Privacy Policy

Aditya Mitra operates Testly. Privacy questions and requests can be sent to support@testlyagent.com.

The public site at testlyagent.com sets no cookies, runs no analytics and serves its own fonts; it only links to the customer application and external sources. The customer application at app.testlyagent.com handles accounts, runs and billing.

Google sign-in supplies your account identity, name, email address and profile image. Authentication uses session cookies on the customer application and stores account/session records. Google also serves the fonts used by the customer application. We do not ask for a separate Testly password.

We process submitted website URLs, instructions, expected outcomes, supplied values, browser observations, screenshots and reports to execute your checks. Authorized form submissions may send supplied or generated data to the website being tested. Submit only information you are entitled to use.

OpenRouter and the selected model providers process the bounded model requests needed for execution. DeepSeek runs the browser Driver and the Verifier, so it receives your instructions and observed page content. Qwen (Alibaba Cloud), via OpenRouter, receives page screenshots with a question about them when a visual check matters; screenshots are held in memory only, never retained, and never taken after a sensitive supplied value has been typed. Sensitive supplied form values are handled in transient memory where possible and masked from retained run content; execution may still send them to the website you requested.

Cloudflare hosts the public site, the customer application and network services. OVHcloud hosts PostgreSQL, browser execution, administration and private object storage (RustFS). Resend handles existing service and support email. Dodo Payments processes paid checkout, billing identity, payment details, tax, invoices and recovery as merchant of record under its own policies. Testly does not retain payment card credentials in its billing records.

Run content follows the ordinary 30-day history retention and can be deleted earlier. Active deletion first fences execution and completes physical cleanup after the browser is stopped. Content-free accounting and replay-prevention records can outlive run content; they do not contain test prompts, URLs or screenshots.

While your account exists, we retain linked billing records for billing, support, fraud prevention and reconciliation. If you delete your account, we retain complete linked billing records for 24 months from the original account-deletion date. These include billing identity and provider-customer mapping, subscription and plan-change history, checkout and operation quotes, payments and invoice details, refunds, disputes, provider event payloads and processing history, grants, holds, consumption, returns, and admin audit history. Late events do not extend this deadline. Access is restricted to billing, support and reconciliation; these records cannot restore your login or purchases.

At that deadline we purge billing identity and full billing records, keeping only minimal opaque or hashed replay-prevention tombstones for retired requests, events, customers, subscriptions and payments. A new signup is a new account. Dodo retains its own invoices and records under its separate policies.

Run prompts, URLs, screenshots, session cookies and credentials are not billing records and are not kept for the 24-month billing policy. Support email follows its separate correspondence lifecycle and is retained until explicitly deleted by an authorized administrator.

We use these records to deliver and secure Testly, process purchases, investigate issues and honor deletion. Our service providers may process data in other countries. Contact support to request access, correction or deletion of your personal information. We update this page when our processing changes.