Privacy Policy
Last updated: October 20, 2026
Introduction
TestPlanIt ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
Self-Hosted Deployment
When you self-host TestPlanIt, all data remains on your infrastructure. We do not have access to any data you store in your self-hosted instance. You are the data controller and responsible for your own data privacy and security practices.
Website Information Collection
Our marketing website may collect:
- Email addresses when you join our waitlist
- Basic analytics data (page views, browser type, etc.) through standard web analytics
- Cookies for website functionality
Use of Information
We use the information we collect to:
- Notify you about product updates and launches
- Improve our website and services
- Respond to your inquiries
- Comply with legal obligations
Data Security
We implement appropriate technical and organizational security measures to protect your information. However, no method of transmission over the Internet is 100% secure.
Third-Party Services
We may use third-party services for analytics and email communications. These services have their own privacy policies governing the use of your information.
Atlassian Marketplace Integration
If you use TestPlanIt for Jira (available via the Atlassian Marketplace), the app accesses only Jira issue keys and issue IDs from the current context to provide test management functionality. This data is processed on our servers in your workspace's hosting region (the United States for trials, or the United States or European Union for paid plans) and is not shared with any third parties beyond what is necessary to operate the service.
Open-Source Contributors
To contribute to the TestPlanIt open-source repository, you sign our Contributor License Agreement (CLA) through CLA Assistant. When you sign, we receive:
- Your GitHub username
- The name and email address you confirm on the signing form
- Your employer, if you provide it
- The version of the CLA you signed and when you signed it
We use this information only to keep a record of the license you granted in the CLA, which lets us distribute your contributions under both the AGPL-3.0 and our commercial license. Our lawful basis is performance of the CLA, the agreement you enter into by signing it.
CLA Assistant is a free service run by SAP SE, which acts as an independent controller under its own terms and privacy statement and stores signatures in Europe.
We keep your CLA record for as long as we distribute software that includes your contributions. The license you grant is perpetual and irrevocable, so we can't delete the record while that's the case. You can ask to see or correct it at any time through our contact page.
International Data Transfers
Hosted TestPlanIt workspaces run on Oracle Cloud Infrastructure in one of two regions: the United States (Chicago) or the European Union (Frankfurt, Germany). Free trials are always hosted in the United States. When you convert to a paid plan, you choose the region for your workspace, and your application data is stored in that region.
If you are located in the European Economic Area (EEA) and select the EU region for your paid plan, your application data — including Jira issue identifiers processed via the TestPlanIt for Jira app — is stored at rest within the EEA, and your workspace's transactional email is delivered through an EEA-based provider. Some data is still transferred outside the EEA: all workspace data during a trial or in the US region; data handled by our US-based sub-processors (Stripe for payments, billing, and invoice email, and Google for support correspondence); and traffic in transit, which passes through Cloudflare's global edge network in all regions. These transfers are made pursuant to Standard Contractual Clauses (SCCs) as approved by the European Commission under GDPR Article 46(2)(c).
GDPR — European Data Protection Rights
For users in the EEA, TestPlanIt acts as a data controller for personal data collected through our website and managed hosting services, and for the Contributor License Agreement records described above. Our lawful bases for processing are:
- Contract performance — processing necessary to provide the services you signed up for (e.g., provisioning your trial instance), or to keep the record of a Contributor License Agreement you signed
- Legitimate interests — analytics to improve our product, and communication about your account
- Consent — marketing communications, which you can opt out of at any time
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request erasure of your personal data
- Restrict or object to processing
- Data portability — receive your data in a structured, machine-readable format
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us through our contact page. We will respond within 30 days.
Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Opt-out of marketing communications
Contact Us
If you have questions about this Privacy Policy, please contact us through our contact page.