Privacy Policy
SwitchProof is built so that your test data stays inside your network. This page explains the small amount of personal data we do hold, why, and what you can ask us to do with it.
Who is responsible
Najeebullah Usmani is the data controller for SwitchProof. Contact: najusmani@gmail.com.
What stays on your PC
SwitchProof for Windows (the agent) keeps everything it works with on the PC where it runs: switch addresses, ISO 8583 messages, card and account numbers, test cases, results, reports, bank database settings and passwords, and what it reads from the bank database. The console in your browser talks to the agent directly on your PC. None of this passes through our servers, and we cannot see it.
What we hold
Your account
- Your email address, and when you signed up and last signed in.
- Your password is held by our sign-in provider only as a secure hash. We never see it.
Your plan
- Your plan and when it ends, any grant or invite code that gave it to you, and the licences issued to your agent (these contain your email address and plan).
Payments
- Payments are handled by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment and billing details under its own privacy notice.
- Paddle tells us your email address, the plan, the amount and currency, the period paid for, and its order and subscription numbers. We never receive your card details.
What you send us
- Feedback: the requests and ideas you post and your votes. Other users can read a request, but only we can see who sent it.
- "Talk to us" requests: your company or bank, the plan you're interested in, the number of testers and your message.
- Emails you send us.
Technical data
When your browser loads the website, the services that deliver it receive your IP address and browser details, as any website does, and may keep them in their logs. We don't use analytics or tracking tools.
Why we use it
- To run your account and sign you in, and to issue the licence for your plan (to provide the service you asked for).
- To process purchases, renewals and refunds with Paddle, and to keep the records that tax and accounting law require.
- To answer your requests and questions, and to email you about your account, for example to confirm your email, reset your password, or remind you that a plan is ending.
- To improve SwitchProof based on feedback (our legitimate interest in improving the product).
We don't sell your data, and we don't use it for advertising.
Who processes it for us
- Supabase: sign-in, our database, and the SwitchProof for Windows download.
- GitHub Pages: hosts the website.
- Paddle: checkout, payments, invoices and refunds.
- Google Fonts and jsDelivr: deliver the website's fonts and a code library to your browser.
These providers may process data outside your country, including in the European Union and the United States. We only transfer data as the data protection law that applies allows.
Browser storage
The website uses your browser's local storage to keep you signed in, to remember which agent it is connected to, and to remember preferences such as light or dark mode. It sets no advertising or analytics cookies. Paddle's checkout may set its own cookies when you open it.
How long we keep it
- Account and plan data: while your account exists. When you ask us to delete your account, we delete it within 30 days.
- Payment records: as long as tax and accounting law requires.
- "Talk to us" requests: up to 3 years after our last contact.
- Feedback: until you or we delete it. If your account is deleted, your posts stay but are no longer linked to you.
Your rights
Depending on where you live (for example under Türkiye's Law No. 6698 on the Protection of Personal Data, or the EU and UK GDPR), you can ask us:
- whether we hold data about you, and for a copy of it;
- to correct it, or to delete it;
- to restrict or stop using it, and to receive it in a portable format;
- to withdraw any consent you gave.
Email najusmani@gmail.com. We reply within 30 days. You can also complain to your data protection authority; in Türkiye that is the Personal Data Protection Authority (KVKK).
Security
Access to account data is restricted by database rules, so each user can only see their own records. Licences are signed so they cannot be altered. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
Children
SwitchProof is a professional tool and is not intended for anyone under 18.
Changes
If we change this policy, we will post the new version here with a new date, and email you about significant changes.