Privacy Policy
Last updated: May 22, 2025 · Effective immediately
🔒 Short version: We only collect data that's needed to run the service. We never sell your data. You can delete your account and all associated data at any time.
Overview
DeltaTest, Inc. ("DeltaTest", "we", "us", or "our") operates deltatest.dev and the Delta CLI tool. This Privacy Policy explains how we collect, use, and protect information when you use our services.
By using our service, you agree to the collection and use of information as described in this policy.
Data We Collect
Account Information
- Email address (used for authentication and service communication)
- Organization name
- Password (stored as a bcrypt hash — we never store plaintext passwords)
Coverage Mapping Data
- Source file paths and line number ranges you push via
delta push— never the actual source code itself - Test names and their associated coverage ranges
- Repository identifiers (slug names you choose)
🔒 Code Security: DeltaTest never collects, accesses, or stores your actual source code. The Delta CLI tool only extracts structural metadata (file paths and line numbers) required to map test coverage. Your code remains entirely local to your development environment and CI/CD pipelines.
Usage Data
- API query counts and timestamps (for billing and rate limiting)
- Push counts per billing period
- Server logs including IP addresses (retained for 30 days)
How We Use Your Data
- To provide and operate the delta run / push / query service
- To send transactional emails (verification codes, billing receipts)
- To enforce plan limits and prevent abuse
- To improve the service based on aggregate usage patterns
- To respond to support requests
We do not use your source code paths or test names for advertising, analytics products, or any purpose outside of delivering the service to you.
Data Sharing
We do not sell, trade, or rent your personal information. We may share data only with:
Stripe — Payment processing. Stripe handles all billing data under their own PCI-compliant infrastructure. We do not store full card numbers.
Infrastructure providers — Our servers run on cloud infrastructure (e.g. AWS, DigitalOcean, Hetzner). They process data in transit and at rest but cannot access your data for their own purposes.
Legal requirements — We may disclose information if required by law, subpoena, or court order.
Data Retention
- Account data is retained until you delete your account
- Coverage mapping data is retained until you delete the repository or your account
- Server access logs are purged after 30 days
- Billing records are retained for 7 years as required by financial regulations
Security
We implement appropriate technical and organizational measures to protect your data:
- All data in transit is encrypted using TLS 1.2+
- Passwords are hashed using bcrypt with a work factor ≥ 12
- API keys are hashed using SHA-256 before storage
- Database backups are encrypted at rest
No method of transmission over the internet is 100% secure. If you discover a security vulnerability, please report it to [email protected].
Your Rights
You have the right to:
- Access — Request a copy of the personal data we hold about you
- Correction — Request correction of inaccurate data
- Deletion — Delete your account and all associated data from your dashboard settings
- Portability — Export your coverage mapping data via the API
- Objection — Object to certain processing activities
To exercise any of these rights, contact us at [email protected].
Contact Us
For privacy-related inquiries, contact:
📧 [email protected]
DeltaTest Privacy Team
We aim to respond within 2 business days.
We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users.