Privacy Policy

SpecHive ("we", "us", "our") operates the SpecHive cloud platform at app.spechive.dev and the open-source SpecHive software. This Privacy Policy explains what data we collect, how we use it, and what rights you have.

Self-Hosted vs. Cloud

If you use the self-hosted version of SpecHive, your data stays entirely on your own infrastructure. We do not receive, store, or process any of your test data, account information, or usage metrics. This policy applies only to the SpecHive cloud service and the spechive.dev website.

What Data We Collect

Account Information

When you create a SpecHive cloud account, we collect your name, email address, and organization name. If you sign up via a third-party authentication provider (such as GitHub or Google), we receive the profile information that provider shares with us.

Test Data

When you use the SpecHive reporter, your test run results are sent to our servers. This includes test names, pass/fail status, duration, retry counts, error messages, stack traces, and any artifacts you configure (screenshots, videos, Playwright traces). We also record CI metadata when available: branch name, commit SHA, and pipeline URL.

Usage Data

We track aggregate usage metrics for billing and capacity planning: number of test results processed. We also collect standard server logs (IP address, user agent, request timestamps) for security and operational purposes.

How We Use Your Data

• Service operation — to store and display your test results, detect flaky tests, and provide analytics.
• Billing — to calculate usage against your plan limits and process payments.
• Support — to respond to your questions and troubleshoot issues.
• Security — to detect abuse, prevent unauthorized access, and maintain service integrity.
• Product improvement — to understand usage patterns and improve the platform. We use aggregate, anonymized data for this purpose.

We do not sell your data. We do not use your test data to train machine learning models.

Third-Party Services

We use the following third-party services to operate SpecHive cloud:

• Stripe — for payment processing. Stripe receives your payment information directly; we do not store credit card numbers.
• Cloud infrastructure providers — for hosting, storage, and database services. Your data is stored in data centers operated by our infrastructure provider.

We do not share your test data with any third party beyond what is necessary to operate the service as described above.

Cookies and Analytics

The spechive.dev website uses only essential cookies required for authentication and session management. We do not use third-party tracking cookies or advertising scripts.

Data Storage and Security

Your data is stored in encrypted-at-rest databases and object storage. Access to production systems is restricted and logged. We use TLS for all data in transit. While no system is perfectly secure, we take reasonable measures to protect your data consistent with industry standards.

Data Retention and Deletion

Your test data is retained for as long as your account is active. If you delete a project, all associated test runs, results, and artifacts are permanently deleted. If you delete your account, all your data is permanently deleted within 30 days. Server logs are retained for up to 90 days for security and operational purposes.

Your Rights

You have the right to:

• Access your data — you can view and export your test data at any time through the dashboard.
• Delete your data — you can delete individual projects or your entire account.
• Port your data — you can export your data and migrate to a self-hosted instance.
• Correct your data — you can update your account information at any time.

If you are located in the European Economic Area, you may also have additional rights under the GDPR, including the right to restrict processing and the right to object to processing.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the website before the changes take effect.

Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected].