Privacy Policy

The information we collect depends on how you interact with ArbiterQA and which Services you use.

Account and Contact Information

When you create an account, purchase Services, contact us, or otherwise interact with ArbiterQA, we may collect information such as:

• name;
• email address;
• company name;
• job title;
• billing information;
• account identifiers;
• authentication information;
• communications with us; and
• other information you choose to provide.

Usage and Technical Information

When you use the Services, we may automatically collect information about your interaction with ArbiterQA, including:

• IP address;
• browser type;
• device type;
• operating system;
• referring URLs;
• pages or features accessed;
• dates and times of access;
• API requests;
• account activity;
• log information;
• error and diagnostic information;
• usage volume;
• performance information; and
• other technical information associated with your use of the Services.

We use this information to operate, secure, troubleshoot, analyze, and improve ArbiterQA.

Customer Content

ArbiterQA is designed to analyze websites, emails, digital experiences, and related materials.

Depending on how you use the Services, ArbiterQA may receive, generate, capture, store, or process information including:

• website URLs;
• website screenshots;
• rendered webpages;
• email messages;
• email source content;
• rendered email images;
• screenshots of emails;
• images and visual assets;
• HTML or other source content;
• test instructions;
• prompts;
• validation criteria;
• test configurations;
• testing metadata;
• results;
• findings;
• classifications;
• supporting evidence; and
• other information submitted to or generated through the Services.

We refer to this information collectively as “Customer Content.”

Customer Content may contain personal information, confidential information, or other information relating to identifiable individuals, depending on the content of the website, email, image, or other material submitted for testing.

You are responsible for determining what Customer Content you submit to ArbiterQA and for ensuring that you have the rights, permissions, notices, and consents necessary for us to process that information as described in this Privacy Policy.

We may use information collected through ArbiterQA to:

• create and manage accounts;
• authenticate users;
• provide the Services;
• receive and process API requests;
• render webpages and emails;
• capture screenshots and other images;
• analyze submitted or captured content;
• apply tests and validation criteria;
• generate findings and results;
• provide supporting evidence;
• deliver requested results to users or connected systems;
• process payments;
• provide customer support;
• communicate about the Services;
• maintain and improve reliability;
• troubleshoot errors;
• investigate incidents;
• monitor usage;
• prevent fraud, misuse, and abuse;
• maintain security;
• develop new features;
• improve the Services;
• evaluate the performance of our systems;
• understand how ArbiterQA is used;
• comply with legal obligations;
• enforce our agreements; and
• protect the rights, safety, and property of ArbiterQA, our users, and others.

Artificial intelligence and machine-learning technologies are used to provide portions of the ArbiterQA Services.

When you use features that rely on artificial intelligence, ArbiterQA may submit Customer Content to artificial-intelligence or machine-learning systems operated by ArbiterQA or by third-party providers.

Information submitted for AI processing may include:

• website screenshots;
• rendered website images;
• webpage content;
• rendered email images;
• email content;
• screenshots;
• visual assets;
• text visible within submitted images;
• prompts;
• testing instructions;
• validation requirements;
• contextual information;
• metadata; and
• other information reasonably necessary to perform the requested analysis.

These systems may analyze Customer Content to generate:

• findings;
• descriptions;
• classifications;
• evaluations;
• comparisons;
• validation results;
• pass/fail results;
• structured responses;
• recommendations;
• supporting evidence; and
• other outputs requested through the Services.

ArbiterQA may use third-party artificial-intelligence providers to perform certain analyses.

When necessary to provide the Services, Customer Content may therefore be transmitted to and processed by those providers.

Third-party AI providers process information subject to their applicable agreements, service terms, data-use policies, privacy policies, security practices, and the configurations under which ArbiterQA uses their services.

Depending on the provider, service, and applicable terms, a third-party AI provider may retain or use submitted information and resulting interactions for purposes such as:

• providing the requested AI service;
• operating its systems;
• maintaining security;
• preventing fraud or abuse;
• monitoring service performance;
• evaluating its systems;
• improving its products or services; or
• improving or training artificial-intelligence systems.

By using ArbiterQA features that involve artificial intelligence, you authorize the processing of applicable Customer Content through the AI systems necessary to provide those features.

Where ArbiterQA has entered into contractual terms with an AI provider that restrict the retention or use of Customer Content, those restrictions will apply.

Where Customer Content is subject to an applicable Data Processing Addendum, use of third-party AI providers will be governed by that agreement and applicable subprocessor requirements.

We may use information generated through the operation of the Services to develop, test, maintain, evaluate, and improve ArbiterQA.

This may include information such as:

• test results;
• AI-generated findings;
• classifications;
• validation outcomes;
• correction information;
• feedback;
• error patterns;
• system performance data;
• testing characteristics;
• generalized observations;
• metadata; and
• other information generated through use of the Services.

