Privacy Policy
SwitchProof is built so that your test data stays inside your network. This page explains the small amount of personal data we do hold, why, and what you can ask us to do with it.
Who is responsible
TrustRoute Technologies, 21st Avenue, Burnaby, British Columbia, Canada, is the data controller for SwitchProof. Contact: privacy@switchproof.online.
What stays on your PC
SwitchProof for Windows (the agent) keeps everything it works with on the PC where it runs: switch addresses, ISO 8583 messages, card and account numbers, test cases, results, reports, bank database settings and passwords, and what it reads from the bank database. The console in your browser talks to the agent directly on your PC. None of this passes through our servers, and we cannot see it.
What we hold
Your account
- Your email address, and when you signed up and last signed in.
- Whether you have turned off our update emails.
- Your password is held by our sign-in provider only as a secure hash. We never see it.
Your plan
- Your plan and when it ends, any grant or invite code that gave it to you, and the licences issued to your agent (these contain your email address and plan).
Payments
- Payments are handled by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment and billing details under its own privacy notice.
- Paddle tells us your email address, the plan, the amount and currency, the period paid for, and its order and subscription numbers. We never receive your card details.
Referrals
- If you sign up from someone's referral link, we record who referred you and whether your account went on to buy a plan. The person who referred you sees only counts, never your email address.
- For your own link: its code, who signed up from it, and the free months it earned you.
What you send us
- Feedback: the requests and ideas you post and your votes. Other users can read a request, but only we can see who sent it.
- "Talk to us" requests: your company or bank, the plan you're interested in, the number of testers and your message.
- Emails you send us.
Technical data
When your browser loads the website, the services that deliver it receive your IP address and browser details, as any website does, and may keep them in their logs. We don't use analytics or tracking tools.
Why we use it
- To run your account and sign you in, and to issue the licence for your plan (to provide the service you asked for).
- To process purchases, renewals and refunds with Paddle, and to keep the records that tax and accounting law require.
- To answer your requests and questions, and to email you about your account, for example to confirm your email, reset your password, or remind you that a plan is ending.
- To email you about new SwitchProof releases and learning videos (our legitimate interest in keeping customers informed about the service). Every such email has an unsubscribe link, and you can turn them off at any time under Update emails in the account menu.
- To run the referral programme: to credit the person who referred you, and to give you the free months your own link earns and email you when one starts.
- To improve SwitchProof based on feedback (our legitimate interest in improving the product).
We don't sell your data, and we don't use it for advertising.
Who processes it for us
- Supabase: sign-in, our database, the SwitchProof for Windows download and the learning videos.
- Resend: sends our update and referral emails.
- GitHub Pages: hosts the website.
- Paddle: checkout, payments, invoices and refunds.
- Google Fonts and jsDelivr: deliver the website's fonts and a code library to your browser.
These providers may process data outside your country, including in the European Union and the United States. We only transfer data as the data protection law that applies allows.
Browser storage
The website uses your browser's local storage to keep you signed in, to remember which agent it is connected to, to remember preferences such as light or dark mode, and to keep the code of a referral link you opened for 30 days. It sets no advertising or analytics cookies. Paddle's checkout may set its own cookies when you open it.
How long we keep it
- Account and plan data: while your account exists. When you ask us to delete your account, we delete it within 30 days.
- Payment records: as long as tax and accounting law requires.
- "Talk to us" requests: up to 3 years after our last contact.
- Feedback: until you or we delete it. If your account is deleted, your posts stay but are no longer linked to you.
Your rights
Depending on where you live (for example under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), or the EU and UK GDPR), you can ask us:
- whether we hold data about you, and for a copy of it;
- to correct it, or to delete it;
- to restrict or stop using it, and to receive it in a portable format;
- to withdraw any consent you gave.
Email privacy@switchproof.online. We reply within 30 days. You can also complain to your data protection authority; in Canada that is the Office of the Privacy Commissioner of Canada, and in British Columbia the Office of the Information and Privacy Commissioner for British Columbia.
Security
Access to account data is restricted by database rules, so each user can only see their own records. Licences are signed so they cannot be altered. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
Children
SwitchProof is a professional tool and is not intended for anyone under 18.
Changes
If we change this policy, we will post the new version here with a new date, and email you about significant changes.