This policy explains what personal data GUI Test Studio SARL ("we") collects through this website and the GUI Test Studio applications, why, and what your rights are.We keep it short because we collect little.
The short version
- Your tests, recordings, screenshots, results and reports stay on your own computers.We never receive them.
- This website stores your account (email and name) and your subscription status.Your account is registered securely: it is hosted on Google Cloud's infrastructure, encrypted in transit and at rest, and monitored around the clock.
- When you sign up, sign in and when the applications send usage statistics, we record the approximate place your connection comes from: its country and city.Your IP address itself is never stored.Details in "Where you connect from" below.
- If you sign in with Google, Google tells us your name, your email address and your profile picture, and nothing else.We use them only to create your account and sign you in.We never see your Google password, we ask for no access to your Google data, and we never sell or share what Google tells us.Details in "Signing in with Google" below.
- The applications sign in with your account and check regularly that your trial or subscription is still running.For that we keep a short description of each computer you sign in on.Never a test, a recording or a screenshot.
- The applications send anonymous usage statistics (which app was started, how many tests were recorded and run, how they ended, some settings) unless you turn them off.They never contain a test, a file name, an address, a screenshot or a text from your screens.Turning them off deletes what your computer sent; we then only count that statistics were turned off, with nothing that identifies you or your computer.
- Payments are handled by Lemon Squeezy, who acts as merchant of record.We never see your card number.
- We send you emails about your account.Product news only if you ask for it, and you can stop them at any time.
What we collect and why
How you found us. When you create an account, the website that first sent you here and the page you first arrived on (see "Cookies" below), and the approximate place your connection came from (its country and city, see "Where you connect from" below; your IP address itself is never stored).We use it only to understand which channels and countries bring us customers.
Where you connect from. When you create an account, sign in on this website, sign in to the applications, when the applications check your trial or subscription, and when they send usage statistics, our server works out the approximate place the connection comes from: its country, region and city.The country is the one our hosting provider's network names for the connection's IP address; the region and the city are looked up from that address with ipwho.is (see "Who processes it for us").Your IP address itself is never stored: not with your account, not with the statistics, not in our logs.To avoid asking twice, our server remembers a lookup's answer in its memory for a day at most, under a one-way key made from the address that cannot be turned back into it.What we keep is the country, the region and the city, and when they were seen: where your account was created from and where it last connected from, and, for a computer that shares usage statistics, where its statistics last came from.It is never precise: a city, not a street.We use it only to understand where our customers are, for our sales and our support, and we never share it.
What you read on the blog. When you open a blog article, and again once you have really read it (it stayed on screen about 30 seconds, or you scrolled past most of it), we count the article, the language you read it in and the website or page that sent you to it.Your IP address and your browser's details are never stored: they only go into a key that changes every day and cannot be turned back into them, so that a reader is counted once a day.If you are signed in, the count is linked to your account.A cookie also remembers which articles you read (see "Cookies" below), so that, if you then create an account, we know which articles helped.We use this only to learn which articles are useful, and we never share it.
Which pages are visited. Each page you open on this website is counted: the page, without its query string, and the language it is shown in, so that we know how many visits and how many visitors each page has per day.No cookie is used for this and nothing is stored in your browser.Your IP address and your browser's details are never stored: they only go into a key that changes every day and cannot be turned back into them, so that a visitor is counted once per page and day.Those keys are deleted within two days, and only the daily counts per page remain, which name nobody.They are not linked to your account: being signed in only serves to leave our own team's visits out.Pages of your account and addresses holding a private link are not counted.Robots are not counted, and neither is a browser that sends Do Not Track or Global Privacy Control.
Protecting sign-in. To stop password guessing and floods of email, we count requests to sign in, sign up, reset a password and download.The counters hold a one-way key made from your connection's address, your email address or your account, never those themselves, and they are deleted within a day.
Account data. Your email address, optional name, whether your email is verified, and your news preference.We need it to let you sign in, to manage your trial and subscription, and to answer you.Product news, learning resources and updates are sent to accounts that keep the news on: the box is ticked when you sign up, and you can untick it there, on your account page, or with the link at the foot of every news email - account emails and messages from our team are unaffected.
Profile picture. Optional: the one you upload on your account page, or the one your Google account provides when you sign in with Google.It is shown on this website and in the applications, so that you see which account they use.You can replace or remove it at any time.
Your team. If you share your subscription with a team, we keep who owns the team, who its members are (their accounts), the invitations sent and their email addresses, and the machine keys you create for computers nobody signs in on.The owner sees each member's name, email and computer name; a member sees the owner's name and email.We need it to count the seats your plan covers and to stop the applications for everyone when the subscription ends.
