Privacy policy

1. Who we are

TestRaptor is a website monitoring suite (Certs, Heartbeat and Pixeldrift) operated by Expert Propriosoft inc. (NEQ 1173101222), a company based in Quebec, Canada. We act as the controller of the personal information we collect through our services.

2. Information we collect

We collect only what we need to provide our services.

• Account information: your email address and name, received from Google or GitHub when you sign in, plus a stable OAuth identifier.
• Monitoring data: the websites and domains you add, and the results of the checks we run (TLS, DNS, domain expiry, uptime history).
• Capture data: screenshots and visual diffs. These may contain third-party data if you monitor an authenticated page.
• Billing data: handled entirely by Stripe. We never see or store your card details.
• Technical data: a session cookie (tr_session) and short-lived OAuth state cookies used only during sign-in.

3. Why we use it

• To provide and operate the monitoring services you subscribe to.
• To send you alerts (email, SMS, phone or Telegram) when a monitored site changes state.
• To bill for paid plans and prevent fraud.
• To secure the platform and meet our legal obligations.

4. Where your data is stored

Your data is stored in Quebec, Canada.

5. How long we keep it

• Heartbeat: 90 days (free) or 3 years (paid).
• Pixeldrift: 30 days (free), 180 days (Starter) or 365 days (Pro).
• After you close your account, we purge your data within 30 days. You can also request an export or deletion at any time.

6. Who we share it with

We never sell your personal information. We share it only with the processors strictly necessary to run the service.

• Google and GitHub — for sign-in only.
• Stripe — for payments.
• Our hosting provider — where your data resides.
• Alert channels (email, SMS, Telegram) — only if you enable them.

7. Cookies

We use a small number of cookies: tr_session keeps you signed in across our subdomains; tr_oauth_state and tr_oauth_return protect your sign-in against request forgery and are deleted as soon as sign-in completes.

8. Your rights

Under the Quebec Act respecting the protection of personal information in the private sector (Law 25) and, where applicable, the GDPR, you may request access to, correction of, export of (in a structured format) or deletion of your personal information. Contact us and we will respond within the statutory deadlines.

9. Security and incidents

We encrypt data in transit (HTTPS) and limit access to your information. We keep a register of privacy incidents and, should one occur, we will notify the relevant authority and the affected individuals as required by Law 25.

10. Changes

We may update this policy from time to time. The date at the top of this page shows when it was last revised.

11. Contact

Privacy questions or requests: [email protected]. Expert Propriosoft inc., Quebec, Canada.