Privacy Policy

1. Introduction

This Privacy Policy describes how Degu Labs, Inc. (“Degu Labs”, “we”, “our”, or “us”) collects, processes, stores, and protects information when you use the Flakiness.io platform (the “Service”).

This Policy applies to all users of the Service, including users of the Cloud Service and Self-Hosted Components.

Degu Labs, Inc. is located at:

440 N Barranca Ave, #4556
Covina, CA 91723

For privacy questions, you may contact us at:
privacy@degulabs.com

2. Information We Collect

2.1 Account Information

We may collect:

• Name

• Email address

• Organization/workspace details

• Authentication information

• Billing information (processed by Stripe; we do not store full card data)

2.2 Usage Information

We may collect log and usage data relating to:

• Product usage patterns

• Browser/device information

• IP address and region

• Performance data (examples: response times, error conditions)

• Analytics events for improving service quality

2.3 Test Artifacts

“Test Artifacts” include debugging and test-output data, such as:

• Screenshots

• Videos

• Console logs

• Network logs

• Playwright traces

• Any similar content uploaded or transmitted by Customer

Degu Labs does not curate, review, or moderate Test Artifacts before ingestion.

Because Test Artifacts may unintentionally contain sensitive or personal data, you are responsible for ensuring such data is minimized or removed.

3. Customer Responsibility for Sensitive and Prohibited Data

You must not upload or process any of the following through the Service:

1. HIPAA-regulated Protected Health Information (PHI)

2. PCI-DSS payment card data

3. Children’s data under the age of 13 (COPPA)

4. Classified or export-controlled government information

5. Any data you are not legally permitted to share

If such data is discovered, Degu Labs may delete it and may suspend accounts that repeatedly upload Prohibited Data.

4. How We Use Information

Degu Labs processes information for the following business purposes:

• Operating and maintaining the Cloud Service

• Processing Test Artifacts

• Debugging and improving platform performance

• Communicating with users

• Ensuring platform security and preventing misuse

• Analyzing usage patterns for reliability and feature development

We do not sell personal information.

5. Data Retention

5.1 Test Artifacts

Retention periods for Test Artifacts (videos, logs, traces, etc.) are determined by the Customer’s:

• Subscription Plan, or

• Order Form

5.2 Metadata & Aggregate Data

In accordance with the intake specification:

• Metadata and anonymized aggregate analytics may be retained indefinitely, unless prohibited by law or deletion is requested under applicable privacy regulations.

5.3 Account Data

Upon account closure, we delete or anonymize personal information within a reasonable period, except for:

• Information retained for legal compliance

• Security logs

• Aggregate analytics

6. Subprocessors

Degu Labs uses third-party service providers (“subprocessors”) to support the operation of the Service.

As of the Effective Date, subprocessors include:

There is no external URL listing subprocessors. Updates will be reflected directly in this Policy when made.

7. Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the U.S. or other jurisdictions.

We rely on:

• Standard Contractual Clauses

• UK Addendum

• Other approved mechanisms

for international transfers.

8. Rights Under GDPR / UK GDPR

If you are located in the EU or UK, you may request:

• Access to personal data

• Correction of inaccurate data

• Deletion (“right to be forgotten”)

• Data portability

• Restriction or objection to processing

Submit requests to:

privacy@degulabs.com

9. Rights Under the CCPA (California Users)

California residents may request:

• Access to personal information collected

• Deletion of personal information

• Correction of inaccuracies

Degu Labs does not sell personal information.

10. Security

We implement reasonable administrative, technical, and physical safeguards including:

• Encryption in transit

• Network protection through Cloudflare

• Access control and authentication restrictions

• Environment isolation

• Monitoring and runtime security controls

You are responsible for securing:

• Self-hosted deployments

• Endpoints producing Test Artifacts

• Credentials and access tokens

11. Children’s Privacy

The Service is not intended for children under 13.
You must not upload children’s personal data.

12. Changes to This Policy

We may modify this Privacy Policy from time to time.
When material changes occur, we will provide notice via email or dashboard notification.

13. Contact Information

For privacy-related inquiries:

Degu Labs, Inc.
440 N Barranca Ave, #4556
Covina, CA 91723
privacy@degulabs.com