Privacy Policy

1. Introduction

HorusQA ("we", "us", "our") operates the horusqa.ai website and the HorusQA Recorder Chrome Extension (together, the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password (stored as a bcrypt hash). If you subscribe to a paid plan, payment is processed by Paddle (our Merchant of Record) — we do not store credit card numbers.

2.2 Test Data

When you record browser flows, we store the sequence of actions (clicks, form fills, navigation URLs, element selectors) and any assertion rules you create. Screenshots and video recordings from test runs are stored in Cloudflare R2 and associated with your account.

2.3 Chrome Extension

The HorusQA Recorder extension only activates when you explicitly start a recording or playback session. It records browser interactions (element selectors, clicked URLs, form values) on the active tab and sends them to your HorusQA account. The extension does not collect data in the background, track browsing history, or transmit data to third parties.

2.4 Usage Data

We collect standard server logs (IP address, browser type, pages visited) to maintain and improve the Service. We do not use third-party analytics or advertising trackers.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process your test recordings and deliver results
• To send transactional emails (test results, account notifications, team invitations)
• To process payments via Paddle
• To respond to support requests

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Storage and Security

Your data is hosted on Render.com (United States) with PostgreSQL for structured data and Cloudflare R2 for media files. All connections use TLS encryption. Passwords are hashed with bcrypt. We implement role-based access controls to ensure users can only access data within their own account.

5. Data Retention

Account data is retained as long as your account is active. Test recordings (screenshots, videos) are retained according to your plan's retention policy. When you delete your account, all associated data is permanently removed within 30 days.

6. Third-Party Services

We use the following third-party services to operate HorusQA:

• Render.com — Application hosting and database
• Cloudflare R2 — Screenshot and video storage
• Paddle — Payment processing (Merchant of Record)
• Resend — Transactional email delivery

Each provider processes data according to their own privacy policies.

7. Your Rights

You may at any time:

• Access and update your account information via Settings
• Export your test data via the API
• Delete your account and all associated data by contacting us
• Request a copy of your personal data

8. Cookies

We use only essential session cookies required for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children's Privacy

HorusQA is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at privacy@horusqa.ai.