Draft — needs legal review before launch.
Data processing addendum
Last updated: 5 October 2026.
This addendum applies when [Company name] (“processor”) processes personal data on behalf of a customer (“controller”) through LCTester, and forms part of the terms of service.
Scope
- Subject matter: running the customer’s tests and storing their results.
- Duration: while the customer’s account is active, plus deletion time.
- Data: test content, run recordings and screenshots, and any personal data shown on the tested sites; account details of the customer’s users.
- Data subjects: the customer’s team members and users of the tested sites.
Our commitments
- Process data only on the customer’s documented instructions, including the use of the service.
- Keep people with access bound by confidentiality.
- Apply the measures in the security overview: tenant isolation, isolated runs, sealed credentials and encryption in transit.
- Use only the listed subprocessors, under written terms, and give notice of changes so the customer can object.
- Help the customer answer requests from data subjects.
- Tell the customer without undue delay after becoming aware of a personal data breach.
- Delete data when the customer deletes a project, team or account, or at the end of the retention period, and make audit information available on reasonable request.
International transfers
Where personal data is transferred to a country without an adequate level of protection, the parties rely on standard contractual clauses or another lawful mechanism.
Contact
privacy@[your-domain]. To get a signed copy, contact us with your company details.