Privacy Policy

1. Scope and Roles

This Privacy Policy applies to Minitap, Inc. and its affiliates and subsidiaries, including MINITAP LIMITED in the United Kingdom and MINITAP in France (together, "Minitap," "we," "us," or "our"), and to our websites, dashboard, APIs, command-line tools, integrations, mobile and web testing infrastructure, support, and related services (collectively, the "Platform").

The Minitap entity responsible for your information depends on your relationship with us. If an order form, invoice, account record, or other written agreement names a Minitap entity, that entity is the primary controller for account, billing, and commercial relationship information. If no local entity is identified, Minitap, Inc. is the primary controller for those purposes. Minitap group entities may also process information as affiliates, service providers, or processors to support the Platform.

For account, billing, website, marketing, and support information, we generally act as an independent controller or business. For source code, builds, test plans, recordings, logs, repository data, and other content submitted by or on behalf of a customer ("Customer Content"), we generally act as a processor or service provider for the customer. If we have signed a data processing agreement, order form, or other written agreement with you, that agreement controls where it conflicts with this policy.

2. Information We Collect

Information you provide

• Name, work email, company name, role, workspace details, and login credentials or authentication identifiers.
• Billing, plan, tax, and payment-related information. Card details are processed by our payment provider and are not stored directly by Minitap.
• Support messages, sales communications, feedback, demo requests, security questionnaires, and other information you choose to send us.

Customer Content processed to provide QA

• Repository contents and metadata, including branches, commits, pull requests, file paths, configuration files, and code snippets needed to understand and test your application.
• Test plans, product specs, acceptance criteria, app configuration, build settings, and instructions you provide through the dashboard, CLI, MCP, API, Slack, GitHub, or other integrations.
• Application builds and targets, including APKs, IPAs, simulator builds, web application URLs, app identifiers, logs, crash data, screenshots, videos, device interactions, and run results.
• Test data entered into your app during a run. You should avoid submitting production secrets, regulated data, or sensitive personal information unless we have agreed to appropriate safeguards in writing.

Information collected automatically

• IP address, browser and device information, operating system, referring pages, timestamps, pages viewed, feature usage, session metadata, and diagnostics.
• Cookies or similar technologies used for authentication, security, preferences, analytics, and product reliability.
• Integration event data, such as GitHub, Slack, CI/CD, or webhook events that you authorize the Platform to receive.

3. How We Use Information

We use information to:

• Provide, operate, secure, troubleshoot, and improve the Platform.
• Generate, maintain, and execute QA scenarios for mobile and web applications, including on iOS and Android device environments and in web browsers.
• Build or install customer applications for testing, run scenarios, simulate supported conditions, and produce reports, screenshots, videos, logs, and issue summaries.
• Connect authorized integrations, trigger runs, read relevant repository context, write permitted comments or statuses, and send notifications at your direction.
• Process payments, manage subscriptions, enforce our Terms of Use, and provide customer support.
• Detect, prevent, and investigate fraud, abuse, security incidents, reliability issues, and violations of our policies.
• Comply with legal obligations, respond to lawful requests, and protect the rights, safety, and property of Minitap, customers, and others.
• Create aggregated or de-identified statistics that do not identify a customer, user, repository, app, or individual.

4. AI Processing and Model Training

Minitap uses AI systems and, where needed, third-party AI providers to understand application context, generate and maintain test scenarios, operate testing agents, summarize results, classify issues, and support related Platform features.

We use aggregated usage and performance data that does not identify a customer, its end users, or its applications to operate, secure, and improve the Platform.

Minitap does not use Customer Content to train artificial intelligence or machine learning models. This applies to all plans and includes de-identified Customer Content. We do not sell Customer Content or create a reusable source-code corpus from customer repositories.

When Customer Content is sent to an AI provider, it is sent only as needed to provide the Platform and is subject to contractual, technical, and organizational restrictions intended to limit processing to Minitap-directed service delivery. If you use a bring-your-own-key provider configuration, that processing may occur through your own provider account and may be governed by your provider settings and terms.

