Skip to main content

Privacy Policy for Explyt Test Plugin and Services

Effective Date: April 25, 2025
Last Updated: April 25, 2025
This Privacy Policy ("Policy") explains how Explyt Ltd ("we", "our", or "Company") collects, uses, discloses, and safeguards personal and technical data when you use our Explyt Test Plugin ("Plugin"), the website at https://explyt.ai ("Site"), and related Plugin services (collectively referred to as the "Services"), as described in the User Agreement. It also outlines your rights under applicable privacy laws, including the EU General Data Protection Regulation (GDPR), UK GDPR, Swiss Federal Act on Data Protection (FADP), and applicable U.S. state laws.
This Policy forms an integral part of the User Agreement. Unless otherwise defined herein, all capitalized terms shall have the meaning assigned to them in the User Agreement.

1. Scope of Policy​

This Policy applies to:
• The Explyt Test Plugin, installed within IntelliJ IDEA;
• The Explyt website and dashboard hosted at https://explyt.ai;
• Cloud-based Services provided via the Explyt AI Server;
• Trial accounts, registered accounts, and enterprise deployments;
• Any communication or interaction you have with us.
This Policy does not apply to data you provide directly to external Large Language Model (LLM) providers unless otherwise specified.

2. Categories of Information We Collect​

a) Personal Data​

We collect the following types of Personal Data:
• Email address and contact details;
• Login credentials (email and hashed password);
• IP address, browser type, IntelliJ IDEA version (User Agent information);
• Device and installation identifiers (e.g., Device_ID generated by the IntelliJ Platform and stored in your system registry);
• Payment account information (e.g., last 4 digits of card, transaction ID);
• Telemetry on usage patterns (e.g., feature engagement, crash reports).

b) Non-Personal Technical Data ("User Data", according to User Agreement)​

We also collect Your Request (source code, project structures, and configuration metadata) processed by Plugin and Services. This User Data is:
• Provided to perform Services, including but not Test generation and Scenario creation;
• Analyzed or created by the Explyt AI Server and sent to OpenAI or others LLMs (Prompts, and LLMs responses, including Scenarios and Tests );
• Stored temporarily or permanently for processing, debugging or evaluation purposes.

Note: You are strongly advised not to include Personal Data in User Data. If any Personal Data is included in User Data provided as Contribution (see the User Agreement), the Company reserves the right to amend, redact, or remove such data to ensure compliance.

We process your personal data only when legally permitted:
• Consent – granted when you use the Plugin or Services, or via specific Opt-in actions (e.g., Contribution Program);
• Contract performance – to provide Services or rights to use the Plugin;
• Legitimate interest – fraud prevention, analytics, service improvement;
• Legal obligation – compliance with applicable regulations (e.g., tax, data protection).

To learn more about the legal basis for legitimate interests, please contact us at info@explyt.com.

4. Type of Your Personal Data and User Data​

a) Your Use of the Plugin and Services​

We collect information about your interactions with Plugin and Services, including: features used and frequency; IntelliJ project components analyzed or selected (e.g., specific test classes, methods, or files chosen for test generation); number, type, and frequency of Requests; types and sizes of transmitted files or attachments; Your Plugin configuration settings.

We may also collect metadata such as: clickstream data and plugin telemetry; timestamps and interaction frequency; error logs and crash reports; anonymized performance metrics associated with your Device ID; information on cancellation or reverting of Services results.

This data helps us improve stability, prioritize development, and understand Plugin and Services usage.

b) Device and Connection Information​

We may collect: Device type, OS, IDE version, and network type; IP address, approximate location, and region settings; IntelliJ installation ID (Device ID); HTTP headers and User Agent strings; Diagnostic data (e.g., crash reports).

You may limit certain types of data collection by configuring Plugin settings or disabling online Services (Community Plan only).

5. How We use Your Personal Data and User Data​

We use the information we collect, including your Personal Data and User Data, as described throughout this Privacy Policy. In addition to the purposes listed in other sections (e.g., Legal Bases, Data Retention, International Transfers), we use Your Personal Data and User Data for the following purposes:

  • To provide and operate the Plugin and related Services, including, but not limited to, processing your Requests, generating test scenarios, and ensuring consistent functionality across supported environments;
  • To respond to inquiries, feedback, or support requests from Users;
  • To send service notifications, transactional emails (e.g., Account updates, password resets), and administrative communications;
  • To investigate, diagnose, and resolve bugs, performance bottlenecks, and support issues affecting the Plugin or Services;
  • To detect, prevent, or respond to fraudulent or unauthorized activity, security threats, and potential misuse of the Plugin or Services;
  • To analyze usage patterns and telemetry for product improvement, including prioritization of features and roadmap planning;
  • To personalize or localize content, Services, and feature availability based on region, IDE configuration, or other contextual signals;
  • To comply with applicable legal obligations, enforcement requests, subpoenas, or orders issued by courts or public authorities;
  • To assert and enforce our contractual rights under the User Agreement, or this Privacy Policy;
  • To improve the performance and usability of our Site, Plugin, and related Services;
  • To conduct internal analytics and research aimed at developing new features, tools, and integrations;
  • To evaluate business opportunities, identify prospective enterprise users, and reach out to leads or prospective customers (where permitted by applicable law, and subject to opt-out or objection where required).

