Privacy policy and terms, in plain language

Who we are

This page explains how QAonTOP Software Solutions Pvt. Ltd. ("QAonTOP", "we", "us") handles personal data and the terms that apply when you use qaontop.com or engage us for software testing and quality assurance services.

We are a software testing company headquartered in Ahmedabad, India, with a presence in Calgary, Canada. We provide functional, automation, performance, security, accessibility, platform and AI & LLM testing, and we work through dedicated teams, staff augmentation, managed testing, fixed-price projects, QA consulting and on-demand testing.

Where a signed agreement, statement of work (SOW) or non-disclosure agreement (NDA) exists between you and QAonTOP, that document takes precedence over this page for the engagement it covers.

Information we collect

• Information you give us: name, work email, phone, company, role and project details you share through the contact page, consultation bookings, proposal and estimate requests, downloads, newsletter sign-ups or email.
• Meeting information: when you book through our scheduling tool, the time slot, time zone and any notes you add.
• Job applications: CV, portfolio, experience and contact details you send to our careers team.
• Usage data: pages visited, referring site, approximate location (country or city level), device and browser type, collected through cookies and similar technologies.
• Client project data: information we are given access to while delivering services. See Client project data below.

We do not knowingly collect personal data from children, and our services are intended for businesses.

How we use information

• Reply to enquiries, prepare proposals, estimates and test plans, and run consultations.
• Deliver, manage and invoice the services you have engaged us for.
• Send QA notes and updates you have subscribed to. You can unsubscribe at any time from the link in every email.
• Assess job applications and contact candidates.
• Understand how the website is used so we can improve content and performance.
• Protect our website, systems and clients, and meet legal, tax and accounting obligations.

We process personal data on the basis of your consent, the steps needed to enter into or perform a contract with you, our legitimate interest in running and improving our business, or a legal obligation.

Client project data and confidentiality

Testing often requires access to applications, environments, source code, builds, credentials and data. We treat everything shared with us as confidential.

• NDA first: we are happy to sign your NDA, or ours, before we receive any access or project material.
• Least access: only the engineers assigned to your project receive access, and only to the systems they need.
• Test data: we recommend masked, synthetic or anonymised data. Where production data is unavoidable, we agree the handling rules with you in writing.
• Credentials: stored in access-controlled password managers, never in shared documents or chat, and rotated or revoked on request and at the end of the engagement.
• Security findings: vulnerabilities found during security or penetration testing are reported only to your nominated contacts and are never disclosed publicly.
• End of engagement: we return or securely delete project material and revoke our access, unless you ask us in writing to retain specific deliverables.

For these activities we act on your instructions as a processor or service provider. A data processing agreement can be signed on request.

How we protect information

We use administrative, technical and physical safeguards appropriate to the risk, including encrypted connections, multi-factor authentication on business systems, role-based access, device security controls, confidentiality obligations for every team member and regular access reviews. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected clients without undue delay if a breach affects their data.

Sharing with third parties

We do not sell personal data. We share it only with:

• Service providers that help us run the business, such as email, scheduling, hosting, analytics, file-sharing and accounting tools, under contracts that limit how they can use it.
• Professional advisers such as lawyers, auditors and accountants, where needed.
• Authorities when required by law, or to protect our rights, our clients or the public.
• A successor business in the event of a merger, acquisition or sale of assets, with this policy continuing to apply.

Logos, names and results shown in our case studies and testimonials are published only with the client’s permission.

International transfers

Our team works from India and serves clients across North America, Europe, Australia and Asia, so information may be processed outside the country where you are located. Where required, we use appropriate safeguards such as contractual clauses to protect information that is transferred.

How long we keep information

• Enquiries and proposals that do not lead to an engagement: up to 24 months.
• Client contracts, invoices and related records: as long as required by tax and company law.
• Client project data: for the duration of the engagement, then returned or deleted as described above.
• Job applications: up to 12 months, unless you ask us to delete them sooner.
• Newsletter subscriptions: until you unsubscribe.

Your privacy rights

Depending on where you live, including under the GDPR and UK GDPR, Canada’s PIPEDA, India’s Digital Personal Data Protection Act 2023 and US state privacy laws, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority.

To exercise these rights, email business@qaontop.com with the subject line "Privacy request". We will verify your request and respond within the time required by applicable law.

Cookies and similar technologies

We use essential cookies to make the website work, and analytics cookies to understand how pages are used. The website also remembers some preferences in your browser, such as recent searches and whether you have already seen the intro animation. Embedded tools, such as our meeting scheduler, may set their own cookies under their own policies.

You can block or delete cookies in your browser settings. Essential features may not work correctly if you do.

Website terms of use

• Content: the information on this website is general and provided for guidance. It does not create a contract or a professional relationship until an agreement or SOW is signed.
• Intellectual property: the QAonTOP name, logo, product names, website design, text, graphics and code belong to QAonTOP or its licensors. Client names and logos belong to their owners and are shown with permission.
• Acceptable use: do not attempt to disrupt, scan, attack or gain unauthorised access to the website, scrape content at scale, or use it for any unlawful purpose.
• Third-party links: links to other websites, including review platforms and the "Ask AI about QAonTOP" assistants, are provided for convenience. We are not responsible for their content, and AI-generated answers come from those services, not from us.
• Availability: we aim to keep the website available and accurate, but it is provided "as is" and may change or be unavailable at times.

Service terms

• Agreements: each engagement is governed by a proposal, SOW or master services agreement that sets out scope, deliverables, timelines, team and fees. Those documents prevail over this page.
• Pricing and estimates: prices on the Packages page and figures from the Cost Utility calculator are indicative. The final price is confirmed in writing before work starts.
• Free one-week POC: where offered, the proof of concept is a limited, no-obligation trial on an agreed scope. It does not commit either party to a longer engagement.
• Your responsibilities: provide timely access to environments, builds, documentation and a point of contact, and confirm you have the right to share any data or systems with us.
• Deliverables and ownership: test cases, scripts, automation code, reports and other deliverables created for you transfer to you once the related invoices are paid. We keep ownership of our pre-existing tools, frameworks and know-how, with a licence for you to use them as part of the deliverables.
• Testing limits: testing reduces risk but cannot guarantee that software is free of defects or vulnerabilities. Results reflect the scope, environment, build and time agreed.
• Security testing: we only test systems you own or are authorised to have tested, within written rules of engagement and agreed time windows.
• Liability: unless the agreement says otherwise, our total liability for an engagement is limited to the fees paid for that engagement in the previous twelve months, and neither party is liable for indirect or consequential loss.
• Non-solicitation: during the engagement and for twelve months after, neither party will directly hire the other’s staff who worked on the project without prior written agreement.

Governing law

Unless your agreement with us states otherwise, these terms are governed by the laws of India, and the courts of Ahmedabad, Gujarat have jurisdiction. This does not remove any rights you have under the mandatory consumer or data protection laws of the country where you live.

Changes to this page

We may update this page as our services, the website or the law change. The date at the top shows when it was last revised. Material changes that affect active clients will also be communicated directly.

Contact us

For any question about privacy, these terms or your data:

• Email: business@qaontop.com
• Phone (India): +91 99131 36062
• Phone (Canada): +1 (403) 604-8204
• QAonTOP Software Solutions Pvt. Ltd., Ahmedabad, Gujarat, India