Privacy Policy

Last updated: June 2026

1. Introduction

TESTUPS, LLC and its affiliated entities ("TESTUPS", "we", "us", or "our") operate the website www.testups.com (the "Website"). We are committed to protecting the privacy of our visitors and customers.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Website, use our services, or interact with us. We comply with the General Data Protection Regulation (GDPR) and applicable data protection laws worldwide.

By using our Website, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The TESTUPS entity that is the data controller for your personal data depends on who you contract or interact with:

Where these entities jointly determine the purposes and means of processing, they act as joint controllers; you may exercise your rights against any of them. Contact: info@testups.com.

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us and data that is automatically collected when you use our Website.

3.1 Data You Provide

• Contact forms: Name, email address, company name, phone number, and message content when you submit a contact or inquiry form.
• Newsletter signup: Email address when you subscribe to our newsletter.
• Account registration: Name and email address when you register to use features such as our AI-powered EMC assistant.
• Social login: When you sign in using a third-party authentication provider (e.g., Google), we receive your name, email address, and profile picture. We do not access any other account data.
• Quote request forms: Name, email address, and other information you provide through embedded forms (e.g., quote requests, event registrations).
• Purchase information: Billing details and payment information when you make a purchase through our Website, processed securely by our payment processor.

3.2 Data Collected Automatically

• Usage data: Pages visited, time spent on pages, referral sources, browser type, device information, and IP address.
• Cookies and tracking technologies: Data collected through cookies, web beacons, and similar technologies (see Section 6).
• Chat data: Conversations with our AI assistant and live chat support are stored to improve service quality.
• Quote interactions: When you access a quote through a secure link we send you, we record when the quote is viewed, downloaded and accepted, together with technical data such as your IP address and timestamps.
• Purchase orders: If you accept a quote or upload a purchase order, we process the order details and any document you submit to fulfil and document the order.

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support.
• To process orders, payments, and deliver products and services.
• To send newsletters and marketing communications (with your consent).
• To provide and improve our AI-powered EMC assistant.
• To analyze Website usage and improve our content and user experience.
• To manage our customer relationships.
• To process, fulfil and keep an accurate, auditable record of your quote acceptance and order.
• To comply with legal obligations and protect our legitimate interests.

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: When you subscribe to our newsletter, register an account, or accept cookies.
• Contract performance (Art 6(1)(b) GDPR): When processing is necessary to fulfill an order or provide a requested service, including processing your quote acceptance, purchase order and order data to enter into and perform our contract.
• Legitimate interests (Art 6(1)(f) GDPR): For Website analytics, fraud prevention, securing the quote-acceptance process, keeping an audit record of when a quote was viewed, downloaded and accepted, and improving our services — provided these interests do not override your fundamental rights.
• Legal obligation: When we are required to process data to comply with applicable laws.

6. Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies for the following purposes:

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our Website.

7. Third-Party Services

We use trusted third-party service providers to operate and improve our Website and services. These providers may process your personal data on our behalf in the following categories:

• Payment processing: Secure handling of transactions and payment data (PCI DSS compliant).
• Customer relationship management: Managing customer interactions, inquiries, and marketing communications.
• Live chat and visitor engagement: Providing real-time support through our Website.
• Website analytics: Understanding how visitors use our Website to improve content and user experience.
• Authentication: Secure sign-in via third-party identity providers.
• Hosting and infrastructure: Website hosting, content delivery, database storage, and security services.
• Video hosting: Serving embedded video content on our Website.
• AI services: Powering our AI-powered EMC assistant to answer your questions.

Each third-party provider is bound by their own privacy policy and data processing agreements. We only share the minimum data necessary for each provider to perform its function.

8. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit (TLS/SSL) and at rest
• Role-based access controls
• Regular security reviews and monitoring
• Secure serverless database and object storage solutions

9. International Data Transfers

EU/EEA personal data may be processed by service providers and TESTUPS entities outside the EEA, including in the United States — e.g. our infrastructure provider Cloudflare, Inc. (Workers / R2 / D1), Google LLC (Google Workspace / Drive), and TESTUPS, LLC. Such transfers are safeguarded by EU Standard Contractual Clauses and, where the recipient is certified, the EU-U.S. Data Privacy Framework, with supplementary measures as required. Some providers process EU data within the EU — e.g. our CRM Zoho (EU data centre, zoho.eu).

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained for the duration of the business relationship plus any legally required retention period.
• Newsletter subscriptions: Until you unsubscribe.
• AI chat data: Retained for service improvement and to provide conversation history to registered users.
• Transaction records: Retained as required by applicable tax and accounting laws (typically 5–8 years).
• Order and acceptance records (including quote access/event logs evidencing your order): retained for the period required by accounting and tax law (in Hungary, generally 8 years) and for as long as needed to establish, exercise or defend legal claims.
• Purchase orders and order documents: retained for 10 years.
• Analytics data: Retained according to our analytics platform's default retention settings.

11. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request restriction of processing of your personal data.
• Right to data portability: Receive your personal data in a structured, machine-readable format.
• Right to object: Object to processing of your personal data based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@testups.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or your local supervisory authority.

12. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at info@testups.com and we will promptly delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: