Privacy Policy

1. Scope

This Privacy Policy explains how QAP Tools processes information when you use its Bug Report Generator, Test Case Generator, Issue Analyzer, screenshot upload features, and related functionality. It applies to the public QAP Tools service and does not claim to replace rights or obligations that apply under the law of a particular jurisdiction.

2. Anonymous, No-Account Service

QAP Tools V1 does not provide user accounts or authentication. The service uses an anonymous functional session to associate requests, temporary uploads, usage limits, and related operational records with the same browser. The session does not require your name or email address.

3. Information You Provide

Depending on the tool, you may provide a bug description, feature or functionality description, additional context, issue description, response-language choice, and optional screenshots. This content may contain personal information if you choose to include it.

• Bug Report descriptions and selected response language.
• Test Case feature descriptions, additional context, and selected response language.
• Issue Analyzer descriptions and selected response language.
• Information contained in optional screenshots.

4. Screenshots and Uploaded Content

Screenshots are optional and are stored privately for temporary processing. Their application access and metadata are time-limited. QAP Tools attempts cleanup after use or expiry, but physical deletion may occur later because of operational recovery, failed cleanup, backups, or provider processes.

Screenshots supplied for generation are validated and may be sent to the AI provider as visual input. Removing a file before submission prevents it from being included in that request.

5. AI Processing

QAP Tools uses the OpenAI API to generate bug reports, test cases, and issue analyses. Submitted text, selected language, and screenshots you attach may be transmitted to OpenAI for this purpose. When you choose Create Bug Report, an Issue Analyzer to Bug Report transfer may also transmit the original issue description, original screenshots retained for that transfer, and the generated analysis and recommendations.

QAP Tools configures Responses API requests with storage disabled for the requested response. OpenAI may separately process or retain information under its applicable API data controls, security and abuse-monitoring practices, contractual settings, and legal obligations. QAP Tools does not represent that Zero Data Retention applies.

6. Technical and Functional Information

The service processes ordinary request information needed to operate and secure the site, which may include network and device information, timestamps, request identifiers, and an IP address supplied by hosting infrastructure. The application uses a keyed representation of the client IP for short-lived abuse prevention rather than storing the raw IP in its rate-limit records.

Operational records may include anonymous ownership references, upload metadata, fingerprints, generation identifiers, status, timestamps, quotas, rate-limit events, and AI usage or accounting information.

7. Functional Cookies

QAP Tools uses functional cookies and does not use them for advertising or behavioral tracking.

• Anonymous session cookie: associates an anonymous browser session with operational records. It is HttpOnly, Secure in production, SameSite=Lax, and may remain for up to 30 days.
• Language preference cookie: stores only the EN or RU interface preference, uses SameSite=Lax, and may remain for up to one year.

8. How We Use Information

• Provide the requested generation and analysis features.
• Validate and temporarily process screenshots.
• Return consistent results for duplicate requests.
• Enable the Issue Analyzer to Bug Report transfer selected by the user.
• Enforce file, usage, quota, rate, concurrency, and service-availability limits.
• Maintain security, prevent abuse, troubleshoot failures, and account for AI usage.
• Comply with applicable law and protect the service, users, and third parties.

9. Legal Bases Where Applicable

Depending on your jurisdiction and the processing involved, QAP Tools may rely on the performance of requested services or steps taken at your request, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where applicable. Any reliance on legitimate interests is subject to the balancing and other requirements of applicable law.

10. Service Providers

QAP Tools uses Vercel for hosting and infrastructure, Vercel Blob for private screenshot storage, Upstash for operational Redis data storage, and OpenAI for AI processing. These providers process information to perform services for QAP Tools under their applicable terms, settings, and legal obligations. Their infrastructure, backups, logs, and security records may follow provider-specific retention practices.

11. Data Retention and Deletion

QAP Tools retains information only for operational purposes and for periods supported by the current service design. Retention may be extended where reasonably necessary for security, recovery, legal obligations, disputes, or enforcement.