Where applicable law requires consent for a particular use (e.g., marketing outreach, participation in Contribution Program, or long-term storage of User Data), We will collect Your explicit consent or provide the option to withdraw such consent at any time without prejudice to prior lawful processing.
We do not use your Personal Data for profiling or automated decision-making that produces legal or similarly significant effects unless explicitly stated and permitted under applicable law.

6. Cookies and Tracking​

Our Site may use cookies or analytics tools to: identify returning users, remember preferences, evaluate usage and marketing performance.
We do not use third-party advertising cookies. You can control cookie preferences via your browser settings.
See our Cookie Policy (placeholder) for more information.

7. Information from Other Sources​

We may receive information about you from third parties in the course of providing our Services or rights to use the Plugin. This includes:

  • Information provided by other users who invite you or mention you in feedback or reports;
  • Data received via integrations you authorize, such as OpenAI, GitHub, or other APIs;
  • Crash diagnostics or analytics reports provided by third-party tools;
  • Publicly available information (e.g., domain registrations, public profiles), where such collection is lawful under applicable data protection regulations.

We may combine this information with data we already hold to enhance user experience, ensure security, or provide contextual support.

8. International Data Transfers​

Our infrastructure is hosted in the United Arab Emirates (UAE).
Some Personal Data (Your Device_ID) and User Data may be transferred to third parties outside the UAE, including:

• OpenAI, L.L.C. (USA) – for LLM-based test generation;
• Other sub-processors listed below in this Policy.

The UAE is not recognized as providing adequate protection under GDPR. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, available at: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021D0914. And UK Addendum to SCCs available at: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/international-data-transfer-agreement-and-guidance/

We may apply additional safeguards such as encryption, pseudonymization, and contractual obligations to ensure lawful transfer.

9. Data Retention​

We retain data as follows:
• Personal Data – as long as your account is active or needed for legal/compliance obligations;
• User Data – temporarily retained during test generation and deleted upon completion unless explicitly marked as Contribution;
• Contribution Data – if you Opt-In, anonymized data may be stored indefinitely for research and model improvement.

We apply data minimization practices such as pseudonymization and hashing wherever it is feasible.

10. Your Rights​

Depending on your jurisdiction, you may have the following rights regarding your Personal Data: right of access; right to rectification; right to erasure; right to restrict processing; right to data portability; right to object to processing; right not to be subject to automated decision-making.

In particular, you may in regards of Your Personal Data:
• Request confirmation whether we process;
• Request correction or deletion;
• Object to or restrict our processing;
• Request data transfer to another controller (where technically feasible) ;
• Withdraw consent at any time without affecting prior processing based on that consent.

To exercise your rights, contact us at info@explyt.com.

11. Data Security​

We use appropriate technical and organizational safeguards, including:
• TLS encryption in transit;
• Logical access controls and multi-factor authentication;
• Infrastructure firewalls and monitoring;
• Role-based internal access and audit logging.
However, no system is entirely secure. You remain responsible for protecting your API Key and Account credentials.

12. Sub-processors and Third Parties​

We engage sub-processors to support the Services, including:
• Hosting and infrastructure (e.g., cloud providers);
• AI service providers (e.g., OpenAI);
• Analytics and diagnostics platforms.
All sub-processors are bound by data processing agreements (DPAs).
You may view the current list at our Site.
We do not sell or rent your data to advertisers.

13. Notice to California Residents (CCPA/CPRA)​

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). We do not sell or share your Personal Data for cross-contextual behavioral advertising. You may request access, correction, or deletion of your Personal Data, or exercise your privacy rights, by contacting us at info@explyt.com.

14. Children's Privacy​

The Services are not directed to individuals under 18. We do not knowingly collect data from children. If we become aware that a child has submitted data, we will delete it immediately.

15. Changes to This Policy​

We may update this Policy from time to time. Changes will be published on this page with a revised “Last Updated” date. Where legally required, we will notify you through the Services or via email.

16. Contact Information​

Explyt Ltd
Office A, RAK DAO Business Centre
RAK BANK ROC Office, Ground Floor
Al Rifaa, Sheikh Mohammed Bin Zayed Road
Ras Al Khaimah, United Arab Emirates
Email: support@explyt.com

Representative​

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

  • United Kingdom (UK)
  • Switzerland
  • European Union (EU)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: app.prighter.com/portal/18807724064

Thank you for trusting Explyt. Your privacy matters to us.

Archived versions will be accessible at: explyt.ai/docs/legal