This information may be used to:

• improve the accuracy of ArbiterQA;
• improve AI-assisted analysis;
• improve testing and validation methods;
• develop new tests and features;
• evaluate the performance of existing functionality;
• identify recurring errors or patterns;
• improve automated classifications;
• improve system reliability; and
• develop related technology.

Where reasonably practicable, information used for generalized product improvement will be aggregated, anonymized, de-identified, or otherwise processed to reduce its association with a particular individual or customer.

We may retain and use aggregated or de-identified information for analytics, research, benchmarking, service development, and other business purposes.

Our websites may use cookies and similar technologies.

These technologies may be used to:

• maintain user sessions;
• authenticate users;
• remember preferences;
• understand website usage;
• measure performance;
• improve website functionality; and
• protect the security of our Services.

You may be able to control cookies through your browser settings.

Disabling certain cookies may affect the functionality of some portions of the Services.

We may use analytics, monitoring, and logging systems to understand how the Services are used and to maintain the performance, reliability, and security of ArbiterQA.

These systems may process information such as:

• IP addresses;
• device information;
• browser information;
• API usage;
• timestamps;
• feature usage;
• error messages;
• system performance;
• request metadata; and
• other operational information.

We use this information for purposes including troubleshooting, security, capacity planning, product improvement, and understanding usage patterns.

We may share information with third parties when reasonably necessary to provide, maintain, secure, support, or improve the Services.

These service providers may include:

• cloud infrastructure providers;
• hosting providers;
• storage providers;
• artificial-intelligence providers;
• email-rendering providers;
• browser or website-rendering providers;
• communications providers;
• authentication providers;
• payment processors;
• analytics providers;
• monitoring providers;
• security providers;
• customer-support providers; and
• other technology providers that support ArbiterQA.

These providers may process information on our behalf or, depending on the nature of the service, pursuant to their own applicable terms and data-processing practices.

We may also disclose information:

• when required by applicable law;
• in response to a valid subpoena, court order, warrant, or other legal process;
• when we believe disclosure is reasonably necessary to protect our rights;
• to investigate fraud, abuse, or security incidents;
• to protect the safety of users or others;
• in connection with the enforcement of our agreements;
• with your authorization; or
• in connection with a merger, acquisition, financing, sale of assets, restructuring, or similar corporate transaction.

We do not sell personal information.

ArbiterQA may engage third-party providers to process information in connection with the Services.

Where required by contract or applicable law, we will maintain information regarding subprocessors that process personal data on our behalf.

Customers subject to a Data Processing Addendum may have additional rights relating to subprocessors as described in that agreement.

We may aggregate or de-identify information collected or generated through the Services.

We may use aggregated or de-identified information for purposes including:

• product development;
• analytics;
• benchmarking;
• research;
• system optimization;
• service improvement;
• capacity planning;
• developing testing methodologies;
• developing validation criteria;
• understanding usage trends; and
• commercial analysis.

We may retain and use aggregated or de-identified information where it does not reasonably identify an individual.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may vary depending on the type of information and the context in which it is processed.

We may retain information as necessary to:

• provide the Services;
• maintain customer accounts;
• satisfy contractual obligations;
• maintain logs and security records;
• investigate incidents;
• prevent fraud and abuse;
• comply with legal obligations;
• resolve disputes;
• enforce agreements; and
• support legitimate business operations.

Customer Content, test results, images, and other testing artifacts may be retained for periods necessary to provide the applicable Service, maintain customer history, troubleshoot issues, or satisfy contractual requirements.

Aggregated or de-identified information may be retained for longer periods because it is no longer reasonably associated with an identifiable individual.

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

Our security measures may include access controls, authentication mechanisms, encryption, logging, monitoring, secure development practices, and other safeguards appropriate to the nature of the Services.

No system, network, method of transmission, or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the security of your ArbiterQA account, API keys, authentication credentials, and systems used to access the Services.

If you believe your account or credentials have been compromised, contact us promptly.

ArbiterQA is not intended to serve as a repository for highly sensitive personal information unless specifically agreed to in writing.

You should not intentionally submit sensitive information that is unnecessary for the requested testing or analysis.

Examples may include:

• Social Security numbers or equivalent government identifiers;
• financial account credentials;
• payment card authentication information;
• passwords;
• authentication secrets;
• medical records;
• biometric information;
• highly sensitive personal communications; or
• other regulated information that is unnecessary for the Services.

Because ArbiterQA analyzes websites, emails, screenshots, and other digital materials, sensitive information may nevertheless appear incidentally within Customer Content.

You are responsible for determining whether the Services are appropriate for the information you submit.

You control the Customer Content submitted to ArbiterQA.

