication), Stripe (payments), Mailgun (sending and receiving mail for tester addresses and notifications), Browser Use (hosted browser automation that runs the testers), and AI model providers accessed through the Lovable AI Gateway (writing the tester feedback). Your brief and the pages a tester sees may be sent to those AI providers to produce the feedback. Each acts under contract and only on our instructions. Some are in the United States; transfers out of the EEA/UK rely on Standard Contractual Clauses.

How long we keep it

Account and test records for as long as your account is open, then up to 12 months. Payment records for 7 years, as tax law requires. Tester mail and run transcripts for 12 months. Delete your account and we remove your personal data on the schedule above, except what we must legally keep.

Your rights

If you are in the EU/UK you may request access, correction, deletion, restriction, portability, or object to processing, and you may complain to your data protection authority. If you are in California you may request to know, delete, or correct your personal information, and you may not be discriminated against for asking; we do not sell it, so there is nothing to opt out of. Email privacy@testfolk.co and we will respond within 30 days. We verify requests against the email on the account.

Security and cookies

Data is encrypted in transit, access is limited to what each service needs, and database rules keep your tests visible only to you and to admins. We set only the cookies and local storage needed to keep you signed in — no advertising or analytics cookies.

A note on tester identities

Tester names, ages, cities and interests are invented character briefs, not real people's data. Their avatars come from DiceBear (Notionists, CC0). Any resemblance to a real individual is coincidental — tell us and we will change it.

Changes

We will post updates here with a new date, and email you if a change materially affects your rights.