Feedback you submit about a result may be used to adjust future triage, scenario suggestions, and app-specific behavior for your workspace. Such adjustments apply only to your workspace, and feedback is not used to train models.

5. How We Share Information

We disclose information only as needed for the purposes described in this policy:

• Service providers and subprocessors that help us host, store, secure, monitor, analyze, support, and deliver the Platform, including cloud infrastructure, database, payment, analytics, communications, support, and AI service providers.
• Integrations you authorize, such as GitHub, Slack, CI/CD systems, app stores, or other third-party services you connect to the Platform.
• Customer administrators and workspace users, according to their permissions and the product features they use.
• Professional advisers, auditors, insurers, and legal authorities where reasonably necessary for compliance, risk management, dispute resolution, or legal process.
• Parties involved in a merger, acquisition, financing, corporate reorganization, or sale of assets, subject to appropriate confidentiality obligations.

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising as those terms are used under California privacy law.

6. Integrations and Repository Access

When you connect GitHub or another repository provider, you authorize Minitap to access the repositories, metadata, pull requests, branches, build configuration, and related events permitted by the integration. We use that access to provide QA features such as scenario generation, affected-test suggestions, build and run orchestration, status updates, comments, and issue reports.

You control which repositories and integrations are connected and may revoke access through the applicable provider. Revoking access may limit or disable Platform features.

7. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit, monitoring, logging, vendor review, and internal security processes. No system is completely secure, and we cannot guarantee absolute security.

If we learn of a security incident affecting personal information or Customer Content, we will investigate, take appropriate remediation steps, and notify affected customers or individuals where required by law or contract. Security inquiries can be sent to security@minitap.ai.

8. Retention and Deletion

We keep information only as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required by law, contract, security, audit, fraud prevention, tax, accounting, or dispute-resolution obligations.

Customer Content is retained while an account, trial, workspace, or subscription is active and for a limited period afterward to allow recovery, support, billing, security review, and orderly deletion. Unless a written agreement says otherwise, we aim to delete or de-identify inactive Customer Content within 30 days after account termination, trial expiration, or a verified deletion request. Backups and security logs may take longer to expire from ordinary rotation.

Billing, tax, account, and transaction records may be retained for the period required by applicable law. Aggregated or de-identified data that no longer identifies a customer, repository, app, user, or individual may be retained for analytics and reliability purposes.

9. International Transfers

Minitap operates globally and may process information in the United States, United Kingdom, European Economic Area, and other locations where we, our affiliates, or our service providers operate. Where required, we use appropriate transfer mechanisms such as standard contractual clauses, data processing terms, and related safeguards.

10. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, export, or withdraw consent for certain personal information. California, Colorado, Connecticut, Utah, Virginia, EEA, UK, Swiss, and other privacy laws may provide additional rights.

To make a request, email privacy@minitap.ai. We may need to verify your identity and authority before completing a request. If we process Customer Content on behalf of your organization, we may refer your request to that organization.

We do not sell personal information. We do not knowingly process personal information of children under 13 or the age required by applicable law. If you believe a child has provided personal information to Minitap, contact us so we can take appropriate action.

11. Cookies and Analytics

We use cookies and similar technologies for authentication, security, preferences, analytics, and product reliability. We do not use advertising cookies on the Platform. You can manage cookies through your browser settings, but blocking some cookies may affect Platform functionality.

12. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will provide notice by posting the updated policy, emailing account administrators, or using another reasonable method. Continued use of the Platform after an updated policy becomes effective means the updated policy applies.

13. Contact

Minitap, Inc.
2261 Market Street
San Francisco, CA 94114
United States

Privacy: privacy@minitap.ai
Security: security@minitap.ai
Legal: legal@minitap.ai

Minitap group entities referenced in this policy include MINITAP LIMITED, company number 16860101, C/O Founders Law Hamilton House, 1 Temple Avenue, London, United Kingdom, EC4Y 0HA, and MINITAP, French SAS, SIREN 999 165 327, 25 rue Danton, 94270 Le Kremlin-Bicetre, France.