You are responsible for:

• determining what information is submitted;
• determining whether personal information is included;
• determining whether sensitive information is included;
• ensuring that you have appropriate rights to the submitted content;
• providing notices to individuals where required;
• obtaining consent where required; and
• ensuring that your use of ArbiterQA complies with applicable law.

ArbiterQA processes Customer Content according to your use of the Services and the instructions associated with the applicable request.

Where ArbiterQA processes personal data on behalf of a customer and the parties have entered into a Data Processing Addendum, the processing of covered personal data will also be governed by that agreement.

The Data Processing Addendum may address matters including:

• roles of the parties;
• permitted processing;
• confidentiality;
• security;
• subprocessors;
• data-subject requests;
• international transfers;
• data deletion;
• breach notification; and
• other data-protection obligations.

If a Data Processing Addendum conflicts with this Privacy Policy regarding covered personal data, the Data Processing Addendum will control.

ArbiterQA and its service providers may process information in the United States and other countries.

As a result, information may be transferred to and processed in jurisdictions that have different data-protection laws from the jurisdiction where you reside.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal data.

Such safeguards may be addressed through contractual terms, a Data Processing Addendum, standard contractual clauses, or other legally recognized transfer mechanisms.

Depending on where you live and the laws that apply, you may have certain rights regarding your personal information.

These rights may include the right to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion;
• request information regarding how information is processed;
• request portability;
• object to certain processing;
• restrict certain processing; or
• withdraw consent where processing is based on consent.

To submit a privacy request, contact us at:

We may need to verify your identity before fulfilling a request.

Certain requests may be limited by applicable law, contractual requirements, security requirements, or legitimate retention obligations.

If we process personal data solely on behalf of one of our customers, we may refer your request to that customer because the customer determines how and why the applicable information is processed.

Residents of certain U.S. states may have additional rights under state privacy laws.

Depending on applicable law, these rights may include:

• the right to know what personal information is collected;
• the right to access personal information;
• the right to correct information;
• the right to delete information;
• the right to obtain a portable copy of information;
• the right to opt out of certain sales or sharing of information;
• the right to limit certain uses of sensitive personal information; and
• the right not to receive discriminatory treatment for exercising privacy rights.

ArbiterQA does not sell personal information.

Where applicable law defines certain disclosures as “sharing” or targeted advertising, we will provide any rights required under that law.

Requests may be submitted to:

Where applicable data-protection law requires a lawful basis for processing personal data, we may process personal data based on:

• performance of a contract;
• our legitimate interests;
• compliance with legal obligations;
• consent; or
• another lawful basis permitted by applicable law.

Our legitimate interests may include:

• providing and improving the Services;
• maintaining system security;
• preventing fraud and abuse;
• providing customer support;
• developing our products;
• understanding product usage; and
• operating our business.

Where required, individuals may have the right to lodge a complaint with an applicable data-protection authority.

ArbiterQA is intended for business and professional use and is not directed to children.

Individuals under the age of 18 should not create ArbiterQA accounts.

We do not knowingly solicit personal information directly from children for account creation.

Because customers determine the content submitted to ArbiterQA, Customer Content may incidentally contain information relating to minors.

Customers are responsible for ensuring that they have appropriate authority to process such information through the Services.

We may send communications relating to:

• your account;
• service changes;
• product updates;
• security notices;
• billing;
• technical information;
• support; and
• other operational matters.

We may also send marketing or promotional communications where permitted by law.

You may unsubscribe from promotional communications through the unsubscribe mechanism included in those communications.

You cannot opt out of communications that are necessary to administer your account, provide the Services, maintain security, or satisfy legal obligations.

ArbiterQA may contain links to or integrations with third-party websites, software, or services.

This Privacy Policy does not govern the independent privacy practices of those third parties.

We encourage you to review the privacy terms applicable to third-party services before providing information to them.

If ArbiterQA is involved in a merger, acquisition, restructuring, financing, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction.

Any successor or acquiring entity may continue to process information subject to applicable law and contractual obligations.

We may update this Privacy Policy from time to time as ArbiterQA, our technology, our service providers, and applicable laws evolve.

Changes may reflect:

• new features;
• new uses of information;
• changes to AI processing;
• changes to subprocessors;
• changes to service providers;
• changes to security practices;
• regulatory requirements; or
• other changes to our operations.

When we make material changes to this Privacy Policy, we may provide notice through:

• the ArbiterQA website;
• the ArbiterQA application;
• the email address associated with your account;
• an account notification; or
• another reasonable method.

The date at the top of this Privacy Policy indicates when it was most recently updated.

Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised Privacy Policy to the extent permitted by applicable law.

Questions, privacy requests, or concerns regarding this Privacy Policy may be submitted to: