This Policy explains how TestCLIX processes personal data through testclix.com, portal.testclix.com, its API, subscriptions, support and integrations. The service is for business users only. See also our Cookie Policy and Terms of Service.
1. Who we are
TestCLIX sp. z o.o.
Al. Jerozolimskie 146C, 3rd floor, 02-305 Warsaw, Poland
KRS 0000348368 · NIP 6762415688 · REGON 121160537
Share capital: PLN 5,000
clix@testclix.com2. Data we process as controller
| Purpose and data | Legal basis | Retention |
|---|---|---|
| Accounts, authentication, projects and service delivery: identity, login, roles, activity and technical data | Contract; legitimate interests in administration and security | While active and afterwards as needed for security and claims |
| Subscriptions, payments, invoices and tax: contact, company, VAT, order and payment-status data | Contract; legal obligations; payment and fraud-management interests | Contract term and statutory accounting, tax and claims periods |
| Support, service messages, security and compliance: correspondence, IP, device, requests, errors and logs | Contract; legal obligations; support, security and claims interests | As needed to resolve the matter and meet security or legal duties |
| Customer-selected integrations: destination, configuration, delivery data and selected content | Contract; delivery-diagnostics interests | While enabled and as needed for diagnostics |
| Analytics and advertising: online, device, page, campaign and conversion data | Consent | Until withdrawal, subject to provider settings |
| Cookie choices: categories, identifier, policy version and timestamp | Legal obligation; interest in recording choices | 180 days, unless reset earlier |
We receive data from users, their organisations, Amazon Cognito, Google OAuth, Chargebee, payment partners, Google and automatically when the service is used. Account and billing data is required to provide the relevant service; analytics and advertising are optional.
A business user who gives us another person's data must be authorised to do so and provide any required notice.
3. Customer data processed on instructions
For personal data in customer test materials (“Customer Content”), the customer is the controller and TestCLIX is its processor under the data-processing terms in Section 10 of the Terms.
Customer Content may include URLs, steps and form text, screenshots, recordings, page or DOM context, HAR and network data, headers, cookies, credentials or secrets, prompts and AI outputs, execution history, alerts and other data visible in a tested system.
Customers must be authorised to test their systems, have a legal basis, give required notices, restrict access and avoid unnecessary sensitive data. We process Customer Content only to provide, secure and support the service, follow instructions or comply with law. Retention follows the customer's plan, configuration and instructions; restricted backups or legal records may remain temporarily after deletion.
If your data appears in a customer's test, contact that customer first. We will assist it as required by law and Section 10 of the Terms.
4. Recipients and transfers
Recipients may include Amazon Web Services and Amazon Cognito, Chargebee and payment partners, Google, customer-selected Slack, Jira, Telegram, email or webhook destinations, advisers and authorities. For transfers outside the EEA or UK, we use an adequacy decision, EU Standard Contractual Clauses, the UK Addendum or IDTA, or another lawful safeguard. Eligible US transfers may use the EU-US Data Privacy Framework and its UK Extension.
5. Cookies, AI and automated decisions
Necessary technologies support authentication, security, consent, checkout and requested preferences. Google Analytics and advertising technologies require the relevant consent. Details are in the Cookie Policy.
Optional AI features process customer-selected prompts and context for test-related output. TestCLIX does not use personal data for solely automated decisions with legal or similarly significant effects. Google advertising measurement or personalisation is used only with the relevant consent.
6. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability; object to legitimate-interest processing or direct marketing; and withdraw consent at any time. Withdrawal does not affect earlier lawful processing. Contact clix@testclix.com. We may verify your identity. You may complain to UODO or, where UK GDPR applies, the ICO.
7. Security and changes
We use technical and organisational measures appropriate to risk. No online service is completely secure, and customers must protect credentials and control access.
We may update this Policy when our service, processing or law changes. We will publish the current version and give additional notice of material changes where appropriate.