Privacy Policy

1. Introduction

Your privacy is important to us. This Privacy Policy explains how SolvionIT (OPC) Private Limited, operating under the brand TestKase, collects, uses, discloses, and protects your personal information when you use our test management platform accessible at https://testkase.com.

By accessing or using TestKase, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

2. Scope of Policy

This Privacy Policy applies to all users and visitors of the TestKase web application, including individuals who create accounts, use our services, or interact with our website. It governs the data collected through our online platform and associated services. It does not apply to any third-party websites or services that may be linked from our application.

3. Information We Collect

We collect only the information necessary to provide and improve our services:

3.1 Account Information

When you create an account, we collect:

• Full name (first name and last name)
• Email address
• Password (stored as a bcrypt hash — we never store plain-text passwords)
• Organization name (when creating an organization)
• Profile picture (when signing up via Google or Microsoft OAuth)

3.2 Payment Information

Payment processing is handled entirely by Razorpay. We do not store your credit card numbers, bank account details, or other sensitive financial information. We only store your billing email address and subscription status to manage your account.

3.3 Usage Data

We automatically collect certain information when you use our service:

• Pages visited and actions performed within the application
• Browser type and version
• IP address
• Timestamps of interactions
• Device and operating system information

3.4 Cookies & Tracking Technologies

We use session cookies to maintain your authentication state, Google Analytics for usage analytics, and Google reCAPTCHA for bot prevention during signup and certain form submissions.

3.5 AI Feature Data

If you opt in to our AI-powered features (with client approval required), your test-related data may be sent to third-party large language model (LLM) providers for processing. This data is not used for model training by us or our LLM providers. AI features are optional and clearly indicated in the application.

3.6 Integration Data

When you connect third-party integrations (such as Jira), we access only the data you authorize. Integration data is used solely to provide the requested functionality and is not shared with other third parties.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and maintain the TestKase platform
• Personalize and improve your user experience
• Analyze usage patterns to enhance platform performance and features
• Process subscription payments and manage billing
• Send transactional emails (verification, password reset, account notifications)
• Detect and prevent fraud, abuse, or security threats
• Power optional AI features (with your explicit consent)
• Provide customer support

5. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal information. We share limited data only with the following trusted third-party service providers who help us operate our platform:

• Razorpay — Payment processing (billing and subscription management)
• SendGrid — Transactional email delivery (verification emails, password resets, notifications)
• Google Analytics — Usage analytics and platform improvement
• Vercel — Frontend hosting and content delivery
• Railway — Backend hosting and infrastructure
• LLM Providers — AI feature processing (no model training on your data)

We may also disclose your information when required by law, regulation, or legal process, or in connection with a merger, acquisition, or sale of assets.

6. Data Retention

We retain your personal data as follows:

• Account data: Retained for the duration of your active account
• After account deletion: Personal data is purged within 30 days of account deletion
• Usage logs: Retained for up to 12 months for analytics and security purposes

7. Data Security

We implement industry-standard security measures to protect your data, including:

• TLS/SSL encryption for all data in transit
• Bcrypt hashing for password storage
• Role-based access controls within the application
• Regular security audits and monitoring

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Request that we limit the processing of your data
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to the processing of your personal data

To exercise any of these rights, please contact us at connect@testkase.com. We will respond to your request within 30 days.

9. International Data Transfers

Our hosting providers (Railway for backend, Vercel for frontend) may process and store data in locations outside your country of residence. By using TestKase, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. Cookies Policy

We use the following types of cookies:

• Essential cookies: Required for authentication and core platform functionality
• Analytics cookies: Used by Google Analytics to understand usage patterns and improve the platform
• Security cookies: Used by Google reCAPTCHA to prevent automated abuse

You can control or disable cookies through your browser settings. Please note that disabling essential cookies may prevent you from using certain features of the platform.

11. Children's Privacy

TestKase is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us immediately and we will take steps to remove that information.

12. Third-Party Links

Our website or application may contain links to external websites. We are not responsible for the content, privacy practices, or policies of any third-party sites. We encourage you to review the privacy policy of any external site you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Updates will be posted on this page with a new effective date. For material changes, we will notify you via email or through a prominent notice on the platform.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: