Privacy Policy

1. Information We Collect

1.1 — Information You Provide for a QA Audit

• Contact information: Your name, email address, and (if provided) phone number
• Website URL: The URL you submit for testing
• Billing information: Payment details processed and stored by Stripe, our PCI-compliant payment processor — we never receive or store full payment card numbers
• Support communications: Messages, questions, or complaints you send via email or our support page
• Discount codes: Any promotional codes you redeem at checkout

1.2 — Information You Provide to Request a Developer Referral

If you submit a "Need a Website" request, we collect information necessary to match you with an appropriate partner developer, which may include your project requirements, industry, estimated budget, preferred timeline, and contact information.

1.3 — Information Submitted by Partner Developers

If you apply to join our developer referral network, we collect the information submitted on your Partner Developer Application, which may include:

• Business name and contact information
• Portfolio website
• Areas of expertise and years of experience
• Platforms and technologies you work with
• Typical project budgets you accept
• Availability
• Your other application responses (including your short bio, if provided)

1.4 — Information Collected Automatically

• IP address: Used for free-scan rate limiting, fraud detection, and security
• Geographic location: Approximate location derived from IP address (country and region level only)
• Browser and device information: Browser type and version, operating system, device type
• Usage data: Pages visited on our website and general site interaction, used to understand how our marketing pages and forms perform

1.5 — Website Scan Data (QA Audits)

When you submit a URL for a QA Audit, we access only publicly available webpages requested by the customer to perform the requested quality checks — we do not access private, password-protected, or restricted areas of any website. During this process we may collect:

• HTTP response headers and status codes
• Page structure metadata (DOM element counts, script counts, image dimensions)
• Performance timing data (load times, response times)
• SSL certificate metadata (issuer, expiry date)
• Publicly observable SEO signals (title tags, meta descriptions, heading structure)
• Screenshots of the scanned page, used to illustrate findings in your report

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: Running your QA Audit and generating and delivering your PDF/Excel report
• Referral matching: Reviewing "Need a Website" requests and introducing you to one or more partner developers who may be a good fit
• Developer network management: Reviewing Partner Developer Applications and managing our developer network
• Payment processing: Charging QA Audit fees (a one-time purchase — we do not currently offer subscriptions) and processing refunds through Stripe
• Transactional communications: Sending your QA Audit report, billing receipts, order confirmations, referral-related emails, and security alerts
• Customer support: Responding to your support requests and resolving disputes
• Service improvement: Analyzing aggregated, anonymized data to improve our testing engine, report accuracy, and website performance
• Fraud and security: Detecting and preventing unauthorized access, abuse, and fraudulent activity
• Rate limiting: Using IP addresses to enforce free scan limits (one per IP per 24 hours)
• Legal compliance: Meeting our obligations under applicable law and responding to lawful legal process

Marketing Emails

We do not currently send newsletters, promotional emails, or product-update marketing campaigns. The emails we send are transactional — related to your QA Audit, referral request, developer application, or support inquiry. If that changes in the future, any marketing email will include a clear way to opt out, and we will only send marketing communications with your consent where required by applicable law.

3. How We Share Your Information

3.1 — Service Providers

We use trusted third-party service providers for hosting, payment processing, email delivery, and infrastructure. These providers are contractually bound to use your data only to perform services on our behalf and may not use it for their own purposes. Since you interact with it directly at checkout, we'll name it specifically: we use Stripe for payment processing. If we change any underlying provider, that change will not affect the commitments made in this Policy.

3.2 — Referral Communications

With your request, we may share your contact information and project details with selected partner developers for the purpose of facilitating your requested introduction. Once introduced, any further communication and any agreement for development work happens directly between you and that developer — TestPulseQA is not a party to it.

3.3 — Legal Requirements

We may disclose your information when required by law, valid court order, subpoena, or other legal process. We may also disclose information where we reasonably believe disclosure is necessary to protect the rights, property, or safety of TestPulseQA, our users, or the public, or to detect, prevent, or address fraud, security, or technical issues.

3.4 — Business Transfers

In the event of a merger, acquisition, sale of assets, or similar corporate transaction, your information may be transferred to the acquiring entity. Where required by law, we will notify you via email and a prominent notice on our website in advance of any such transfer.

3.5 — With Your Consent

We may share your information with third parties in other circumstances where you have provided explicit consent.

4. Data Retention and Deletion

4.1 — Retention Periods

• QA Audit reports and related project data: Retained for twelve (12) months from the date of the audit, then permanently deleted
• Scan data (temporary page data used to generate your report): Deleted within twenty-four (24) hours of report delivery
• "Need a Website" referral requests: Retained for twelve (12) months from the date of the request, then deleted, unless an active referral relationship requires longer retention
• Partner Developer Applications — approved developers: Retained for the duration of the developer's active participation in our network, plus twenty-four (24) months after their last referral or contact, then deleted
• Partner Developer Applications — rejected developers: Retained for twelve (12) months from the date of rejection, then deleted
• Partner Developer Applications — inactive/deactivated developers: Retained for twenty-four (24) months from the date of deactivation, then deleted
• Billing and payment records: Retained for seven (7) years as required by financial recordkeeping regulations
• Support communications: Retained for three (3) years for dispute resolution and quality assurance purposes

4.2 — Requesting Deletion

You may request deletion of your personal data at any time by emailing [email protected] with the subject line "Data Deletion Request." We will process your request within thirty (30) days and confirm deletion by email. Note that we will retain data we are legally required to keep (such as billing records) even after a deletion request.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of all data in transit using TLS 1.2 or higher
• Payment data handled exclusively by Stripe, which is PCI DSS Level 1 compliant — we never handle or store full card numbers
• Access controls limiting employee and contractor access to personal data on a strict need-to-know basis
• Access to personal information is limited to authorized personnel who require such access to operate our business
• Regular review of security practices and provider certifications

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. In the event of a data breach affecting your personal information, we will notify you as required by applicable law — within seventy-two (72) hours where required under applicable regulations.

6. Cookies and Tracking Technologies

6.1 — Types of Cookies We Use

Because TestPulseQA does not use customer accounts or logins, our cookie use is minimal. We use:

• Essential cookies: Required for the Service to function, such as security tokens that protect our forms against abuse. These cannot be disabled without breaking parts of the Service.
• Analytics cookies: Anonymized data to help us understand how visitors interact with our website, so we can improve pages and fix issues. These do not identify you personally.
• Security cookies: Help us detect and prevent fraud, abuse, and automated attacks against our forms and checkout process.

6.2 — Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Disabling analytics or security cookies will not prevent you from browsing our website, though it may affect our ability to protect the Service from abuse.

We do not use third-party advertising cookies or share cookie data with ad networks.

7. Scanning Activity and Third-Party Websites

When you submit a URL for a QA Audit, our systems access that URL to perform quality checks on your behalf. This section describes how we handle the data of the websites being scanned.

What we access: We access only publicly available webpages requested by the customer — pages accessible to any web browser without authentication or special permission. We do not access private, password-protected, or restricted areas of any website.

What we collect from scanned sites: We collect only structural and performance metadata (HTTP headers, timing data, DOM structure, link lists, image dimensions). We do not collect or store the text content, images, personal data, or copyrightable material of scanned websites beyond what is structurally necessary to generate your report.

Data of website visitors: Our scanning activity does not involve or expose the personal data of visitors to the scanned website. We do not access analytics data, user databases, or any backend systems of scanned websites.

User responsibility: By submitting a URL you represent that you have the legal authority to authorize testing of that website. If you submit a URL belonging to a third party without authorization, you are solely responsible for any legal consequences.

8. Your Rights

Depending on your location, you may have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete personal data
• Deletion: Request deletion of your personal data (subject to legal retention requirements — see Section 4)
• Portability: Request your personal data in a structured, machine-readable format
• Restriction: Request that we restrict processing of your data in certain circumstances
• Objection: Object to our processing of your data for certain purposes
• Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, email [email protected] with the subject line "Privacy Rights Request." We will acknowledge receipt within five (5) business days and complete your request within thirty (30) days. We may ask you to verify your identity before processing certain requests.

We will not discriminate against you for exercising your privacy rights. Exercising your rights will not affect the quality of service you receive.

9. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information in addition to those described in Section 8.

9.1 — Right to Know

You have the right to request that we disclose: (a) the categories of personal information we collect; (b) the categories of sources from which we collect personal information; (c) the business purpose for collecting personal information; (d) the categories of third parties with whom we share personal information; and (e) the specific pieces of personal information we have collected about you.

9.2 — Right to Delete

You have the right to request deletion of the personal information we have collected about you, subject to certain exceptions required by law.

9.3 — Right to Opt Out of Sale

We do not sell personal information as defined by the CCPA. We do not share your information with third parties for cross-context behavioral advertising.

9.4 — Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

9.5 — How to Submit a Request

California residents may submit CCPA requests by emailing [email protected] with the subject line "CCPA Privacy Request." We will respond within forty-five (45) days as required by law.

10. Children's Privacy

The Service is not directed to children under the age of 13 and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately at [email protected].

11. Third-Party Services and Links

Our website may contain links to third-party websites or services, including links within QA Audit reports. We are not responsible for the privacy practices of any third-party websites. This Privacy Policy applies only to information collected by TestPulseQA.

When you use Stripe to complete a payment, you are subject to Stripe's Privacy Policy in addition to ours. We encourage you to review the privacy policies of all third-party services you use in connection with TestPulseQA.

12. International Data Transfers

TestPulseQA is based in the United States and processes data on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

By using the Service, you consent to the transfer of your information to the United States. We implement appropriate safeguards for international data transfers consistent with applicable law.

13. Business Contact Information

Many of the people who contact TestPulseQA do so in a business capacity — for example, as a Shopify store owner requesting a QA Audit, or as a freelance developer applying to our referral network, rather than as an individual consumer. Where you provide business contact information, we may use it to:

• Respond to your inquiries;
• Coordinate referrals between you and a partner developer or customer;
• Deliver your QA Audit report; and
• Follow up on services you've requested.

Depending on your jurisdiction, certain privacy laws apply differently to business contact information used solely in a business-to-business context. We nonetheless honor the rights described in Section 8 for business contacts who request them.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post a prominent notice on our website at least fourteen (14) days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

We encourage you to review this Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Policy.

15. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Support: testpulseqa.com/support

This Privacy Policy was last updated on July 16, 2026.