Your studies, your data

You control when AI is used

AI never runs on its own. It drafts a study, suggests findings or writes a summary only when someone on the project asks, and everything it writes arrives as a draft that your team accepts, edits or discards.

The next sections say exactly what is sent each time, and what stays with you.

Who can see a project

A project is visible to the person who created it and to the moderators they invite. Invited moderators work on the project’s tests, sessions and results. Project administrators can also change the project’s settings, invite people and delete the project.

TestFlow platform administrators can access projects to provide support and keep the service running.

When AI is used, and what it receives

AI only runs when someone on the project asks for it. TestFlow uses the API of Mistral AI, a company based in France, and the requests are processed in the European Union. AI is used at three moments:

Drafting a study: the description you write is sent so the AI can draft tasks and questions.

Drafting findings: the project title and description, each task’s results (success rate, attempts, median time) and the answers and moderator notes from failed attempts are sent. Participant names are not.

Writing a summary: totals and averages for the project (number of participants and sessions, average age, success rate, SUS) are sent.

Everything the AI writes arrives as a draft for you to accept, change or discard.

Suggested findings are based only on what was sent: the results of each task and the answers and notes from failed attempts. They can’t take into account anything that wasn’t written down, so your team remains the judge of what the sessions showed.

Notes and answers are free text. If someone writes a participant’s name or another identifying detail in them, it is sent with them, so keep notes free of identifying details.

Mistral does not use the content TestFlow sends to train its models.

Participant data

You decide what to record about participants: by default a name, age, gender and academic level, plus any fields you add. Collect only what the study needs, and consider codes instead of names.

You are responsible for informing participants and getting their consent before a session.

Taking your data with you

Export a project at any time. CSV files hold the responses, times, notes, demographics and SUS scores. The JSON file holds the project structure, participants and custom fields. The PDF report holds the results and findings.

Deleting data

Deleting a project deletes its tests, tasks, questionnaires, participants, sessions and responses. This can’t be undone, so export first if you may need the data. Deleted data stays in our backups for at most 30 days, after which those backups are erased.

You can delete your own account from your profile, and download the personal data held about it there too. For anything else, write to sayhi@testflow.design.

Security

Passwords are stored as one-way hashes, and password-reset links are stored only as hashes and expire after an hour. Two-step sign-in with an authenticator app is available to every account and required for administrators. Forms are protected against cross-site request forgery; sign-in, registration, password resets and AI requests are rate-limited; uploaded files are checked before they are stored. Remote questionnaire links are single-use and protected by a password. Server secrets are stored encrypted, and the database is backed up daily.

Questions

For anything about your data, write to sayhi@testflow.design. The Privacy page has the full details.