Legal

Privacy Policy

Last updated September 28, 2026

This policy explains what information QA Troll collects, how we use it, and the choices you have.

  • Account details: your name, email address, and a securely hashed password.
  • Project content: the design files, screenshots, URLs, project names, and notes you upload, plus the reports we generate from them.
  • Billing details: Stripe processes your payments. We keep your subscription status and a customer reference, never your full card number.
  • Usage data: pages you visit, device and browser type, and general analytics, collected through Vercel Analytics and Google Tag Manager.
  • To run the Service: store your projects, compare design and dev files, and build visual reports.
  • To manage your account and subscription, and to send transactional emails like receipts and password resets.
  • To keep the Service secure, prevent abuse, and fix problems.
  • To understand how the product is used so we can improve it.

When you run an analysis, the relevant images and settings are sent to AI models through the Vercel AI Gateway to find and describe visual differences. We use your content only to generate your report. We do not sell it, and we do not use it to train our own models.

We share data only with the providers that help us run QA Troll, and only as much as they need:

  • Vercel: hosting, file storage (Vercel Blob), analytics, and AI Gateway
  • Neon: database hosting
  • Stripe: payments and billing
  • Resend: transactional email
  • Google: tag management and site analytics

We may also disclose information when the law requires it, or to protect the rights and safety of our users and the Service.

We use essential cookies to keep you signed in and to secure your session. We also use analytics cookies to learn how the site is used. You can block cookies in your browser settings, but you may not be able to sign in without the essential ones.

We keep your account and project content for as long as your account is active. When you delete a project, its files and reports are deleted too. When you delete your account, we delete your personal data within 30 days. The exception is records we must keep for legal or accounting reasons, such as billing history.

Data is encrypted in transit, passwords are hashed, and every project is tied to its owner's account. No system is perfectly secure, but we work to protect your information and will notify you of any breach that affects you, as the law requires.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or limit some kinds of processing. You can update your account from settings, or contact us to exercise any of these rights. We do not sell your personal information.

QA Troll is not intended for anyone under 16, and we do not knowingly collect their data.

If we make significant changes to this policy, we will update the date above and let you know by email or in the app. See also our Terms of Use.

Questions? Email support@qatroll.com.