• Anonymous session cookie: up to 30 days; language preference cookie: up to one year.
• Rate-limit state: approximately two minutes.
• Generation idempotency state and cached generated result: approximately one hour.
• Successful-generation quota: a 12-hour rolling window.
• Issue Analyzer to Bug Report transfer: approximately one hour. Original screenshots supporting an eligible transfer may remain available to the application for approximately that transfer window.
• Other screenshot application availability: approximately 30 minutes; screenshot metadata: up to approximately 25 hours unless removed earlier. QAP Tools attempts cleanup after use or expiry, but physical deletion may occur later for operational or provider reasons.
• AI budget and accounting records may be retained without an application-level expiry. They are operational records and are not designed to contain full prompts or screenshot contents.

12. Security

QAP Tools uses reasonable technical and organizational measures appropriate to the service, including private screenshot storage, input validation, anonymous ownership controls, restricted server-side credentials, and usage protections. No system or transmission method is completely secure, and QAP Tools cannot guarantee absolute security.

13. International Processing and Transfers

QAP Tools and its service providers may process information in countries other than the country where you are located. Where required, transfers are handled subject to applicable legal mechanisms and provider arrangements. Specific processing locations may depend on provider configuration and service availability.

14. Privacy Rights

Depending on your jurisdiction, you may have rights to request information, access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of certain automated processing. These rights are not absolute and may be limited by applicable law.

Requests may be submitted by email. Because QAP Tools is anonymous and has no accounts, we may need information such as your retained session context or request details to reasonably verify and locate records. We may be unable to identify records if you no longer have relevant identifiers. QAP Tools does not currently provide a self-service privacy dashboard, automatic export, or one-click deletion.

15. EEA, United Kingdom, and Switzerland

If the GDPR, UK GDPR, Swiss data-protection law, or related rules apply, you may have jurisdiction-specific rights and may be entitled to complain to an appropriate supervisory authority. Processing and transfers will be addressed according to applicable requirements. Nothing in this Policy limits rights that cannot lawfully be limited.

16. United States and California

Residents of California or other US states may have rights concerning access, correction, deletion, portability, or information about collection and disclosure, depending on the law and whether it applies to QAP Tools. QAP Tools does not sell personal information, use personal information for behavioral advertising, or share personal information for cross-context behavioral advertising as those concepts are understood in applicable US privacy laws.

17. Other Jurisdictions

Privacy laws in Canada, Australia, Brazil, and other jurisdictions may provide additional rights subject to their scope and exceptions. QAP Tools will consider properly submitted requests as required by applicable law.

18. Children's Privacy

The service is not specifically directed to children. Do not submit children's personal information unless it is necessary, lawful, and supported by any authorization or consent required under applicable law. If you believe a child supplied personal information improperly, contact us.

19. Sensitive and Confidential Information

Do not submit sensitive or confidential information unless strictly necessary and you are authorized to do so.

• Passwords, API keys, authentication tokens, financial credentials, or production secrets.
• Government identifiers, health information, biometric data, or precise location.
• Children's personal information, trade secrets, or confidential customer information.
• Any other highly sensitive personal or business information.

20. AI-Generated Content

AI-generated content can be inaccurate, incomplete, inappropriate, or unsuitable for a particular purpose. It requires human review. QAP Tools does not use its output to make legal or similarly significant decisions about users, and users remain responsible for deciding whether and how to use generated content.

21. Sale, Sharing, and Advertising

QAP Tools does not sell personal information, provide behavioral advertising, use advertising pixels, or operate an advertising network. No first-party or third-party analytics implementation is currently used. If these practices materially change, this Policy will be updated and any controls required by applicable law will be provided.

22. Changes to This Policy

This Policy may be updated to reflect changes to the service, providers, or applicable requirements. The revised version will state a new effective date. Material changes may be communicated through the service where appropriate.

23. Contact

For privacy questions or requests, contact: