Supercheck

Privacy Policy

Last updated:

1. Introduction

This Privacy Policy describes how Supercheck (“we”, “our”, or “the Service”) collects, uses, and protects your information when you use our testing, monitoring, and AI SRE platform.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Profile information from OAuth providers (GitHub, Google) if used

Usage Data

We collect usage data to provide and improve the Service:

  • Test execution logs and results
  • Monitoring check results
  • Test scripts and configurations you create
  • Screenshots, traces, and videos from test runs
  • Performance metrics from k6 load tests
  • Incident reports, investigation conversations, and evidence from connectors you configure

Billing Information

For cloud-hosted paid plans, payment information is processed by our payment provider. We do not store credit card details directly.

3. How We Use Your Information

We use your information to:

  • Provide and operate the Service
  • Execute tests and monitoring checks you configure
  • Send alerts and notifications you have set up
  • Process AI-assisted test creation, fixes, failure analysis, and SRE investigations
  • Track usage for billing purposes (cloud plans)
  • Communicate important updates about the Service
  • Improve and secure the Service

4. Data Retention

Standard Cloud plan retention periods depend on the type of data. Cloud plans are coming soon; these are the planned retention periods:

  • Playground artifacts: 24 hours
  • Monitor raw data: 7 days on Plus and Pro
  • Aggregated metrics: 30 days on Plus; 90 days on Pro
  • Job run history: 30 days on Plus; 90 days on Pro

Enterprise and self-hosted retention settings may differ. You may request deletion of your account and associated data at any time.

5. Data Sharing

We share data with third parties only as necessary to provide the Service:

  • Authentication providers: GitHub, Google for OAuth sign-in
  • AI services: Inputs you submit or authorize for test generation, analysis, and investigations, such as test code, logs, error messages, and selected connector evidence. Avoid including secrets in these inputs.
  • Payment processor: For subscription billing
  • Notification services: Email, Slack, Discord, Telegram, Microsoft Teams, and webhooks for alerts you configure
  • Support tools: Account details and support conversations when support chat is enabled
  • Error monitoring: Sentry receives technical error reports from the hosted cloud service. A report contains the error type, a shortened error message that is scrubbed to remove secrets, URLs, email addresses, quoted text, and database values, a stack trace, the service (app or worker), release, and environment, the operating system and runtime versions, and internal IDs. Hostnames and IP addresses in error messages may be included. We do not attach request contents, headers, cookies, form inputs, test scripts, or run logs. Scrubbing is automated and best effort.

We do not sell your personal information to third parties.

6. Self-Hosted Deployments

Self-hosted operators control their deployment and storage. Enabled integrations send selected data to the AI, authentication, notification, or support providers they configure. We do not have access to self-hosted application data unless it is shared with us for support. Self-hosted deployments send nothing to Sentry.

7. Security

We implement security measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Encrypted storage for sensitive data like API keys and credentials
  • Role-based access control within organizations
  • Regular security reviews

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Withdraw consent where applicable

9. Cookies

We use essential cookies for session management and authentication. We do not use third-party tracking cookies.

10. Open Source

Supercheck core is open source under AGPL-3.0-only. You can review how data is handled by examining our source code on GitHub.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or through the Service.

12. Contact

For privacy-related questions, please contact us at hello@supercheck.io.