Privacy Policy

This policy describes what Is It Ready (the “Service”), operated by PMCollab, Inc. (“PMCollab”, “we”, “us”), collects, how it is used, and the choices you have. The Service tests applications on your behalf, so much of the data it holds is data you point it at.

• Account data — name, email address, and authentication identifiers used to sign you in.
• Workspace configuration — registered applications and their URLs, credentials you supply for test targets, uploaded specs, missions, and organization settings.
• Test evidence— screenshots, network captures, console output, page snapshots, and agent traces recorded while testing your targets. Because these record your application as a real user would see it, they can include personal data belonging to your application’s users.
• Usage and billing data — runs, credit consumption, and subscription state.

We use this data to operate the Service: planning and executing tests, scoring results, generating reports, metering credits, billing, support, and keeping the Service secure. We do not sell your data.

Test planning and evaluation are performed by large language models. Content needed for a run — such as specs, page text, and screenshots — is sent to third-party AI model providers (for example, Anthropic) to generate plans, scores, and findings. Model providers process this data to provide the Service.

We rely on a small set of processors to run the Service: cloud hosting and storage, AI model providers as described above, and Paddle as merchant of record for payments (Paddle receives the billing details needed to process your purchase; we do not store full payment card numbers). If you connect an integration such as GitHub, data you choose to send (for example, filed findings) goes to that integration.

Test evidence is retained for a window controlled by your organization — 90 days by default, configurable from 7 days up to 10 years — after which it expires automatically. Account, workspace, and billing records are kept while your account is active and as required for legal and accounting purposes. Organization administrators can also request targeted erasure of evidence, which removes the underlying stored artifacts.

Access to the Service requires authentication, workspaces are isolated per organization, and evidence is stored with expiry enforced at the storage layer. No system is perfectly secure, so avoid pointing tests at production systems holding sensitive data when a test environment will do.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Requests can be made through the Support page in your workspace; organization administrators can service deletion requests covering test evidence directly through retention and erasure controls.

We may update this policy from time to time. Material changes will be announced through the Service. Use of the Service is also governed by the Terms of Service.

Privacy questions can be raised through the Support page in your workspace.