Privacy Policy

Core Architecture & Privacy

AutomationTester.in is built as a client-side utility platform. Most of our tools (including XPath Tester, CSS Selector, JWT Decoder, and Regex Tester) process your data entirely within your browser using Web Workers and local APIs. We do not transmit, collect, or store the content of your regex patterns, tokens, or scripts.

1. Information We Collect

We collect information you provide directly to us when you create an account, subscribe to a plan, submit a tool, or contact us. This may include:

• Your name and email address (via OAuth or email registration)
• Professional details (skills, links, bio) added to your profile
• Contact form submissions (name, email, message)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your subscription payments
• Communicate with you about your account and our services
• Protect AutomationTester.in and our users from fraud and abuse

3. Payment Data & Security

All payments on AutomationTester.in are processed securely by Razorpay, a PCI DSS Level 1 compliant Payment Aggregator regulated by the Reserve Bank of India (RBI).

• We never store your credit/debit card numbers, CVVs, expiry dates, or UPI PINs on our servers.
• Payment information is transmitted directly to Razorpay over encrypted (TLS/SSL) connections.
• We store only transactional metadata (order ID, payment status, amount) for record-keeping and refund processing.

For more information on how Razorpay handles your data, please refer to Razorpay's Privacy Policy.

4. Data Localisation

In compliance with RBI requirements, all payment-related data is processed and stored on servers located within India. Our database is hosted on Supabase with an India (Mumbai) region deployment.

5. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, including:

• HTTPS encryption across the entire website
• Secure API key management (server-side only)
• Cryptographic verification of all payment and webhook signatures
• Content Security Policy (CSP) headers to prevent cross-site scripting

6. Third-Party Services

We use the following third-party services:

• Razorpay — Payment processing (PCI DSS compliant)
• Supabase — Database hosting (India region)
• NextAuth.js — Authentication (OAuth via GitHub, Google)
• Resend — Transactional emails

Each of these services maintains their own privacy policies governing data they process on our behalf.

7. Your Rights — Data Deletion

You have the right to request deletion of your personal data. To exercise this right:

• Send an email to [email protected] with the subject "Data Deletion Request"
• Include your registered email address for verification
• We will process your request within 30 calendar days
• Upon deletion, your profile, activity history, and associated data will be permanently removed

Please note that we may retain certain transactional records as required by law (e.g., payment records for tax compliance).

8. Cookies

We use essential cookies required for authentication (session tokens). We do not use third-party advertising or tracking cookies.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: [email protected]
• Phone: +91 84467 37046
• Address: Flat No. 1302, A3 - Crimson Tower, Mi Retreat Center, Arjunganj, Sultanpur Road, Lucknow, Uttar Pradesh 226002, India