Privacy Policy

Effective date: July 10, 2026

1. Who We Are

Robusty is a software testing platform operated from the Netherlands. We are the data controller for personal data collected through the Service. Contact us at help@robusty.io with any privacy questions.

2. Data We Collect

We collect information you provide directly: your name, email address, and account credentials when you register. We also collect data you upload to the Service (test cases, test suites, project content) and billing information processed on our behalf by our payment provider. We do not collect any data beyond what is necessary to operate the Service.

3. Analytics & Cookies

We use Umami Analytics to understand how the Service is used. Umami is cookieless and does not track individuals — it collects only aggregated, anonymised page view and event data. We do not use cookies for tracking or analytics. We may set a strictly necessary session cookie solely to keep you logged in. No cookie banner is displayed and no personal data is processed for analytics purposes.

4. Legal Bases for Processing

We process your personal data on the following grounds under GDPR Article 6: performance of a contract (delivering the Service, billing); compliance with a legal obligation (tax and accounting records, retained for 7 years under Dutch law); and legitimate interests (security, fraud prevention, and service improvement).

5. How We Use Your Data

We use your data to create and manage your account, deliver and improve the Service, process payments, respond to support requests, and comply with legal obligations. We do not sell your data or use it for advertising.

6. Data Sharing

We share data only with sub-processors necessary to operate the Service, including our cloud infrastructure provider (Supabase) and our payment processor. All sub-processors are contractually bound to protect your data and may not use it for their own purposes. We do not share your data with any third party for marketing.

7. Data Retention

We retain your account data for as long as your account is active, plus a short period afterward to handle any outstanding issues. Billing records are retained for 7 years as required by Dutch tax law. You may request deletion at any time (see section 8).

8. Your Rights

Under the GDPR you have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing; and receive your data in a portable format. To exercise any of these rights, email help@robusty.io. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. Children

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service. The effective date at the top of this page reflects the latest revision.