Legal basis for processing

We process personal data in accordance with the EU General Data Protection Regulation (GDPR). Most processing is necessary to provide and operate the service you signed up for — running tests, storing results, keeping you logged in, billing your organization.

Some processing relies on our legitimate interests — improving product performance, preventing abuse and securing our infrastructure. We only rely on this basis where it does not override your rights and expectations.

Your rights as a data subject

• Request access to the personal data we hold about you.
• Request correction of anything that is inaccurate or incomplete.
• Request deletion of data we no longer have a legal reason to keep.
• Request restriction of processing, or object to specific processing.
• Request portability — a machine-readable export of your account data.
• Lodge a complaint with your local data protection authority at any time.

How to submit a request

Send an email to support@testingforge.io from the address on your TestingForge account, describing which right you want to exercise. If you are acting on behalf of another person, tell us how you are authorised.

We may need additional information to verify your identity before we process requests that affect account access or stored data — this is to protect you, not to slow you down.

Response times & verification

We respond within 30 calendar days of verifying your identity. For complex requests the GDPR allows an extension of up to two additional months — if that applies, we will tell you why and by when.

If we cannot act on a request (for example, because the data was already deleted or does not exist), we will explain that clearly in writing and, where relevant, point you to the supervisory authority you can contact.