Privacy Policy

1. Who We Are – Data Controller

Tensflare Inc. is the data controller responsible for personal data processed under this policy (except where we act solely as a processor on behalf of our customers).

2. Information We Collect

We collect two main categories of information:

3. How We Use Your Information

We use personal information for the following purposes:

• To provide, maintain, and improve the Service (including test case management, execution tracking, reporting, integrations)
• To process subscriptions, payments, and send transactional emails (invoices, renewals, service announcements)
• To communicate with you about your account, support requests, updates, or security notices
• To analyze usage trends, detect issues, prevent fraud, and enhance product features
• To comply with legal obligations, enforce our Terms of Service, protect rights/safety, or respond to valid legal requests
• With your consent (where required): for marketing communications or additional optional features

4. Legal Basis for Processing (GDPR)

Where applicable (e.g., GDPR), we rely on:

• Performance of a contract — to deliver the Service you requested
• Legitimate interests — improving the product, analytics, fraud prevention, security (balanced against your rights)
• Legal obligations — tax, accounting, compliance with data protection law
• Consent — for certain marketing emails or optional features (you can withdraw consent anytime)

5. Sharing Your Information

We do not sell personal data. We share information only in these limited cases:

• Service Providers — cloud hosting (e.g., AWS, GCP), analytics (e.g., Google Analytics), payment processors (e.g., Stripe/PayPal), email services (e.g., SendGrid), support tools — all under strict confidentiality and data processing agreements
• Business Transfers — in case of merger, acquisition, or sale of assets
• Legal Requirements — if required by law, court order, or to protect rights/safety
• With Your Consent — or at your direction (e.g., sharing test reports you export)

6. International Data Transfers

Tensflare Inc. is based in the United States, and our affiliate Tensflare Ltd, which bills customers who pay in African currencies, is based in Nigeria. We may transfer data to countries outside your jurisdiction (e.g., EU, US, other cloud regions).

We use appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions (where applicable)
• Other legally recognized mechanisms

7. Data Retention

We keep personal data only as long as necessary:

• Account data — while your account is active + 30–90 days after termination (for legal/backup purposes)
• Billing data — 7–10 years (tax/legal requirements)
• Test management content — until you delete it or the account is terminated (subject to backup retention)
• Logs/analytics — up to 12–24 months

Afterwards, data is anonymized or securely deleted.

8. Your Rights

Depending on your location and applicable law, you may have rights including:

• Access, rectification, erasure ("right to be forgotten")
• Restriction of processing, data portability
• Object to processing (including for direct marketing)
• Withdraw consent (where processing is based on consent)

To exercise rights, contact privacy@tensflare.com. We respond within legally required timeframes (usually 30 days).

9. Security

We implement reasonable technical and organizational measures to protect data, including:

• Encryption in transit (TLS) and at rest (where appropriate)
• Access controls, regular security testing
• Incident response procedures

No system is 100% secure. You are responsible for keeping your login credentials confidential.

10. Data Protection Officer

Tensflare has appointed a Data Protection Officer (DPO) in accordance with the Nigeria Data Protection Act 2023 and Article 37 of the GDPR. The DPO oversees our data protection strategy, handles data subject requests, and serves as the point of contact for supervisory authorities.

11. Contact Us