Privacy Policy

1. Introduction

Argus Technologies ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Argus platform ("Service") at heyargus.ai.

This policy applies to information collected through our website, API, and related services. Please read this policy carefully. By using our Service, you consent to the practices described herein.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, and password when you register
• Billing Information: Payment card details (processed by our payment provider), billing address
• Test Configuration: URLs, test scripts, and configurations you create
• Support Communications: Information you provide when contacting support

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, test execution metrics
• Device Information: Browser type, operating system, IP address
• Log Data: Access times, pages viewed, referring URLs
• Cookies: Session identifiers, preferences, authentication tokens

2.3 Test Execution Data

When you run tests through Argus, we may temporarily process:

• Screenshots and recordings of test executions
• Page content and DOM structure of tested pages
• Network requests made during testing
• Test results and error logs

This data is processed ephemerally and retained according to your plan settings (default: 30 days).

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, operate, and maintain the Argus platform
• Account Management: To create and manage your user account
• Communication: To send service updates, security alerts, and support messages
• Improvement: To analyze usage patterns and improve our Service
• Security: To detect, prevent, and address technical issues and security threats
• Compliance: To comply with legal obligations
• AI Training: Aggregated, anonymized data may be used to improve our AI models (opt-out available)

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contract Performance: Processing necessary to provide our Service to you
• Legitimate Interests: Improving our services, security, and fraud prevention
• Consent: For marketing communications and optional data processing
• Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• Cloud Infrastructure: Cloudflare, AWS (hosting and CDN)
• Authentication: Clerk (user authentication)
• Database: Supabase (data storage)
• AI Providers: Anthropic, OpenAI (test automation)
• Browser Testing: TestingBot (cross-browser testing)
• Payment Processing: Stripe (payment handling)
• Analytics: Privacy-focused analytics tools

5.2 Legal Requirements

We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change in ownership.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all service providers
• Adequacy decisions where applicable

7. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Until account deletion plus 30 days
• Test Results: According to your plan settings (7-90 days)
• Screenshots: According to your plan settings (7-30 days)
• Logs: Up to 90 days for operational purposes
• Billing Records: 7 years for tax and legal compliance

8. Your Rights

8.1 GDPR Rights (EEA Residents)

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

8.2 CCPA Rights (California Residents)

• Know: Right to know what personal information is collected
• Delete: Right to request deletion of personal information
• Opt-Out: Right to opt-out of sale of personal information (we do not sell data)
• Non-Discrimination: Right to not be discriminated against for exercising rights

To exercise your rights, contact us at privacy@heyargus.ai or use the settings in your account dashboard.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use our Service (anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

10. Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and penetration testing
• Access controls and audit logging
• Employee security training
• Incident response procedures

See our Security page for more details.

11. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (e.g., email notification).

13. Contact Us

For questions, concerns, or to exercise your rights, contact our Data Protection team:

EEA residents may also contact their local data protection authority.