Privacy Policy

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for early access or schedule a demo
• Create an account with Qate AI
• Contact us for support or inquiries
• Subscribe to our newsletter or marketing communications

This information may include:

• Name and contact information (email address, phone number)
• Company name and job title
• Account credentials and preferences
• Payment information (processed securely through third-party providers)

1.2 Usage Data

We automatically collect certain information when you use our platform:

• IP address and device information
• Browser type and version
• Pages visited and time spent on our platform
• Test execution logs and performance metrics
• Feature usage and interaction patterns

1.3 Testing Data

When you use our AI testing services, we may collect:

• Application screenshots and UI element data (processed locally when possible)
• Test scenarios and workflow configurations
• Test results and performance metrics
• Error logs and debugging information

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Provision

• Provide and maintain our AI testing platform
• Execute automated tests and generate reports
• Authenticate users and maintain account security
• Process payments and manage subscriptions

2.2 Service Improvement

• Analyze usage patterns to improve our AI algorithms
• Develop new features and enhance existing functionality
• Monitor system performance and troubleshoot issues
• Conduct research and development for better testing capabilities

2.3 Communication

• Send important service updates and security notifications
• Provide customer support and technical assistance
• Send marketing communications (with your consent)
• Respond to your inquiries and feedback

3. Data Security and Protection

3.1 Security Measures

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data transmission
• Secure cloud infrastructure with regular security audits
• Access controls and authentication mechanisms
• Regular security training for our team members
• Incident response procedures and monitoring systems

3.2 Data Processing Location

Your data is primarily processed:

• Locally on your devices when using desktop testing features
• On secure cloud servers located primarily in the European Union
• Through encrypted connections to ensure data integrity and GDPR compliance
• With limited processing in other regions only when necessary for service delivery, with appropriate safeguards

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

• Trusted third-party vendors who assist in operating our platform
• Payment processors for billing and subscription management
• Cloud hosting providers with appropriate data protection agreements

4.2 Legal Requirements

• When required by law or legal process
• To protect our rights, property, or safety
• To investigate potential violations of our terms of service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

5. Your Rights Under GDPR

5.1 Your Legal Rights

As a data subject under GDPR, you have the following rights:

• Right of Access - Request access to your personal data and information about our processing
• Right to Rectification - Request correction of inaccurate or incomplete personal data
• Right to Erasure - Request deletion of your personal data under certain circumstances
• Right to Restrict Processing - Request limitation of processing in specific situations
• Right to Data Portability - Receive your personal data in a structured, machine-readable format
• Right to Object - Object to processing of your personal data for direct marketing or legitimate interests
• Right to Withdraw Consent - Withdraw consent for processing based on consent at any time
• Right to Lodge a Complaint - File a complaint with your local data protection authority

5.2 Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in Section 10. We will respond to your request within one month, or two months for complex requests, and provide clear information about any actions taken.

5.3 Data Retention

• Account data: Retained while your account is active and for 3 years after account deletion for legal compliance
• Testing data: Retained according to your subscription plan (30 days to 1 year) and deleted automatically thereafter
• Usage analytics: Aggregated and anonymized, retained for 2 years for service improvement
• Legal compliance data: Retained as required by applicable European laws (typically 7 years for business records)

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Provide personalized content and recommendations
• Ensure platform security and prevent fraud

You can control cookie settings through your browser preferences, though some features may not function properly if cookies are disabled.

7. Children's Privacy

Qate AI is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take immediate steps to delete it.

8. International Data Transfers

As a European-based company, we primarily process your data within the European Economic Area (EEA). When we do transfer personal data outside the EEA, we ensure adequate protection through:

• Adequacy Decisions - Transfers to countries with adequate data protection as determined by the European Commission
• Standard Contractual Clauses - EU-approved contractual terms with third-party processors
• Binding Corporate Rules - Internal data protection policies for multinational service providers
• Explicit Consent - Your specific consent for transfers when other safeguards are not available

We regularly review and update our transfer mechanisms to ensure ongoing compliance with European data protection standards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying prominent notices in our platform

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: