Privacy Policy

This Privacy Policy explains how QALens AI ("we", "us") collects, uses, and protects information when you use our website and the QALens AI service (the "Service"). We aim to keep this short and clear.

1. Who we are

QALens AI is an AI-powered QA assistant. It turns code changes, screenshots, and voice notes into a short, actionable QA checklist with risks and missing scenarios.

For privacy questions or data requests, contact contact@qalens.ai.

2. What we collect

• Account data — email address and, if you sign in with Google, your Google account name and profile picture.
• Workspace data — project names, descriptions, and project area labels you create to organise your QA checklists.
• Content you submit — text descriptions, pull-request diffs, screenshots, and voice recordings you upload to generate a QA checklist.
• Generated output — the QA checklist QALens AI returns for your input.
• Usage data — basic technical data such as IP address, browser, and timestamps used for security, rate limits, and abuse prevention.
• Cookies — see our Cookie Policy.

3. How we use your data

• To run the Service and generate QA checklists from your input.
• To create and secure your account.
• To enforce usage limits and prevent abuse.
• To improve the Service quality and reliability.
• To respond to your support and privacy requests.

4. AI processing

QALens AI is powered by AI models. To generate a QA checklist, the content you submit is processed by automated AI systems — including third-party AI service providers — that we use as data processors.

• What AI processes — the text you type, your pull-request diffs, attached screenshots (after OCR or vision analysis), and voice recordings (after speech-to-text transcription). Account credentials and payment details are not sent to AI providers.
• Why — to analyse the change, understand context, transcribe audio, read text from images, and produce a QA checklist with risks and recommendations. AI output is generated automatically; we do not manually review your individual submissions.
• Where it goes — to third-party AI service providers (large language model, vision, OCR, and speech-to-text providers) listed in section 5 below. They process your input on our behalf to return AI output to QALens AI.
• Their policies — these providers process data under their own terms and privacy policies. We choose providers that do not, by default, use our submissions to train their public models, but you should review their policies if this matters to you.
• No automated decisions with legal effect — AI output is informational only (a suggested QA checklist). It does not produce decisions with legal or similarly significant effects on you.

Please do not submit content you are not authorised to share, or content containing secrets, credentials, or sensitive personal data.

5. Third-party processors

To deliver the Service, we send the content you submit to trusted third-party providers acting as data processors:

• Third-party AI service providers — large language model, vision, speech-to-text, and OCR providers (currently including Anthropic, Google Gemini, OpenAI, AssemblyAI, and OCR.space) process your input to produce the QA checklist. The exact set of providers may change as we add or replace them.
• Google OAuth — used only if you sign in with Google.
• Google reCAPTCHA — used to protect our login, registration, and email-capture forms from automated abuse. When the captcha is active, Google receives the form-page URL, your IP address, and standard browser/device signals so it can issue a verdict; we receive only the verdict, not your raw signals. Use is governed by Google's privacy policy and terms.
• Stripe — when paid plans are introduced, payments will be processed by Stripe. We do not store full card details on our servers.
• Hosting and infrastructure — cloud hosting, databases, and email delivery providers used to operate the Service.

These providers process data on our behalf and are bound by their own terms and privacy policies.

6. Data retention

• Anonymous analyses and uploaded files are pruned automatically after a short retention window.
• Account data is kept while your account is active.
• Database backups are kept for up to 7 days for disaster recovery purposes.
• You can ask us to delete your account and associated data at any time.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email contact@qalens.ai.

8. Security

We use reasonable technical and organisational measures to protect your data. No system is perfectly secure — please do not upload sensitive information you are not authorised to share.

9. Children

QALens AI is not intended for children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page. The "Last updated" date below shows when the policy was last revised.

11. Contact

QALens AI is operated by an independent developer based in Cyprus, an EU member state. All processing of personal data is subject to the EU General Data Protection Regulation (GDPR) and Cyprus data protection law. For inquiries, contact contact@qalens.ai.

Last updated: June 21, 2026