Privacy Policy

As a Data Processor, QA Touch has fair processing responsibilities under the GDPR. This means ensuring that your personally identifiable information (PII) is handled in ways that are safe, transparent, and what you would reasonably expect. According to the GDPR, it is important that data subjects are made aware of, and understand the way their PII is processed and that they have an opportunity to object if they so wish, and that they know how to do so. Our site’s job alerts subscription form requires you to give us your email address. Users may opt-out of receiving future mailings by choosing the unsubscribe link in the email received by them. This site contains links to other sites. QA Touch is not responsible for the privacy practices or the content of such Web sites.

Types Of Information We Collect

This privacy notice covers the information you share with us and/or which may be acquired or produced by QA Touch, its subsidiaries and its affiliates directly from you as you use our services, or provided by you when you visit our website or our social media pages, as well as information that is collected during events organized by QA Touch. For the purposes mentioned in this Privacy Notice, we collect the following groups of data:

Your Basic Identification And Contact Details

This may include for example your name, company, telephone number, email address, and any other information that you provide us.

Your Account Information

You provide us information when visiting our corporate website or any of the social media pages. This may include for example your name, company, official address, telephone number, email address, and any other information that you provide us.

Information About Your Customer Relationship With QA Touch

We collect personal data when you purchase our products and services. This data may include for example information about your previous purchases of QA Touch products and services, your billing information, information about QA Touch events you have participated in, and feedback you have given us.

Information On How You Use Our Website

We use cookies and web beacons to collect data on how you use our websites and view our marketing emails. This may include for example information on which QA Touch websites you have visited, how long you stayed on them, which items you clicked on, and your IP-address.

For Visitors Who Are Interested In Learning More About Our Products, Support, Or Services

• Name
• Company
• Phone
• Email
• Current ERP
• E-commerce Platform
• Message

For Visitors Who Wish To Contact To QA Touch

• Name
• Phone
• Company
• Email
• Message

Security — how we protect your data

We take data security seriously, and we back that up with real controls, not just a promise:

• SOC 2 (in progress): QA Touch is completing its SOC 2 Type II audit, with the final report expected in December 2026. Our security controls covering [security/availability/confidentiality] have already been built to meet SOC 2 requirements; we’re now in the final stage of independent audit verification. Once the report is issued, we’ll update this page and can share it directly with customers under NDA.
• Access to personal data is restricted to employees and contractors who need it to do their job, on a strict need-to-know basis.
• All staff, contractors, and board members go through privacy and security training and are contractually bound to confidentiality.
• We maintain internal controls governing how data is stored, transmitted, and ultimately destroyed.

Children’s privacy

Our website and products aren’t directed at anyone under 16. We don’t knowingly collect personal information from children. If you believe a child has given us personal data, email privacy@dckap.com and we’ll delete it.

California residents

If you live in California, the California Consumer Privacy Act (CCPA) gives you some additional, specific rights:

• Right to know what personal information we’ve collected, used, and disclosed about you in the past 12 months, and to request a copy of it.
• Right to delete your personal information, subject to certain legal exceptions.
• Right to opt out of sale or sharing of your personal information. To be clear — we do not sell your personal information, and we don’t share it for cross-context behavioral advertising either.
• Right to correct inaccurate personal information.
• Right to non-discrimination — we won’t charge you more or give you worse service for exercising any of these rights.

To exercise any of these rights, email privacy@qatouch.com with “CCPA Request” in the subject line, along with your name and enough detail for us to locate your information. We’ll respond within 45 days. If we need more time, we’ll tell you why and give you a revised timeline.

For Visitors Who Subscribe To QA Touch Blog/ Newsletters

• Email Address

For All Other Visitors Who E-Mail Us Directly Via An E-Mail Hyperlink

• E-mail message, which includes any information contained in the message, including information that can be collected by technological means.

We might receive information about you from other sources (for example information received from third parties or website visitors) and add it to our database.

