Privacy Policy

What we collect

Account details (name, email), the URLs and projects you choose to test, and operational data such as crawl results, screenshots and logs needed to deliver the service. We also process standard request metadata (IP, user agent) for security.

How we use it

To run your checks, generate and store tests, send results and notifications, and improve reliability. We do not sell your data. Test artifacts belong to you and are removed per your retention settings.

Website acquisition measurement

We use a first-party cookie, aegis_acquisition_v1, for up to 30 days to remember the public page where you arrived, the referring website hostname, and source or campaign labels. It is shared between our marketing website and app so we can understand which pages lead to signups and completed scans. We do not store search terms, full referring URLs, or advertising click identifiers in this cookie, and it contains no unique visitor identifier.

This measurement respects browser Do Not Track and Global Privacy Control signals. You can also remove or block the cookie in your browser. Signup attribution is associated with your account and is deleted with it; anonymous scan statistics do not retain your email, tested website, or scan artifacts. We use server-side scan completion and paid-order records to measure outcomes.

Sub-processors

We use infrastructure, email and payment providers strictly to operate the service. Payments are handled by our merchant of record (Paddle); we do not store card details. Email is sent via AWS SES and our notification providers (Slack / Discord webhooks you configure).

Mobile app builds (.apk/.ipa) you upload for cloud device testing are stored privately on our object-storage provider (Cloudflare R2) and are never made public or shared with other customers. For real-device tests, the build is transferred to our device-testing provider (TestingBot), which processes it solely to run your tests and automatically deletes uploads after 60 days. Emulator tests do not transfer your build to TestingBot. Authorized operations personnel may access a stored build when required for support or security. For sensitive apps you can use the local runner, which keeps the build and the test device entirely within your own infrastructure.

Your rights

You can export or delete your data at any time from your account settings, or by contacting us. We honour access, correction and deletion requests under applicable law (GDPR / CCPA / similar regional regimes).

Data retention

Project data is retained for as long as your account is active. On deletion, we purge personal data within 30 days and operational backups within 90 days. Pro and Business plans can configure shorter retention windows per-project.

Contact

Questions about privacy? Email privacy@aegisrunner.com.