Skip to content

AI-powered usability testing for product development

Legal

Privacy policy

What personal data TestFlow processes, why, and the choices you have.

Who we are

TestFlow is a usability testing platform available at testflow.design, provided by TestFlow, Lda. TestFlow, Lda. is the controller of the personal data described on this page. For any question about personal data, contact sayhi@testflow.design.

What we collect

Account data: your name, email address, organisation (optional) and password, stored as a one-way hash. When you sign in we record the time, IP address and browser.

Project content: everything you and your team add to projects — study plans, tasks, questionnaires, participant details, session responses, notes and files.

Student plan applications: name, school email, school, course, year of study and message.

Messages you send us by email.

Why we use it

To provide the service you signed up for, to keep accounts secure, to send account emails such as confirmations, invitations and password resets, to review student plan applications, and to reply when you contact us.

We don’t sell personal data or use project content for advertising.

AI provider

When someone on a project asks TestFlow to draft a study, a summary or findings, the content needed for that request is sent to Mistral AI (France) and processed in the European Union. The Trust and data page lists exactly what is sent at each moment. AI is never used without a request from a user. Mistral does not use the content TestFlow sends to train its models.

Who we share it with

Project content is visible to the members of each project. We use service providers to host the platform, send email and provide AI features; they process data only to provide those services.

How long we keep it

Account data is kept while your account is open. Project content is kept until it is deleted by the project’s owner or until the account is closed. Student plan applications are kept while they are reviewed and while the student plan is active. Deleted data stays in our backups for at most 30 days, after which those backups are erased.

Your rights

You can download the personal data held about your account, and delete the account, from your profile. You can also ask to access, correct, export or delete your personal data, or object to how it is used, by writing to sayhi@testflow.design. You may also complain to your data protection authority.

Participants whose data was entered into a project should contact the organisation that ran the study, which decides what is recorded about them.

Cookies

TestFlow uses one session cookie to keep you signed in and to remember your language. Your light or dark mode preference is stored in your browser. We don’t use advertising or tracking cookies.

Contact

Questions about this policy or your data: sayhi@testflow.design. If we change this policy, we’ll update this page.