Privacy Policy
Last updated: June 2026
SoftwareTestPilot ("we", "us", "our") operates softwaretestpilot.com (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and what choices you have. It applies to all visitors and registered users of the Service, worldwide, and is written to satisfy our obligations under the EU and UK General Data Protection Regulation (GDPR / UK GDPR), the California Consumer Privacy Act (CCPA / CPRA), India's Digital Personal Data Protection Act (DPDP), and equivalent laws.
For details about cookies specifically, see our Cookie Policy. For the rules that govern use of the Service, see our Terms of Service.
1. Data controller
SoftwareTestPilot is the data controller of personal information collected through the Service. You can reach our privacy team at privacy@softwaretestpilot.com.
2. Information we collect
2.1 Information you provide
- Account data: email, display name, password hash, profile photo (optional), professional headline, location, years of experience, skill tags.
- Resume / CV content you upload to ATS Review or Mock Interview tools.
- Community content you post in QA Network — questions, answers, comments, votes, referrals.
- Communications: messages you send to support, contact forms, newsletter sign-ups.
- Purchase data for digital products (order ID, product purchased, status). Card details are handled by Razorpay — we never see or store card numbers.
2.2 Information collected automatically
- IP address, approximate location (country/region), device type, browser, language.
- Pages visited, referrers, search queries inside the Service, time on page.
- Cookies, local storage and similar technologies (see Cookie Policy).
2.3 Information from third parties
- OAuth providers (Google, GitHub) if you sign in with them — email and profile fields they authorise.
- Job listings aggregated from public sources (those listings are not personal data about you).
3. Why we use your information (and the legal basis under GDPR)
| Purpose | Legal basis |
|---|---|
| Provide the Service — account, AI tools, network, jobs | Contract (Art. 6(1)(b)) |
| Send transactional emails (sign-up, password reset, purchase delivery, alerts you enabled) | Contract / Legitimate interest |
| Send the weekly newsletter and product announcements | Consent (Art. 6(1)(a)) |
| Personalise content recommendations | Legitimate interest (Art. 6(1)(f)) |
| Analytics, fraud and abuse prevention, security | Legitimate interest |
| Personalised advertising via Google AdSense | Consent |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Who we share data with
We share personal data only with the categories of recipients below:
- Service providers acting under contract on our instructions — Supabase (database, auth, storage), Cloudflare (CDN, security), Resend (transactional email), Google Cloud (analytics), Razorpay (payments), our chosen AI providers (Lovable AI Gateway and underlying model providers).
- Advertising partners — Google AdSense, where ad serving is enabled and you have consented.
- Authorities when required by law (court order, lawful request, fraud prevention).
- Successor in interest if SoftwareTestPilot is acquired or merged — you would be notified before any data transfer.
We do not sell your personal information in the everyday meaning of "sell", and we do not share it for cross-context behavioural advertising outside the AdSense flow you consent to.
5. International transfers
Our hosting and processors operate in the EU and the United States. When data is transferred outside your country we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and, where relevant, the UK International Data Transfer Addendum. Sub-processors are listed on request.
6. How long we keep data
- Account data — for as long as your account is active, plus 30 days after deletion to allow recovery.
- Resume uploads — until you delete them from your profile, or 12 months after your last sign-in, whichever is sooner.
- Newsletter subscriber email — until you unsubscribe.
- Purchase records — 7 years, to satisfy tax and accounting law.
- Analytics data — up to 14 months in Google Analytics 4.
- Server logs — 30 days.
7. Security
We use TLS 1.2+ for all traffic, encryption at rest for the database, hashed passwords (bcrypt / argon2 by our auth provider), row-level security for user-owned tables, scoped API keys, and least- privilege access for staff. No system is perfectly secure — if we discover a personal-data breach affecting you we will notify you and the relevant supervisory authority as required by law.
8. Your rights
Subject to local law you have the right to: access your data, rectifyinaccurate data, erase data ("right to be forgotten"), restrict or object to processing, request portability in a machine-readable format, withdraw consent at any time, and complain to your local data protection authority. California residents have the right to know, delete, correct, and opt out of "sharing" / "sale" under CCPA/CPRA. To exercise any of these rights, email privacy@softwaretestpilot.com. We respond within 30 days (45 days for complex CCPA requests). We do not discriminate against users who exercise their rights.
9. Cookies and advertising
We use cookies for authentication, preferences, analytics, and (with consent) advertising. Third- party vendors including Google use cookies to serve ads based on your prior visits to this and other websites. You can opt out of personalised ads at Google Ads Settings, aboutads.info/choices, or youronlinechoices.eu. Full details are in our Cookie Policy.
10. Children
The Service is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us data, email privacy@softwaretestpilot.com and we will delete it.
11. Automated decision-making
We use AI to score resumes, generate mock-interview feedback, and rank jobs. These outputs are informational only and do not produce legal or similarly significant effects on you. A human can review any AI output on request.
12. Changes to this policy
We may update this policy. Material changes will be announced on the Service or by email at least 14 days before they take effect. The "Last updated" date above always reflects the current version.
13. Contact
Privacy questions: privacy@softwaretestpilot.com. General support: support@softwaretestpilot.com. Or use our Contact page.