Legal
Privacy policy
What personal data TestFlow processes, why, and the choices you have.
Who we are
TestFlow is a usability testing platform available at testflow.design, provided by TestFlow, Lda. TestFlow, Lda. is the controller of the personal data described on this page. For any question about personal data, contact sayhi@testflow.design.
What we collect
Account data: your name, email address, organisation (optional) and password, stored as a one-way hash. When you sign in we record the time, IP address and browser.
Project content: everything you and your team add to projects — study plans, tasks, questionnaires, participant details, session responses, notes and files.
Student plan applications: name, school email, school, course, year of study and message.
Messages you send us by email.
Why we use it
To provide the service you signed up for, to keep accounts secure, to send account emails such as confirmations, invitations and password resets, to review student plan applications, and to reply when you contact us.
We don’t sell personal data or use project content for advertising.
AI provider
When someone on a project asks TestFlow to draft a study, a summary or findings, the content needed for that request is sent to Mistral AI (France) and processed in the European Union. The Trust and data page lists exactly what is sent at each moment. AI is never used without a request from a user. Mistral does not use the content TestFlow sends to train its models.
How long we keep it
Account data is kept while your account is open. Project content is kept until it is deleted by the project’s owner or until the account is closed. Student plan applications are kept while they are reviewed and while the student plan is active. Deleted data stays in our backups for at most 30 days, after which those backups are erased.
Your rights
You can download the personal data held about your account, and delete the account, from your profile. You can also ask to access, correct, export or delete your personal data, or object to how it is used, by writing to sayhi@testflow.design. You may also complain to your data protection authority.
Participants whose data was entered into a project should contact the organisation that ran the study, which decides what is recorded about them.
Contact
Questions about this policy or your data: sayhi@testflow.design. If we change this policy, we’ll update this page.