Privacy Policy
Last updated: April 17, 2026
BetaWindow ("we," "us," or "our") operates the website at betawindow.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using BetaWindow, you agree to the practices described in this policy.
1. Information We Collect
Information you provide directly:
- Account information: Email address and password when you create an account.
- Payment information: Credit/debit card details are processed directly by Stripe, Inc. (our payment processor). We store only a Stripe customer ID and last-four digits; we do not store raw card numbers.
- Tester payout information: Bank account details for Stripe Payouts are collected and processed by Stripe; we do not store your banking credentials.
- Test job submissions: App URLs, test instructions, and any content you submit when creating a test job.
- Feedback and reports: Text, screenshots, and structured data submitted by testers.
Information collected automatically:
- Usage data: Pages visited, clicks, session duration, feature interactions, and events — collected via PostHog analytics (only with your consent).
- Device and connection data: IP address, browser type, operating system, and referring URL — collected via PostHog and Vercel infrastructure.
- Marketing attribution: UTM parameters and campaign source data when you arrive from an advertisement or link.
- Advertising conversion data: If you arrive from a Reddit advertisement and consent to analytics cookies, Reddit's conversion pixel may record your interaction. See Section 4 (Third-Party Services).
Test session data (unique to our platform):
When a tester runs a test on your submitted app URL, our platform automatically captures:
- A screen recording of the full tester session.
- All network requests made by the tested app (URL, HTTP method, status codes, response times).
- Browser console logs and JavaScript errors generated by the tested app.
This captured data may incidentally contain personal information belonging to users of the app being tested. By submitting an app URL for testing, you represent that you have the right to authorize such data capture and that you will use only non-production or anonymized test environments wherever possible.
2. How We Use Your Information
- To create and maintain your account.
- To process payments and tester payouts via Stripe.
- To match test jobs with available testers.
- To deliver test reports and session artifacts to requesters.
- To generate AI-powered summaries of test sessions (processed server-side).
- To improve our platform through analytics and usage data (PostHog, with consent).
- To send transactional emails (account confirmation, job status updates).
- To comply with legal obligations, including tax reporting (Form 1099-NEC/1099-K where applicable).
- To measure the effectiveness of our advertising campaigns (Reddit Pixel, with consent).
3. Data Retention
- Account data: Retained for the duration of your account and for 90 days after deletion request.
- Test session recordings and logs: Retained for 90 days from job completion, then automatically deleted.
- Payment records: Retained for 7 years as required by tax law.
- Analytics data: Retained per PostHog's default retention settings (typically 1 year).
4. Third-Party Services
We share data with the following third-party service providers:
- Stripe, Inc. — Payment processing and tester payouts. Stripe Privacy Policy
- Supabase, Inc. — Database, authentication, and email delivery. Supabase Privacy Policy
- PostHog, Inc. — Product analytics and session tracking (with your consent). PostHog may set cookies to identify your browser across sessions. PostHog Privacy Policy
- Reddit, Inc. — Advertising conversion tracking via Reddit Pixel (with your consent). Reddit may receive anonymized event data when you visit pages on our site. Reddit Privacy Policy
- Vercel, Inc. — Website hosting and infrastructure. Vercel Privacy Policy
5. Cookies and Tracking Technologies
We use the following types of cookies:
- Essential cookies: Required for authentication and core platform function (Supabase session cookies). These are always active.
- Analytics cookies: PostHog sets cookies to track usage and improve our product. These are only set after you provide consent via our cookie banner.
- Advertising cookies: Reddit Pixel may set cookies for ad conversion measurement. These are only set after you provide consent via our cookie banner. You can also opt out via Reddit's ad preferences.
A cookie consent banner is displayed on your first visit. You may update your preferences at any time via the "Cookie Settings" link in our footer.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Deletion: Request deletion of your account and associated personal data.
- Correction: Request correction of inaccurate data.
- Portability: Request your data in a machine-readable format.
- Opt-out of sale/sharing (CCPA): We do not sell your personal data. You may opt out of data sharing for advertising purposes via our cookie consent tool.
- Object to processing (GDPR): You may object to certain processing activities.
To exercise any of these rights, contact us at hello@betawindow.com. We will respond within 30 days.
7. Data Security
We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest via Supabase, and row-level security policies restricting data access by role. Passwords are hashed and never stored in plaintext. However, no system is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
BetaWindow is not directed at users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at hello@betawindow.com and we will delete the account promptly.
9. International Data Transfers
Our servers are hosted in the United States (Vercel/Supabase US regions). If you access our Service from outside the United States, your data may be transferred to and processed in the United States. For EU/UK users, such transfers occur under applicable data transfer mechanisms (Standard Contractual Clauses where applicable via our sub-processors).
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before the change takes effect. Your continued use of the Service after notice constitutes acceptance of the updated policy.
11. Contact
For privacy questions or to exercise your rights, contact us at:
BetaWindow
2298 Johanna Court, Pinole, CA 94564
Email: hello@betawindow.com