Privacy Policy

1. Overview

Testream provides a SaaS dashboard and integrations (including an Atlassian Forge app) to ingest, store, and display software test results.

If you have questions or requests about this Privacy Policy, contact us at contact@testream.app.

2. Information we collect

Depending on how you use Testream, we may collect:

• Account information: email address, password (hashed), and optional name.
• Billing and subscription information: plan tier, subscription status, and billing history. Payment details are processed by Stripe.
• Test data you upload: CTRF reports, test names, statuses, durations, error messages/stack traces, file paths/line numbers, build and CI metadata (e.g., branch, commit SHA, build URL), and artifacts you upload (e.g., screenshots).
• Jira/Atlassian data (Forge app): Jira project identifiers (e.g., project key), versions/releases, and issue-related data involved in creating or linking issues.
• Operational and security data: logs and metadata needed to run, secure, debug, and prevent abuse of the service.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain Testream.
• Authenticate users and manage sessions.
• Enforce plan limits and manage subscriptions.
• Provide customer support and respond to requests.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Improve reliability, performance, and user experience.

4. Jira / Forge-specific processing

If you use the Testream Atlassian Forge app in Jira Cloud, the app may read Jira context (such as the current project) and may create issues on your behalf when you use features like “Create bug”.

For the Forge app, the following data may be stored in Atlassian systems:

• Atlassian Forge Storage: API keys and selections for a Jira project (for example, under keys like api-keys:<projectKey> and selected-project:<projectKey>).
• Jira project properties: a release linkage index under key jira-test-manager.linked-test-runs that maps Jira version IDs to Testream run IDs.

Testream does not store Jira user profile details in Jira entity properties. Jira may still record normal activity (e.g., issue creation) as part of Jira’s standard operation when actions are performed in your Jira site.

5. Sharing and subprocessors

We share information with third parties only as needed to provide and operate Testream, including:

• Atlassian: for Jira Cloud and the Forge runtime, including storage used by the Forge app.
• Stripe: for payments and subscription management.
• Infrastructure providers: hosting and operational tooling used to run Testream services (for example, Fly.io).
• Artifact storage: uploaded artifacts may be stored in cloud object storage and referenced via secure URLs.

6. Tracking technologies

We do not use advertising trackers or product analytics tracking on the Testream web app at this time.

Testream uses essential browser storage (such as localStorage) to store login tokens required to keep you signed in.

7. Data retention

We retain account information and test data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

To request deletion of your account or data, email contact@testream.app.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No security system is 100% secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date above.