Your computers. Each computer where you sign in to the applications is recorded on your account: an anonymous identifier that tells one computer from another, its name, its Windows version, the application used and when it last checked in.We need it to count the computers your plan covers, to let you see and deactivate them, and to stop the applications when a trial or subscription ends.Apart from the usage statistics described below, which you can turn off, the applications send nothing else: never your tests, recordings, screenshots or results.
Usage statistics. How the applications are used, described in detail in the next section.On by default, off with one switch.
Why you uninstalled. When you remove the suite, the uninstaller asks why: the reason you choose and, if you write them, your own words, with the version and language of the suite.If the computer was signed in, the answer is linked to your account and we may write to you once to ask how we can help.A silent uninstall (one run by a script or an IT department) asks nothing and sends nothing.
Subscription data. From Lemon Squeezy we receive the plan, the number of users, the subscription status, renewal dates and the last four digits and brand of the card, so we can show them in your account.
Messages. What you send through the support form or by email, to answer you.
We do not use advertising cookies or third-party trackers, and we never sell or share your personal data.
Signing in with Google
You can create your GUI Test Studio account, or sign in to it, with your Google account instead of a password.This section describes exactly what we receive from Google and what we do with it.
What we receive. We ask Google only for the basic sign-in permissions (the "openid", "email" and "profile" scopes).With your consent, Google then tells us: your Google account identifier, your email address and whether Google has verified it, your name, and the address of your profile picture.We do not ask for, and cannot reach, your Gmail, contacts, calendar, files or any other Google data, and we cannot act on your behalf.
How we use it. Only to create your GUI Test Studio account or sign you in to it; to link it to an account you already have with the same email address, so that you keep a single account; to send the emails about your account to that address; and to show your name and picture on this website and in the GUI Test Studio applications, so that you see which account they use.
What we never do with it. We do not sell, rent or share Google user data with anyone.We do not use it for advertising, we do not use it to build profiles, and we do not use it to develop, improve or train artificial intelligence or machine learning models.Nobody at GUI Test Studio SARL reads it, except to answer a request you make to our support.
How it is protected and kept. It is stored with your account in our database, on Google Cloud's infrastructure, encrypted in transit and at rest.We keep it for as long as your account exists.
How to remove it. You can stop signing in with Google at any time by removing GUI Test Studio's access on your Google account's permissions page (myaccount.google.com/permissions).To have your account and every piece of data Google told us deleted, write to us from your account's email address: we delete it within one month, and from our backups within 30 more days. [email protected]
Google's policy. GUI Test Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Usage statistics (telemetry)
To learn which parts of the suite are used, which fail and what to improve, the applications send anonymous usage statistics while you leave them on.
What is sent.
- That the suite was installed or uninstalled, and when; which of the three applications was started, and when.
- For a recording: what kind of target it was (the screen, an app, an area, a phone, a web app), its length, how many steps and checks it holds by kind, and which checks you chose.
- For a run: where it was started (the application's window, the command line, a CI/CD pipeline or a prompt), how it ended (passed, or which kind of check failed), how long it took, how many checks passed and failed, whether it was a web test, in which browser family (Chrome, Edge, Firefox) and on which kind of device (desktop, phone, tablet).
- Counts of tests created, opened and saved, how each test was created (recorded, from a prompt to an AI assistant, made in GUI Test Studio, imported from Figma), and how many times some features were used (such as Save & Run, the bug report or Import from Figma).
- When a test is created, changed or run from a prompt: the kind of AI assistant app it came through (such as Claude Desktop, Claude Code, ChatGPT with Codex or VS Code).Never the prompt, the conversation or anything the assistant said.
- Where the statistics come from: the approximate country, region and city of the connection that sends them, worked out by our server from its IP address, which is never stored (see "Where you connect from").
- Settings and computer facts: the suite's version and language, the country chosen in Windows' region settings (a preference you choose, not a location), the Windows version, the main screen's size, the number of processor cores and the memory, whether a gamepad is used, the hardware acceleration setting, and whether AI Smart Verification is on, where it runs (cloud or this computer), its provider and model name.Never your API key.
What is never sent. No test, recording, screenshot or result.No test name, file name, folder, path or web address.No text read from your screens and nothing you type.
How your computer is identified. By an anonymous identifier that tells one computer from another and names neither you nor your computer.While the computer is signed in to your account, the statistics are linked to your account, so that we can relate usage to plans and trials.We use them only in aggregate, to improve the product; never for advertising, never to make decisions about you.
Your choice. The installer asks before anything is sent, with the switch ticked by default.You can change it at any time in either application, under Preferences, General, Privacy.Turning it off stops the statistics at once and deletes everything your computer sent before.We then only count that statistics were turned off: when, from which application and version, and whether in the installer or the settings - nothing that identifies you or your computer.For a silent install, the /TELEMETRY=off option turns it off.