Cookies And Web Beacons

In particular, we use, as do many other websites, “cookies” or small data files stored on your computer’s hard drive, as well as “web beacons” which are images invisibly embedded on a web page, to collect information during visits to the QA Touch website, including during chat sessions with QA Touch personnel. The information collected includes the visitor’s IP address, when the site was visited and what pages were visited. In some instances, we also use cookies to collect information in connection with future visits from that website, to recognize you as a previous visitor, or to track your activity on our site. If you follow a link to the site from an affiliate or promotion, we store information about your arrival from that affiliate or promotion in a session cookie. You do not need to have cookies turned on to visit our site. You can refuse cookies by turning them off on your browser. But, if you want to access web pages that require registration, you need to accept a mandatory session cookie, which you can delete after you leave the site. Web beacons, which record your IP address and the time of your visit and what pages you viewed, and are used by a third-party service which tracks site usage for us, cannot be turned off.

Information From Other Sources

We may obtain additional information about you by using your email address, or other information, to directly, or through one or more services, search over the internet, or elsewhere. We thereby obtain information that appears to be related to such an email address or other information, such as a name, age, company, and position. This helps us to update, expand, and analyze our records, identify new customers, and provide products and services that may be of interest to you.

Purpose Of Processing

The personal data you provide will be used for marketing our services to you if you have expressed interest in any of our products or services or in order to record, support and facilitate your participation in the knowledge development activities of your choice carried out by the organization. How we use information about you depends on why the information was originally collected. To give you an idea of how we process personal data, we have included some examples below.

In General, We Tend To Use Your Personal Data Especially For The Following Purposes

We use the information to improve our product services in a personalized way to serve you. Also, we use this information to track the usage of our services, to confirm your identity and prevent fraudulent activities in our services.

• To access the product
• To sell products and services to you;
• To provide customer support for sold goods or services;
• To conduct surveys, marketing events;
• To secure and optimize the website experience;
• To provide marketing communication;
• To facilitate participation in knowledge development community activities like webinars, meetups, and to provide access to resources like whitepapers and product literature.

Financial Transactions

Financial transactions happening throughout our website are handled through our payment services provider, Stripe. You can review the provider’s privacy policies at Stripe Privacy Policy We will share information with our payment services provider only to the extent necessary for the purposes of processing payments you make via our website, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

Who Has Access To The Data?

We use third parties such as service providers, and partners, to collect and process personal data on our behalf. Such service providers are only allowed to process your personal data to the extent necessary for them to provide the service we have requested from them. As a main rule, they are not allowed to use your personal data for the benefit of their own business. In order to protect your privacy, we require that all our service providers keep the personal data we provide them confidential and adequately secure. They are also required to abide by data processing agreements and applicable data protection legislation. QA Touch and its service providers function both within the European Union and outside of it, your personal data may be transferred outside the European Union. The countries to which your data is transferred may not provide the same level of data protection as your home country. Despite this, when transferring personal data to foreign countries, we will always look after its safety by ensuring that there is a legal basis for the transfer and that applicable laws governing data transfers are followed. For additional information about the third parties who have access to your data or data transfer to overseas locations, you may mail to privacy@qatouch.com.

Third-Party Links

At times, at our discretion, we may include links to other websites or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. Therefore, we have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

How Long Will The Data Be Retained?

• Test Cases and Project Data: Test cases, test executions, and other project-related data stored in QA Touch are retained for the lifetime of the customer account and for up to 90 days after the account is closed.
• Audit Logs and Activity History: Audit logs and user activity records are retained for 7 years to support security, compliance, and operational requirements.
• Account and Profile Data: Personal account and profile information will be permanently deleted within 30 days of receiving a valid account deletion request, unless retention is required to meet legal or regulatory obligations.
• User Rights: Customers may request the deletion of their QA Touch account and associated personal information by contacting privacy@qatouch.com. Requests will be processed in accordance with our Privacy Policy and applicable data protection requirements.
• Integration Event Logs: Integration logs used for troubleshooting and operational monitoring are retained for 90 days.
• Encrypted Backups: Encrypted system backups are retained for 30 days before being securely removed as part of the backup lifecycle.
• Support and Complaint Records: Customer support requests, complaints, and related communications are retained for 3 years from the date the issue is resolved to support service quality, operational needs, and legal obligations where applicable.

