Privacy Policy

1. Who we are

CoreAutomata provides a hosted commercial service that helps QA teams capture mobile apps, discover screens and flows, and author maintainable tests. We operate the marketing site, cloud dashboard, API, and related device services.

Questions about this policy: support@coreautomata.com.

2. Information we collect

Depending on how you use CoreAutomata, we may collect:

• Account information — email address, display name, authentication identifiers (for example via Google sign-in or email/password through Firebase Authentication), and plan or early-access preferences you choose.
• Job and project content — project metadata, job configuration, uploaded app builds (such as APK/XAPK/IPA), screen graphs, test cases, journeys, and related authoring artifacts.
• Device and session telemetry from companion apps — screenshots, accessibility / UI hierarchy data, device model and OS details, package or bundle identifiers, and connection status needed to mirror devices and run discovery or tests.
• Usage and diagnostics — product analytics events, approximate location derived from IP, browser/device type, performance and error reports, and support emails you send us.
• Marketing site interactions — pages viewed and CTA clicks on the public website when analytics is enabled.

3. How we use information

We use information to:

• Provide, operate, and improve the CoreAutomata service (including discovery, enrichment, grounding, and test execution).
• Authenticate users, secure accounts, and prevent abuse.
• Communicate about your account, early access, product updates, and support requests.
• Analyze product usage to improve reliability and features.
• Comply with law and enforce our Terms of Service.

4. AI processing

CoreAutomata uses machine learning and third-party large language model providers to analyze screens, generate briefs, propose steps, and assist authoring. Screenshots, accessibility trees, and related job context may be sent to those providers solely to operate the features you request. We do not sell your app content as training data to third parties.

Use test or sandbox accounts for exploration. Avoid uploading production payment credentials, secrets, or highly sensitive personal data into jobs when possible.

5. Service providers

We use trusted processors to host and operate the product, including cloud infrastructure (Google Cloud Platform), authentication and hosting (Firebase / Google), analytics (such as PostHog and Mixpanel), error/feedback tooling when enabled, and AI model providers. They process data only under our instructions and applicable agreements.

6. Cookies and similar technologies

We and our analytics providers may use cookies, local storage, or similar technologies to keep you signed in, remember preferences, and measure site or product usage. You can control cookies through your browser settings; some features may not work if storage is blocked.

7. Retention

We retain account, job, and device-derived data for as long as needed to provide the service, support early-access customers, resolve disputes, and meet legal obligations. You may request deletion of your account and associated data by emailing support@coreautomata.com; we will delete or anonymize data except where we must retain it (for example security logs or legal requirements).

8. Sharing

We do not sell personal information. We share information with service providers as described above, when you direct us to (for example inviting teammates), if required by law or to protect rights and safety, or in connection with a merger, financing, or sale of assets where confidentiality protections apply.

9. Security

We use industry-standard measures appropriate to a hosted SaaS product (encryption in transit, access controls, and cloud security practices). No method of transmission or storage is perfectly secure; please use strong passwords and protect your devices.

10. International transfers

CoreAutomata is a cloud service. Information may be processed in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

11. Children’s privacy

CoreAutomata is intended for business and professional use. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact support@coreautomata.com.

12. Your choices

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Contact support@coreautomata.com to exercise these rights. You may also stop using the service and request account closure.

13. Changes

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Continued use of the service after changes become effective constitutes acceptance of the updated policy.

14. Contact

CoreAutomata — Privacy inquiries: support@coreautomata.com.