Terms of Service

QAtesting is a product of Freeflow, based in California, USA. These terms are the agreement between you and Freeflow for using qatesting.ai and the QAtesting service. By creating an account or running a scan you agree to them. Questions: support@qatesting.ai — a person reads it.

QAtesting signs into a website you own, with a login you provide, works through the pages a user can reach, and gives you a report of what it found. A scan is read-only by default: it clicks, reads and checks pages, and it stays on your domain. What it collects and how long it is kept is described in the privacy policy; scan results are deleted 30 days after the scan runs.

You may scan only a domain you have proved you control — by the meta tag or DNS record the service asks for. By adding a domain you confirm you are authorized to test it. The login you give us must be one you are entitled to use, and entitled to let an automated tester use. You are responsible for the account it signs into.

Keep your password to yourself; you are responsible for what is done with your account. One account is for one person or organization.

There is no free tier. A scan costs one credit, bought in packs, or is covered by a domain’s monthly subscription, which is used before credits; prices are on the FAQ. Payments are processed by Stripe. Credits don’t expire; a subscription’s unused monthly scans don’t roll over. A scan that fails is refunded automatically. Unused credits are not refundable except where the law requires it. You can cancel a subscription at any time; it stops at the end of the month you’ve paid for, with no partial refund.

Where it is available to your account, write mode lets a scan check that your forms really save what a user enters. It is off unless you turn it on for a scan, and weekly re-scans never use it. When it is on:

• A scan first runs as a dry run: it fills in forms with test data and submits nothing.
• It submits a form only after you promote that specific form, and only when the scan signs in with the same login you promoted it under.
• Everything it types is obviously fake test data carrying the marker QATEST, so you can find it.
• For each record a promoted form creates, it edits that same record once, to check that saving an edit works.
• It refuses any form whose button — by any of its names — reads as deleting, paying, sending, inviting, emailing or publishing. That check works on the button’s name; it cannot know what a harmlessly named button really does.
• It keeps a record of every form you promote or revoke, every scan’s consent and every form it submits, until you close your account. The report and the scan emails say what it submitted.

Write mode creates real records in the app you point it at. Promote only forms whose submission is safe — ones that don’t charge money, contact other people or change anything that matters to you when fed test data. We strongly recommend a dedicated test account. You are responsible for the records it creates, and for removing them — search your app for QATEST to find them. A write-mode scan costs one credit, like any scan.

Don’t use the service to test a site or an account you aren’t authorized to test; don’t try to get around the ownership check, the domain lock or the write-mode safeguards; don’t resell scans of sites that aren’t yours; and don’t use it for load or stress testing.

We may suspend or close an account that breaks these terms, and we’ll tell you why by email. You can close your account at any time by emailing support; what is deleted, and when, is in the privacy policy.

The service is provided “as is”. A scan reports what it found on the pages it reached; it is not a promise that your site has no other defects or security problems.

To the extent the law allows, Freeflow is not liable for indirect or consequential losses — including lost data, lost profits or records created in your app by write mode — and our total liability for any claim is limited to the amount you paid us in the 12 months before it arose, or US$100 if that is more.

These terms are governed by the laws of California, USA. Disputes are heard in the state or federal courts in Orange County, California.

We’ll email the address on your account at least 14 days before a material change takes effect. Using the service after that means you accept the new terms.