Privacy notice

We process account information, workspace configuration, authorized target URLs, mission metadata, findings, usage totals, and administrative audit events to provide and protect the service.

Credentials supplied for an authenticated journey are relayed to the configured secure browser runner for that mission. The application is designed not to persist credential values in its database, findings, evidence, or audit logs. Customers should use dedicated test accounts and non-production data.

Data is used to authenticate users, isolate workspaces, execute authorized tests, produce reports, operate security controls, and provide support. Service providers receive only the information needed to perform contracted functions. We do not sell personal information.

Mission evidence retention depends on plan and contract. Account deletion removes application records subject to backup, legal, fraud-prevention, and security retention requirements. Enterprise agreements may define custom retention windows.

We use access controls, encryption in transit, audit logging, tenant scoping, and controlled administrative access. Privacy requests and cross-border terms are handled according to applicable law and the governing service agreement.

Questions and privacy requests may be sent to privacy@betaarmy.ai.