Legal
Privacy Policy
How Testmode collects, uses and protects personal data when you visit testmode.ai or use the Testmode application.
This policy explains what personal data we collect when you visit testmode.ai or use the Testmode application at app.testmode.ai (together, “Testmode”), why we collect it, and the choices you have. It is written to meet the EU General Data Protection Regulation (GDPR).
Who we are
Testmode is a product of Amber Digital, based in Amsterdam, the Netherlands (“we”, “us”). We are the controller of the personal data described in this policy, except where we process data on a customer’s behalf, as described under Data in the applications you test.
For any privacy question or request, email support@testmode.ai.
What we collect
Account data. When you sign up, we collect your name, email address and password, or, if you sign in with Google, the name, email address and profile picture Google shares with us. We do not receive your Google password, and we do not access your Gmail, Drive, Calendar or any other Google data.
Workspace data. The projects, test cases, environments, settings and team invitations you create, and the email addresses of the teammates you invite.
Test run data. When Testmode runs a test or an exploration, it records what the AI tester did and saw in the browser: steps, screenshots, page content, console and network output, and session recordings. See Data in the applications you test.
Billing data. Subscriptions are sold through Polar, our merchant of record. Polar collects your payment details directly; we receive your plan, billing status, and billing name and address, but never your full card number.
Usage and device data. Log data such as IP address, browser type, pages visited and timestamps, which our servers and providers record to operate and secure the service.
Website analytics. Our marketing site uses Google Analytics to understand how visitors use it, and Apollo’s website tracker to identify companies that visit. Both set cookies. See Cookies.
Communications. What you send us when you book a demo, email us or contact support.
How we use it and why
| Purpose | Legal basis |
|---|---|
| Creating your account, signing you in and providing the service | Performance of our contract with you |
| Running your tests and explorations, and showing you the results | Performance of our contract |
| Billing and managing your subscription | Performance of our contract; legal obligation (tax records) |
| Sending service emails: invitations, run reports, security and billing notices | Performance of our contract |
| Keeping Testmode secure, preventing abuse and fixing problems | Legitimate interest |
| Understanding how the website and product are used, to improve them | Legitimate interest, or consent where the law requires it |
| Sales and marketing outreach to business contacts | Legitimate interest; you can opt out at any time |
We do not sell personal data, and we do not use your test data or the content of the applications you test to train AI models.
Data in the applications you test
When you point Testmode at an application, the AI tester sees whatever that application shows, which may include personal data about your own users or customers. For that data, you are the controller and we are your processor: we process it only to run your tests and show you the results, on your instructions. We recommend testing against staging environments with test accounts and test data wherever possible. If you need a data processing agreement, email support@testmode.ai.
Credentials you store for the applications under test are used only by the test runner, to sign in on your behalf.
Who we share it with
We share personal data only with the service providers that run Testmode for us, under contracts that require them to protect it and use it only on our instructions:
- Supabase — authentication and database
- Amazon Web Services — hosting, the test runner, and email delivery (Amazon SES), in the EU (Frankfurt)
- Browserbase — the cloud browsers that run your tests, and their session recordings
- OpenAI and Anthropic — the AI models that interpret your test steps, drive the browser and power the assistant. Their API terms prohibit using this data to train their models.
- Polar — checkout, subscriptions and invoicing, as merchant of record
- Google — sign-in with Google, and Google Analytics on our website
- Apollo.io — website visitor identification and sales outreach
- Cal.com — demo booking
We may also disclose data where the law requires it, to protect our rights or the safety of others, or to a successor if Testmode is sold or merged, in which case this policy continues to apply.
International transfers
Some of these providers are based in the United States or process data there. Where personal data leaves the European Economic Area, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep account and workspace data for as long as your account is active. When you delete your account or ask us to, we delete or anonymise your personal data within 30 days, except where we must keep it longer by law, such as invoices, which Dutch tax law requires us to keep for seven years. Test run results, screenshots and recordings are kept while your workspace exists; ask us and we will delete them sooner. Server logs are kept for up to 90 days.
Cookies
The Testmode application uses only the cookies and local storage it needs to keep you signed in and remember your settings. Our marketing site also uses Google Analytics and Apollo cookies to measure visits and identify visiting companies. You can block or delete cookies in your browser settings; the site works without them.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. To exercise any of these rights, email support@testmode.ai. We will answer within one month.
If you believe we have handled your data wrongly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the supervisory authority where you live.
Security
We protect personal data with encryption in transit and at rest, access controls that give each workspace access only to its own data, and the least access necessary for our staff and providers. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.
Children
Testmode is a business service and is not intended for anyone under 16. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy as Testmode changes. The date at the top shows when it last changed. If a change is significant, we will tell account holders by email before it takes effect.
Google user data
Testmode’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request only your basic profile (name, email address and profile picture) to create and sign in to your account, use it for nothing else, and never share it with third parties except the providers above who run the service.