Privacy Policy
Effective date: June 1, 2025
This Privacy Policy describes how BetaWindow ("we") collects, uses, and shares information when you use our platform. By using BetaWindow you consent to the practices described here.
1. Information we collect
Account information
- Email address and password hash (via Supabase Auth)
- Display name (optional)
- Billing address and card details (stored by Stripe — we never see full card numbers)
Usage data
- Jobs created, published, and their status
- Testing sessions: duration, tier, tester ID, timestamps
- Network request logs and console captures from testing sessions
- Feedback reports and quality scores
Analytics
We use PostHog to collect product analytics (page views, feature usage). PostHog data is stored in the EU. You can opt out by enabling "Do Not Track" in your browser or contacting us.
Log data
Server logs include IP address, user agent, and request timestamps. Logs are retained for 90 days and used solely for security and debugging.
2. How we use your data
- To operate and improve the platform
- To match jobs with available testers
- To process payments and disburse tester payouts
- To detect and prevent fraud and abuse
- To send transactional emails (job status, payout confirmations)
- To generate aggregate, anonymised product insights
3. Data sharing
We share data only with:
- Stripe — payment processing (PCI-DSS Level 1)
- Supabase — database and authentication (SOC 2 Type II)
- Vercel — hosting and CDN
- PostHog — product analytics
- Testers — limited to the job URL and instructions; no personal data
We do not sell personal data.
4. Data retention
- Account data: retained while your account is active + 30 days after deletion
- Network/console logs: 30 days after session completion
- Screenshots: 90 days
- Feedback reports: indefinitely (part of job record)
- Server logs: 90 days
5. Your rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Export your data in machine-readable format
- Withdraw consent for analytics
To exercise these rights, email privacy@betawindow.com. We respond within 30 days.
6. Cookies
We use strictly necessary cookies for authentication (Supabase session) and optional analytics cookies (PostHog). You can disable analytics cookies via your browser settings. We do not use advertising cookies.
7. Children
BetaWindow is not directed at children under 18. We do not knowingly collect data from minors.
8. Changes
We will notify you of material changes via email at least 14 days before they take effect.
9. Contact
Privacy questions: privacy@betawindow.com