Privacy Policy

Effective date: 2026-05-11

OttoTester (“OttoTester,” “we,” “us,” or “our”) is a hosted service operated by Business Performance Systems, LLC (“the Company”). We respect your privacy and have written this policy in plain language so you can understand what we do with information about you and your tests.

If you have any questions about this policy or about how OttoTester handles information, contact us at support@ottotester.ai.

Who this policy applies to

This policy applies to:

• People who sign up for an OttoTester account, including via third-party sign-in (Google, GitHub, or similar).
• Members of organizations and workspaces that use OttoTester.
• Visitors to ottotester.ai.

It does NOT apply to third-party services we link to (for example, the third-party authentication providers you may use to sign in). Those services have their own privacy policies that govern how they handle your information.

Information we collect

Account information

When you sign up, we collect the information your sign-in provider shares with us (typically your name, email address, and a profile photo URL) and any account settings you configure inside OttoTester.

Information about the apps you test

When you point OttoTester at a web application, our agents browse that application to plan, write, and run tests. We collect and store:

• URLs, page snapshots, and accessibility tree information our agents observe during exploration.
• Test plans, test scripts, and test results our agents produce.
• Per-run artifacts (screenshots, traces, video recordings, network logs) generated by the test runner.
• Credentials you provide for the agents to use during testing (for example, login usernames and passwords for the application under test). These are stored encrypted and used solely to perform the tests you have configured.
• Files you upload as test data (for example, PDFs, images, or documents used in file-upload steps).

Usage information

We collect information about how OttoTester itself is used — including aggregate run counts, model usage and cost, agent iterations, error rates, and feature usage. This helps us operate the service, bill correctly, and improve the product.

Diagnostic information

We collect diagnostic information that helps us run the service reliably — server logs, telemetry traces, and crash reports. This information may incidentally include URLs, application paths, or parts of your test data.

How we use information

We use the information described above to:

• Provide the service — running test agents, materializing test artifacts, returning results, and surfacing reports.
• Authenticate you and protect your account.
• Bill you correctly and account for usage.
• Improve the service — including improving the quality of our AI agents through internal evaluation.
• Communicate with you about service updates, billing, or security issues.
• Comply with legal obligations and respond to lawful requests.

We do not sell your information to third parties for advertising.

Third parties

OttoTester runs on third-party infrastructure and uses third-party services to deliver the product. The principal categories are:

• Cloud hosting — for running the application and storing run artifacts.
• AI model providers — to power the planner, generator, and healer agents. Prompts and the application context we send may include information about the app you are testing.
• Authentication providers — when you choose to sign in with Google, GitHub, or a similar provider.
• Email delivery — to send transactional emails (sign-in, invitations, billing receipts, alerts).
• Observability — to capture telemetry traces and metrics that help us run the service reliably.
• Virus scanning — to scan files you upload as test data.

We choose providers that we believe maintain reasonable security practices. A current list of subprocessors is available on request at support@ottotester.ai.

How long we keep information

We retain account information for as long as your account is active and for a reasonable period afterward to comply with legal obligations. Run artifacts (screenshots, traces, video recordings) are retained according to your organization’s plan and any retention policy you have configured. You can delete individual tests, runs, or test data at any time through the application.

Your choices

Depending on where you are located, you may have rights under your local privacy law to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated information.
• Object to or restrict certain processing of your information.
• Request a portable copy of your account information.

To exercise any of these rights, contact us at support@ottotester.ai. We will respond within a reasonable time and in accordance with the applicable law.

Security

We follow reasonable industry practices to protect information, including encryption in transit (TLS) and at rest, scoped access controls, and audit logging. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

If you believe you have discovered a security issue, please report it to support@ottotester.ai so we can investigate and respond.

Children

OttoTester is not intended for use by children under 16. We do not knowingly collect information from children. If you believe a child has provided us with information, please contact us so we can delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the Effective date above and, where appropriate, notify you through the application or by email before the change takes effect.

Contact

Questions about this policy or about how OttoTester handles information should be sent to:

Email: support@ottotester.ai