Legal basis and retention. Our legitimate interest in maintaining and improving the product (Article 6(1)(f) GDPR), balanced by the minimal content above and your right to object at any time with the switch.The statistics are kept for at most 24 months, then deleted automatically.
What the applications do with your data
GUI Test Studio, GUI Test Runner-Recorder and the command-line runner need you to be signed in with your account: you sign in once in your browser, and they then check regularly with this website that your trial or subscription still runs.Nothing about your tests travels with that check.Signing out, or deactivating a computer from your account page, frees its seat.
GUI Test Studio and GUI Test Runner-Recorder run on your computers and store everything as local files.The optional AI Smart Verification feature is off by default.With it off, or used with a local AI model, one we provide or one you bring, nothing leaves your machine.If you enable a cloud AI provider such as OpenAI or Anthropic, the feature relies on that provider and shares the failed check with it, using your own API key.That exchange is between you and that provider under their terms; nothing passes through us.
Legal bases
- Your account, your computers, your team and your subscription: to perform our contract with you (Article 6(1)(b) GDPR).
- Usage statistics and uninstall answers: our legitimate interest in improving the product (Article 6(1)(f) GDPR).You can object at any time.
- Blog reading counts: our legitimate interest in knowing which articles are useful (Article 6(1)(f) GDPR).You can object at any time by writing to us.
- Page visit counts: our legitimate interest in knowing which pages are useful (Article 6(1)(f) GDPR).Your browser's Do Not Track or Global Privacy Control signal stops them.
- The approximate place you connect from: our legitimate interest in knowing where our customers are, for our sales and our support (Article 6(1)(f) GDPR).You can object at any time by writing to us.
- Product news emails: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
- Billing records: our legal obligations (Article 6(1)(c) GDPR).
Who processes it for us
We use a few service providers, each only for the purpose below.Those that hold your data for us are bound by a data processing agreement.
- Our hosting provider, which runs this website and its database on Google Cloud's infrastructure.
- Lemon Squeezy, merchant of record for payments, taxes and invoices.
- Our email delivery service, which delivers the emails this website sends.
- Our email provider, for our support mailbox.
- Google, only when you choose to sign in with Google (see "Signing in with Google").
- ipwho.is, an IP geolocation service: our server sends it the IP address of a connection, and it answers with the approximate country, region and city (see "Where you connect from").It receives nothing else about you: no name, no email, no account.
Some of them may process data outside the European Economic Area.Such transfers rely on the European Commission's adequacy decisions or its Standard Contractual Clauses.
How long we keep it
Account data for as long as your account exists, then up to 30 days in backups; the place your account last connected from is replaced each time you connect.Billing records as long as tax law requires.Support messages and uninstall answers up to three years.Usage statistics, blog reading counts and page visit counts at most 24 months.
Your rights
You can access, correct, export or delete your personal data, and object to or restrict its use.Write to [email protected]; we answer within one month.You may also complain to your data protection authority (in France, the CNIL).
California residents (CCPA / CPRA)
In the last 12 months we collected the categories of personal information described above: identifiers (your email, name, a computer's identifier), commercial information (your plan and subscription), internet or other electronic network activity (the usage statistics, the blog reading counts and the page visit counts), approximate geolocation (the country, region and city of a connection, never a precise location), and the content of the messages you send us.We collect them for the purposes described above.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.We do not collect sensitive personal information.
You have the right to know what we collect, to obtain a copy, to correct it and to delete it, and the right not to be discriminated against for using these rights.Send a request to [email protected], or through an authorized agent; we verify it by asking you to confirm from your account's email address, and we answer within 45 days.Because we never sell or share personal information, there is nothing to opt out of; we still honor the Global Privacy Control signal as a request to opt out.
Children
GUI Test Studio is a professional tool.It is not directed to children under 16, and we do not knowingly collect their data.
Cookies
We use the cookies needed to keep you signed in, to protect forms against forgery and to remember the language you chose.
One more cookie is set on your first visit: it remembers the website that sent you here (for example a search engine or a partner's page, never what you searched for) and the page you arrived on.If you then create an account, we keep that with your account, so we know how people find us.It holds nothing else, lasts 180 days and is never shared.
Reading a blog article sets one more cookie: the list of the articles you read on this site (at most 12, nothing else).If you then create an account, that list is kept with it, so we know which articles helped.It lasts 180 days and is never shared.
A Partner's referral link also sets Lemon Squeezy's referral cookie, so the Partner is credited when you buy.None of these cookies is used for advertising.
Contact
GUI Test Studio SARL, [email protected].