Privacy Policy

What personal data Test Maze collects, why we collect it, who we share it with and the choices you have.

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service, as well as the options you have over such data. Your data is used to offer and improve the Service. You consent to the collection and use of information in line with this policy by using the Service. Unless otherwise stated in this Privacy Policy, terms used in this Privacy Policy have the same meanings as those found in our Terms of Service.

INFORMATION COLLECTION AND USE

We collect several different types of information for various purposes to provide and improve our Service to you.

TYPES OF DATA COLLECTED

PERSONAL DATA

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Cookies and Usage Data
  • Usage Data

We may also collect information on how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

DATA YOUR CODING AGENT SENDS (MCP)

Test Maze is used mainly through the Model Context Protocol (MCP): you connect a coding agent such as Claude Code, Cursor, Cline, Gemini CLI or Codex CLI, and the agent calls our tools on your behalf. This section explains what that connection does and does not send us.

What we receive when your agent calls a tool:

  • Test artefacts you ask it to create or read — projects, features, user stories, acceptance criteria, test cases, steps, suites, plans and tags.
  • Test run records: which cases were run, their pass/fail status, actual results and any notes your agent reports.
  • Git identifiers for the change under test: commit sha, branch name and whether the working tree was clean. These are identifiers only — never the contents of your repository.
  • Exploration session events and any screenshots your agent captures while exploring a running application you point it at.
  • Source code snippets only when you explicitly ask for a code-quality or architecture check, and only the snippet your agent includes in that call.

What we do not receive: Test Maze never clones, scans, indexes or stores your repository, and has no access to your source control, CI system, production environment or developer machine. We only ever see what a tool call contains.

You control what your agent sends. Please do not put secrets, credentials or personal data that you are not entitled to share into test cases, run notes, screenshots or code snippets.

MCP TOKENS AND AGENT ACTIVITY

Connecting an agent requires an MCP token, which is scoped to a single workspace, stored in hashed form and revocable at any time from Settings → MCP in the app. Treat a token like a password: anything done with a valid token is recorded as an action of the workspace it belongs to.

Every tool call is recorded — the tool name, its inputs, its result and timing — and shown to members of that workspace on the Agent Sessions page. We use these records to run the service, support you when something goes wrong, and detect abuse.

AI PROCESSING AND PROVIDER KEYS

Some features (generating test cases, analysing screenshots, code-quality advice) send the relevant content to a third-party AI provider — currently OpenAI, Google Gemini or GMI Cloud — so that it can produce the response. Only the content needed for that request is sent, and each provider processes it under its own terms. We do not use your workspace content to train AI models.

If you bring your own provider key, it is encrypted with AES-256-GCM before it is stored, is never shown back to the browser, and is used only for your workspace's own requests. You can remove it at any time.

RETENTION AND DELETION

Workspace content — test artefacts, run history, agent session records, uploaded media and screenshots — is kept while the workspace exists, so that historical verdicts stay checkable. You can delete individual records in the app, and you can ask us to delete a workspace and everything in it by writing to testmaze@ceegees.in. Backups are cycled out shortly after deletion.

DATA ON TRACKING AND COOKIES

We use cookies and other tracking technologies to monitor and record activities on our Service. Cookies are little data files that may contain an anonymous unique identification. Cookies are little text files that are transmitted to your browser from a website and kept on your device. Beacons, tags, and scripts are other tracking technologies used to collect and track information and to develop and analyze our Service. You may tell your browser to reject all cookies or to notify you when one is received. However, if you do not accept cookies, you may be unable to utilize certain aspects of our Service.

COOKIE EXAMPLES WE USE:

  • Session cookies- Session Cookies are used to operate our Service.
  • Preference Cookies- Preference Cookies are used to remember your preferences and other settings.
  • Security Cookies- Security Cookies are used for security purposes.

DATA APPLICATION

Test Maze uses the information collected for a variety of purposes, including:

  • To provide and keep the Service running.
  • To inform you about changes to our Service
  • To enable you to participate in interactive parts of our Service if you so want.
  • To provide customer care and support
  • To give analysis or valuable information in order to enhance the Service
  • To keep track of how the Service is being used
  • Detecting, preventing, and resolving technical difficulties
  • Transfer Of Data

Your information, including Personal Data, may be transmitted to and stored on computers located outside of your state, province, nation, or other governmental jurisdiction where data protection regulations differ from those in your jurisdiction. If you live outside of India and want to give us information, please be aware that we will transmit the data, including Personal Data, to India and process it there. Your agreement to that transfer is represented by your approval to this Privacy Policy, followed by your submission of such information. Test Maze will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your Personal Data to an organization or country will take place unless adequate controls, including the security of your data and other personal information, are in place.

DISCLOSURE OF DATA

LEGAL REQUIREMENTS

  • To comply with a legal obligation
  • To protect and defend the rights or property of Test Maze
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

SECURITY OF DATA

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.


PROVIDERS OF SERVICES

Third-party organizations and persons ("Service Providers") may be employed to enable our Service, deliver the Service on our behalf, conduct Service-related tasks, or assist us in analyzing how our Service is utilized. These third parties have access to your Personal Data only to carry out these duties on our behalf and are not permitted to disclose or use it for any other reason.


ANALYTICS

We may use third-party Service Providers to monitor and analyze the use of our Service.


GOOGLE ANALYTICS

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

LINKS TO OTHER SITES

Our Service may contain connections to websites that we do not control. When you click on a third-party link, you will be sent to the third- party's website. We strongly recommend that you read the Privacy Policies of any website you visit. We have no control over, and accept no responsibility for, any third-party website or services' content, privacy policies, or practices.

CHILDREN PRIVACY

Our Service is not intended for anybody under the age of 18. ("Children"). We do not collect personally identifying information from children under the age of 18. Please contact us if you are a parent or guardian and are aware that your children have given us with Personal Data. If we discover that we collected Personal Data from children without parental agreement, we take measures to erase that information from our servers.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to change our Privacy Policy at any moment. Any changes will be communicated to you by publishing the revised Privacy Policy on this website and sending you an email. Prior to the modification being effective, we will notify you through email and/or a prominent notice on our Service, and we will revise the "effective date" at the top of this Privacy Policy. It is recommended that you examine this Privacy Policy on a regular basis for any updates. When changes to this Privacy Policy are posted on this page, they become effective.

CONTACT US

If you have any queries regarding our Privacy Statement, please email us at testmaze@ceegees.in