Draft — needs legal review before launch.
Privacy policy
Last updated: 5 October 2026.
[Company name], [Address], [Country] is the controller of the personal data described here. For the test content you process through LCTester, we act as your processor (see the data processing addendum).
What we collect
- Account: email address, name if you give one, and a password hash.
- Team: team name, members and roles, plan and billing status (payment details are held by Polar, not us), and an audit log of changes.
- Test content: projects, tests and steps, uploaded files, and sealed test account credentials.
- Run data: results, and the recordings and screenshots our browser captures from the sites you test. These may contain whatever those sites show, including personal data of your users, so use test data.
- Logs: technical logs such as IP address, request metadata and errors, used for security and reliability.
Why we use it
- To provide the service: run tests, show results, send notifications.
- To secure the service and prevent abuse.
- To bill and to give support.
- To meet legal obligations.
Steps and page content from a run are sent to an AI model through our gateway to decide the agent’s actions. We do not sell personal data.
How long we keep it
Recordings and screenshots are kept for the retention period of your plan:
- Free: 14 days
- Starter: 30 days
- Team: 90 days
- Business: 180 days
Account and team data is kept while the account is active. Logs are kept for a limited period for security. Billing records may be kept longer where the law requires.
Deleting your data
In settings you can delete a project, a team or your account. This removes the records and the stored files (recordings, screenshots and uploads). Copies in backups expire on the backup schedule.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your data, object to or restrict some processing, and complain to your data protection authority. Email privacy@[your-domain].
Subprocessors and international transfers
We use the subprocessors listed separately, some of which process data outside your country. Where the law requires, we rely on safeguards such as standard contractual clauses.
Cookies
We use a session cookie to keep you signed in. We do not use advertising cookies.
Contact
privacy@[your-domain], [Company name], [Address], [Country].