PRIVACY POLICY

FastTest (“fasttest.ai,” “we,” “us,” or “our”) operates the FastTest platform, including the website at fasttest.ai, the FastTest dashboard, and the FastTest MCP server (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

Account Information. When you create an account, we collect your name, email address, and authentication credentials (managed via our third-party authentication provider, Clerk).

Organization Data. We collect organization names, API keys (stored as irreversible SHA-256 hashes), and billing plan information.

Test Data. When you use FastTest, we collect test case definitions, test execution results, screenshots, browser interaction logs, selector healing patterns, and associated metadata. This may include URLs, page content, and DOM structures of the websites you test.

Usage Data. We automatically collect information about how you interact with the Service, including IP addresses, browser type, operating system, referring URLs, pages viewed, and timestamps.

Device Information. We may collect information about the device you use to access the Service, including hardware model, operating system version, and unique device identifiers.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and execute test cases on your behalf
• Generate AI-powered test suggestions and healing patterns
• Send test execution data to third-party LLM providers for AI-powered features
• Enforce billing quotas and usage limits
• Improve, personalize, and expand our Service
• Communicate with you about updates, security alerts, and support
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with legal obligations

We share your information with third parties in the following circumstances:

• LLM Providers. Test data, including page content and DOM structures, may be sent to third-party AI/LLM providers (such as OpenAI, Anthropic, Azure OpenAI, and Together AI) for test generation and healing features. These providers process data according to their own privacy policies.
• Authentication. We use Clerk for authentication services. Clerk processes your login credentials and session data per their privacy policy.
• Infrastructure. We use Microsoft Azure, Cloudflare, and Amazon S3 for hosting, CDN, and storage services.
• Analytics and Monitoring. We may use Sentry for error tracking and performance monitoring.
• Legal Requirements. We may disclose your information if required by law, subpoena, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

We retain your data for as long as your account is active or as needed to provide the Service. Test execution history is retained according to your plan tier (3 days for Free, 90 days for Pro). We may retain certain information as required by law or for legitimate business purposes, including dispute resolution and enforcement of our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

We implement commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), hashed API keys, and access controls. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

We use cookies and similar technologies for session management, authentication, and analytics. Essential cookies are required for the Service to function. You can control cookie preferences through your browser settings, but disabling cookies may affect functionality.

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to such transfers.

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us at:

[email protected]