Smoketest
Log inBook a call
Security

Who sees your data and how long we keep it.

Smoketest is an AI QA teammate. It works from your tickets and tests your staging site, so it handles your data. This page names the main vendors we use, how long we keep your data, and how to have it deleted.

Book a callBring your review questions to our founder.
Germany
Where the app and data are hosted
30 days
Then recordings are deleted
Encrypted
Test passwords and connections
14 vendors
The main ones, named below

These are the main vendors we use.

Our app and your data are hosted in Germany. Some of the vendors below process data outside the EU.

Runs your tests

These handle ticket and test content.

  • CloudflareFile storage, email, and DNS
  • Browser UseCloud browsers
  • VercelCloud infrastructure
  • OpenAIAI models
  • AnthropicAI models

Only if you connect them

You choose these, under your own terms.

  • AtlassianJira tickets
  • LinearLinear issues
  • GitHubSign-in and pull requests
  • SlackNotifications
  • DiscordNotifications

Runs the business

These see account, billing, and usage data.

  • PolarCheckout and billing
  • PlunkEmail
  • GoogleSign-in
  • PostHogProduct analytics
Last updated November 1, 2026.Processing terms are in our Data Processing Addendum.

Recordings expire after 30 days.

What a test produces is deleted on a schedule. Your history stays so old results keep their meaning, and secrets stay encrypted until you remove them.

30 daysThen deleted from storage
  • Recordings and screenshots
  • Test logs
  • Ticket files
Until you askKept so your history still works
  • Results and test history
  • Copies of the tickets we tested
  • Audit history
Until you remove itEncrypted
  • Test passwords and variables
  • Saved sign-ins
  • Jira and Linear connections

Want something gone sooner? Email privacy@smoketest.sh and we will delete it. Backups and vendors' own copies can take longer to clear.

Questions from security reviews

Found a vulnerability? Email security@smoketest.sh

No. We hold no security certificates and none are planned. This page and our Data Processing Addendum are what we give reviewers.

It can. Our app and your data are hosted in Germany, but some vendors on this page process data outside the EU. The Data Processing Addendum covers the safeguards for those transfers.

Our team can, when they need to support you or look into a failed test. Support sessions in your workspace are logged.

New tickets stop and the stored access is deleted. Results and history stay in your workspace until you ask us to delete them.

Use dedicated test accounts and test data. Keep real passwords, payment card data, health data, and government IDs out of tests, tickets, and attachments.

Yes. The public version covers standard use. Email privacy@smoketest.sh if you need a signed copy.

Bring your security questions to the call.

Tell us what your review needs and we will go through it with you.

Book a call
Report a vulnerabilitysecurity@smoketest.sh
Data and deletion requestsprivacy@smoketest.sh
Operated bySayfun Studio, the Netherlands