Privacy Policy

Last updated: October 17, 2026

This Privacy Policy explains how Statnetics, LLC, doing business as CloudQA ("CloudQA," "Statnetics," "we," "us" or "our"), collects, uses, discloses and protects personal information when you visit our websites (including cloudqa.io and statnetics.com), use the CloudQA platform, browser extensions, agents, APIs and free tools, contact us, or attend our events or calls (together, the "Services"). It also explains the choices and rights you have.

1. Scope and our role

1.1 For personal information we collect about website visitors, prospects, account holders, and business contacts at customers, partners and vendors, Statnetics, LLC is the controller (or "business").

1.2 Customer Data. When customers use CloudQA to test or monitor their own applications, the test scripts, recordings, screenshots, test data and results they submit may contain personal information. We process that information on the customer's behalf as a processor or service provider, under our Terms of Service and any data processing agreement. The customer's own privacy notice governs it, and requests about it should be sent to that customer. We will assist customers as required by our agreements. Customers are responsible for using test data and for not submitting sensitive personal information to the Services.

1.3 This policy does not apply to the practices of third parties we do not own or control, or to individuals we employ, which are covered by separate notices.

2. Information we collect

Information you give us

• Contact and business details: name, business email, phone number, company, job title, country, and the content of your messages, when you fill in forms, request a demo, book a call, join a waitlist, download content or email us.
• Account information: login email, name, password, organization, plan, settings and team members you invite.
• Billing information: billing contact, address, tax details and transaction history. Payment card details are collected and processed by our third-party payment processors under their own terms and security standards.
• Communications: support tickets, chat and email correspondence, survey responses, call and meeting notes, and, where you are told in advance, recordings or transcripts of calls.
• Content you submit: test scripts, URLs, inputs to free tools and other content you choose to provide.

Information collected automatically

• Device and log data: IP address, browser and device type, operating system, language, referring and exit pages, pages viewed, dates and times, and error logs.
• Usage data: how you use the platform and extensions, such as features used, test runs, and performance and diagnostic data.
• Cookies and similar technologies: see Section 6, including analytics and session-replay tools that record interactions such as clicks, scrolling and mouse movement on our websites.
• Approximate location: country or city inferred from your IP address.

Information from other sources

• Business contact and company information from partners, resellers, event organizers, marketplaces, review sites, data providers and public sources such as professional networking sites and company websites.
• Company-level information inferred from the IP address of visitors to our websites.
• Information from single sign-on and integration providers you choose to connect.

We do not intentionally collect sensitive personal information (such as health, biometric, racial or ethnic, religious, or government ID data) through our websites, and we ask you not to submit it. The only sensitive personal information we routinely process is account login credentials, which we use only to give you access to your account.

3. How we use information

• To provide, operate, maintain and support the Services, including creating accounts, running tests, and delivering managed and professional services.
• To process payments, billing and collections.
• To respond to inquiries, schedule calls and demos, and provide customer support.
• To send service, security, billing and administrative messages.
• To send marketing communications, newsletters and event invitations, where permitted by law, and to measure their effectiveness.
• To understand how our websites and Services are used, troubleshoot, and develop and improve our products, including by creating de-identified or aggregated data.
• To advertise our Services, including on third-party websites and platforms, and to measure campaigns.
• To protect the security and integrity of the Services, detect and prevent fraud, abuse and unauthorized testing, and enforce our Terms.
• To comply with legal obligations, respond to lawful requests, and establish, exercise or defend legal claims.
• For any other purpose we describe when we collect the information, or with your consent.

We do not use personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing.

4. Legal bases (EEA, UK and Switzerland)

Where the GDPR, UK GDPR or Swiss law applies, we rely on: contract (to provide the Services you request); legitimate interests (to run, secure, improve and market our business to business contacts, where those interests are not overridden by your rights); consent (for non-essential cookies and certain marketing, which you may withdraw at any time); and legal obligation (to comply with law). You may object to processing based on legitimate interests as described in Section 11.

5. How we disclose information

We disclose personal information only as described below:

• Service providers that act on our behalf, such as cloud hosting and infrastructure, website hosting, email delivery, customer relationship management, scheduling, support and chat, analytics, payment processing, AI model providers, and professional advisers. They are permitted to use personal information only to provide services to us.
• Advertising and analytics partners, such as Google, Microsoft and LinkedIn, through cookies and similar technologies on our websites (see Section 6).
• Affiliates and team members, including our delivery team and contractors, who are bound by confidentiality obligations.
• Your organization, if you use an account it controls; administrators can access information about your use of that account.
• Integrations you enable, such as CI/CD, issue-tracking or communication tools.
• Legal and safety: when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of CloudQA, our customers or others, to investigate fraud, unauthorized testing or security issues, or to enforce our agreements.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business or assets, subject to customary confidentiality protections.
• With your consent or at your direction.

We do not sell personal information for money. Our use of advertising cookies may be considered a "sale" or "sharing" for cross-context behavioral advertising under some U.S. state laws; see Section 12 for how to opt out.

