Legal
Privacy Policy
Last updated September 28, 2026
This policy explains what information QA Troll collects, how we use it, and the choices you have.
Information we collect
- Account details: your name, email address, and a securely hashed password.
- Project content: the design files, screenshots, URLs, project names, and notes you upload, plus the reports we generate from them.
- Billing details: Stripe processes your payments. We keep your subscription status and a customer reference, never your full card number.
- Usage data: pages you visit, device and browser type, and general analytics, collected through Vercel Analytics and Google Tag Manager.
How we use it
- To run the Service: store your projects, compare design and dev files, and build visual reports.
- To manage your account and subscription, and to send transactional emails like receipts and password resets.
- To keep the Service secure, prevent abuse, and fix problems.
- To understand how the product is used so we can improve it.
AI processing
When you run an analysis, the relevant images and settings are sent to AI models through the Vercel AI Gateway to find and describe visual differences. We use your content only to generate your report. We do not sell it, and we do not use it to train our own models.
Service providers
We share data only with the providers that help us run QA Troll, and only as much as they need:
- Vercel: hosting, file storage (Vercel Blob), analytics, and AI Gateway
- Neon: database hosting
- Stripe: payments and billing
- Resend: transactional email
- Google: tag management and site analytics
We may also disclose information when the law requires it, or to protect the rights and safety of our users and the Service.
Cookies
We use essential cookies to keep you signed in and to secure your session. We also use analytics cookies to learn how the site is used. You can block cookies in your browser settings, but you may not be able to sign in without the essential ones.
Data retention
We keep your account and project content for as long as your account is active. When you delete a project, its files and reports are deleted too. When you delete your account, we delete your personal data within 30 days. The exception is records we must keep for legal or accounting reasons, such as billing history.
Security
Data is encrypted in transit, passwords are hashed, and every project is tied to its owner's account. No system is perfectly secure, but we work to protect your information and will notify you of any breach that affects you, as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or limit some kinds of processing. You can update your account from settings, or contact us to exercise any of these rights. We do not sell your personal information.
Children
QA Troll is not intended for anyone under 16, and we do not knowingly collect their data.
Changes to this policy
If we make significant changes to this policy, we will update the date above and let you know by email or in the app. See also our Terms of Use.
Contact
Questions? Email support@qatroll.com.