Once you cancel the subscription, we will usually maintain the data for 3 months. If you wanted to remove the data before that contact support@qatouch.com. For additional information about your data removal, you may mail to privacy@qatouch.com. Once personal data is no longer necessary, we delete it or anonymize it as soon as possible

How Do We Maintain The Confidentiality Of Your Records?

We are committed to protecting your privacy and will only use information collected lawfully in accordance with the GDPR. All of our staff, contractors, and board members receive appropriate and on-going training to ensure they are aware of their personal responsibilities and have contractual obligations to uphold confidentiality, enforceable through disciplinary procedures. Only a limited number of authorized staff have access to personal information both electronic as well as physical where it is appropriate to their role and is strictly on a need-to-know basis. QA Touch has also implemented a range of internal controls that provide structure to how data is stored, managed, transmitted, and ultimately destroyed.

Who Are Our Partners?

We may share your information with selected third parties who support us with the marketing process, subject to strict agreements on how it will be used. The following are examples of the types of organizations that we are likely to share information with as part of the marketing process: vendors who support DB Procurement, Validation & Cleansing, and Marketing Platform providers where Campaigns are promoted.

Data Subject Rights

You may exercise the following rights in relation to your candidate data:

• The right to be informed: This privacy notice gives you transparency on how QA Touch processes and handles your personal data. If you have any questions, please do not hesitate to contact us at privacy@qatouch.com.
• The right of access: You are allowed anytime and free of charge to access your personal data so that you are aware of and can verify the lawfulness of the processing. Information will be provided without delay and at the latest within one month of receipt.
• The right to rectification: You are entitled to have personal data rectified if it is inaccurate or incomplete.
• The right to erasure: You can request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
• The right to restrict processing: You have the right to suppress the processing of personal data.
• The right to data portability: This allows you to obtain and reuse your personal data for your own purposes across different services. Rights in relation to automated decision making and profiling.
• The right to objection: You have the right to object to
  • Processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority,
  • Direct marketing and,
  • Processing for purposes of scientific/historical research and statistics.

You can exercise those rights at any time and get further information regarding the processing of your application data and QA Touch’s general privacy policy by sending an email to privacy@qatouch.com. There may be a charge for this service. Any changes to this notice will be published on our website. We will do our best to resolve any issue you might have related to our processing of your data. However, if you are not satisfied with our answers or actions, you may always turn to your national data protection authority.

Updating or Deleting Your information

You may update your information directly or email us any time to support@qatouch.com. We may contain an archived copy of the information to enforce our business agreements or for other business purposes.

Security

We are very keen on the security and data privacy of our customers. We follow standard security measures which include technical and organizational security controls to avoid data loss, information leaks, or unauthorized data processing activities. Our security statement can be reviewed below. QA Touch is hosted on AWS. With AWS as our hosting provider, data security and 99.9% uptime are guaranteed, giving you peace of mind knowing your data is safe and your QA processes are always available. Entry to the development center is strictly authorized by access control systems. Apart from this, the network is protected by firewalls. The campus is monitored by surveillance cameras 24×7. Our servers are hosted in reputed hosting and maintained by leading data centers. We monitor the application by a 24×7 monitoring system. Our staff are trained in security measures and strictly adhere to security policies.

Access Control

Access to data is strictly authorized by access control systems. The network is protected by firewalls. The campus is monitored by surveillance cameras 24×7. Apart from this, QA touch customers can restrict access permissions, roles to the users.

Development Practices

We follow the industry-standard best practices in writing the code and peer code reviews to deliver the quality product. Our product uses standard SSL and follows the HTTPS protocol. QA Touch has also taken preventive measures to handle the Xss site scripting and the SQL injection.

Application Security

Our application supports encrypted storage of select data as well as backups and hashed passwords with a firewall.

Changes to this policy

We update this policy from time to time as our practices, products, or the law changes. When we do, we’ll post the revised version here with an updated “Last Updated” date, and for material changes, we’ll do our best to notify you directly. We’d encourage you to check back periodically.

Questions or concerns

If anything in this policy doesn’t make sense, or you want to exercise any of the rights above, reach out: Email: privacy@dckap.com, General inquiries: info@qatouch.com, Support: support@qatouch.com We’ll do our best to sort out any concern you raise.

---

Last Updated: August 10, 2026