6. Cookies, analytics and advertising

We and our partners use cookies, pixels, tags, local storage and similar technologies on our websites. They fall into these categories:

• Strictly necessary: needed for security, login, load balancing, forms and spam protection (for example, Google reCAPTCHA).
• Analytics and performance: help us understand how visitors use our websites, for example Google Analytics and Microsoft Clarity. Some tools, such as Microsoft Clarity and Hotjar, may record session interactions such as clicks, scrolling and mouse movement. These tools are designed to mask sensitive form input by default; please do not enter sensitive information into website forms unless asked.
• Advertising and measurement: help us show relevant ads and measure campaigns, for example Google Ads and the LinkedIn Insight Tag.
• Embedded content: videos and other embedded content (for example, YouTube) may set their own cookies when you play them.

Most of these are loaded through Google Tag Manager, and the tools in use may change over time. Your choices: you can block or delete cookies in your browser settings; opt out of Google Analytics with the Google Analytics opt-out browser add-on; adjust ad settings with Google and LinkedIn; and use industry opt-out tools such as YourAdChoices and Your Online Choices. Blocking some cookies may affect how the websites work. Our websites do not respond to browser "Do Not Track" signals, because there is no common standard for them; see Section 12 for opt-out preference signals.

7. Free tools and AI-assisted features

• Disposable email inboxes and mock APIs are designed for testing. Inbox addresses and mock endpoints may be accessed by anyone who knows or guesses them, and content may be deleted at any time without notice. Do not use them to receive or store real personal, confidential or production data.
• AI-assisted tools, such as the AI Test Case Generator, send the inputs you provide to third-party AI model providers acting as our service providers, to generate the output. Do not enter personal or confidential information into these tools.
• Browser extensions capture page information, screenshots or recordings when you use them to record a test or report a bug, and send that information to our Services to provide the feature.

8. Retention

We keep personal information for as long as needed for the purposes in this policy: for example, account data for the life of the account and a reasonable period afterwards; billing records for as long as tax and accounting laws require; marketing contact data until you opt out or it is no longer useful; and logs for limited periods for security and troubleshooting. Customer Data is retained under our agreement with the customer. We may keep information longer where required by law or to resolve disputes and enforce agreements, and may keep de-identified or aggregated data indefinitely.

9. Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information, such as encryption in transit, access controls and limited access by personnel. No method of transmission or storage is completely secure, and we cannot guarantee the security of information. You are responsible for keeping your credentials confidential and for the security of your own systems. If we learn of a security incident affecting your personal information, we will notify you and the authorities as required by applicable law.

10. International transfers

We are based in the United States, and we and our service providers may process personal information in the United States, India and other countries whose data protection laws may differ from those where you live. Where required, we use appropriate safeguards for transfers, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. Contact us for more information.

11. Your rights and choices

Marketing emails: you can unsubscribe at any time using the link in the email or by contacting us. We will still send service and transactional messages.

Account information: you can review and update much of it in your account settings.

Privacy rights: depending on where you live, you may have the right to: know or access the personal information we hold about you; correct it; delete it; receive a portable copy; object to or restrict certain processing; withdraw consent; opt out of targeted advertising, sale or sharing; and not be discriminated against for exercising your rights. In the EEA, UK and Switzerland you also have the right to complain to your local data protection authority.

How to make a request: email info@cloudqa.io with the subject "Privacy request." We will verify your identity, usually by confirming information we already hold or by email, before acting, and we will respond within the time required by applicable law. An authorized agent may make a request for you with written permission, and we may ask you to confirm your identity directly. We may decline requests where permitted by law, for example where they are manifestly unfounded or excessive, or where we must keep information for legal reasons.

12. U.S. state privacy rights

This section applies to residents of California and other U.S. states with comprehensive privacy laws, to the extent those laws apply to us.

Categories collected in the last 12 months: identifiers (such as name, email, IP address); customer records and commercial information (such as billing details and purchase history); internet and network activity (such as browsing and usage data); approximate geolocation; professional or employment-related information (such as job title and company); audio or electronic information (such as call recordings, where you are told in advance); inferences (such as product interest); and sensitive personal information limited to account login credentials. Sources, purposes and recipients are described in Sections 2, 3 and 5.

Sale, sharing and targeted advertising: we do not sell personal information for money. We may make identifiers and internet activity available to advertising partners through cookies, which may be a "sale," "sharing" or "targeted advertising" under state law. To opt out, email info@cloudqa.io with the subject "Do not sell or share," and use the cookie choices in Section 6. Where required by law, we treat a recognized opt-out preference signal, such as Global Privacy Control, as a request to opt out for that browser. We do not knowingly sell or share the personal information of individuals under 16.

Sensitive personal information: we use it only for purposes permitted by law and do not use it to infer characteristics about you.

Appeals: if we decline your request, you may appeal by replying to our decision or emailing info@cloudqa.io with the subject "Privacy appeal." If you are not satisfied with the outcome, you may contact your state attorney general.

Retention: see Section 8. Financial incentives: we do not offer financial incentives in exchange for personal information.

California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.

13. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

14. Third-party sites and services

Our websites and Services may link to or integrate with third-party websites and services, including social networks, review sites and tools you connect. Their privacy practices are governed by their own policies, and we are not responsible for them.

15. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date and, if the changes are material, give additional notice, such as by email to account owners or a notice in the Services, as required by law.

16. Contact us

Statnetics, LLC (d/b/a CloudQA)
Attn: Privacy
1900 N Bayshore Dr., #4101
Miami, FL 33132, United States
Email: info@cloudqa.io
Phone: (786) 695-1091