1. Information We Collect

We collect only the technical telemetry necessary to deliver diagnostic test insights and traceability:

• CI Execution Telemetry: Assertion statuses (pass, fail, skip), run durations in milliseconds, test suite filenames, and stack trace failure logs.
• Git Metadata: Commit SHA, branch name, and pull request identifier (e.g., PR #142).
• User & Organization Data: Name, business email, organization identifiers, and authenticated sessions managed via Better Auth.

2. Zero-Model-Training AI Policy

Qably's AI agents parse code diffs in volatile memory exclusively to propose structured test assertions. We never store customer source code for model training, nor do we share your code with third-party foundation model trainers. All generated test cases remain your proprietary intellectual property.

3. Data Security & Storage

Telemetry is transmitted over strict TLS 1.3 encrypted channels and stored in PostgreSQL databases protected by AES-256 encryption at rest. API tokens are cryptographically salted and hashed using SHA-256 before storage.

4. Retention & Right to be Forgotten (GDPR / CCPA)

Execution runs are retained for the duration specified in your plan tier (90 days default). Organization owners can request complete, permanent erasure of all repository telemetry at any time by emailing [email protected].