Privacy Policy

Last updated: August 2, 2026

1. What we collect

• Account data: Name, email, company (optional), hashed password
• Billing data: Handled by Stripe — we store only your Stripe customer ID
• Test data: URLs, configurations, metrics, and results you create
• Usage data: Timestamps, IP addresses, API request logs for security and abuse prevention

2. How we use it

• To provide and operate the Service
• To send transactional emails (password reset, test completion notifications)
• To enforce plan limits and prevent abuse
• To improve the Service (aggregated, anonymized analytics only)

3. Data retention

Test metrics are retained per your plan (7 days on Free, up to 1 year on Business). Account data is retained while your account is active and for 90 days after deletion.

4. Third parties

Stripe processes payments. SMTP provider sends transactional emails. We do not sell your data to any third party.

5. GDPR / Your rights

If you are in the EU/EEA, you have the right to access, correct, export, or delete your personal data. Contact privacy@openloadapi.com to exercise these rights.

6. Cookies

We use a single session cookie for authentication. No tracking cookies, no third-party analytics.

7. Security

Passwords are bcrypt-hashed. API keys are generated with cryptographically secure random bytes. All production traffic uses TLS. We run vulnerability assessments regularly.

8. Contact

Email privacy@openloadapi.com for privacy questions.