Privacy Policy

Who we are

BugsQA is a QA testing team based in Colombia. The website and the services are operated by Camilo Delgado and Juan Camilo Alzate, who run BugsQA together as individuals, from Calle 18A #55-105, Apto 309 C, Cali, Colombia. In this policy, "BugsQA", "we" and "us" mean Camilo Delgado and Juan Camilo Alzate.

We are the party responsible for the personal information described here (the "controller" under the GDPR, and the "responsable del tratamiento" under Colombian data protection law). You can reach us about anything in this policy at contact@bugsqa.com or .

What this policy covers

This policy covers our website and the conversations that happen before you hire us: forms, emails, calls and proposals.

It does not cover the data inside the apps and websites we test for clients. When we work on a client project, the client decides what data we can access, and we handle it only on the client's instructions under our services agreement and any NDA or data processing agreement we sign with them. If you are a user of one of our clients' apps, the client's own privacy policy applies to you.

Information we collect

Information you give us

When you fill in a form on our website (the contact form, the QA plan form or a short lead form), we collect:

• your name and work email
• your company name and the URL of your website or app, if you add them
• what you need tested (platforms, scope, manual testing or automation) and any project details you write

We also keep the emails, messages and call notes you exchange with us. Please do not send passwords, production credentials or confidential data through our forms. If a project needs them, we will agree a secure way to share them.

Information collected automatically

• Server logs. Our hosting provider records technical data for each request, such as IP address, browser type, the page requested and the time. This keeps the site working and secure.
• Analytics, only with your consent. If you accept analytics cookies, Google Analytics records how you use the site: pages viewed, time on page, the site that referred you, approximate location (city level), and device and browser type. See our Cookie Policy.

We do not collect sensitive information (such as health, biometric or financial data) and we do not ask for it.

How we use it

We use your information only for these purposes, each with a legal basis:

• To answer your request and prepare a QA plan, quote or proposal. Basis: steps you ask us to take before a possible contract, and your consent when you send the form.
• To follow up about the project you asked about. Basis: our legitimate interest in replying to business inquiries. We do not add you to a newsletter or marketing list unless you ask to join one.
• To run, secure and fix the website. Basis: our legitimate interest in a working, safe website.
• To understand how the website is used so we can improve it. Basis: your consent to analytics cookies, which you can withdraw at any time.
• To meet legal obligations, such as tax and accounting records once you become a client. Basis: legal obligation.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not make decisions about you based only on automated processing.

Who we share it with

We share personal information only with service providers that help us run BugsQA, and only what each one needs:

• Vercel, which hosts the website and keeps server logs.
• [form service, e.g. Formspree], which receives form submissions and delivers them to us.
• [email provider, e.g. Google Workspace], which we use for email.
• Google, for Google Analytics (only with your consent).

These providers process data on our behalf under their own terms and data protection commitments. We may also disclose information when the law requires it, to protect our rights or the safety of others, or to a buyer or successor if BugsQA is ever merged or sold, in which case this policy keeps applying to your information.

International transfers

We are based in Colombia and most of our service providers are in the United States, so your information may be processed in countries other than your own. When we transfer personal information, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, and on the conditions Colombian law sets for international transfers.

How long we keep it

• Inquiries that do not become projects: up to 2 years after our last contact, then deleted.
• Client records: for the length of the relationship and as long afterwards as tax and accounting laws require.
• Analytics data: 14 months, then deleted automatically by Google Analytics.
• Server logs: for the short period our hosting provider keeps them.

You can ask us to delete your information sooner (see Your rights).

How we protect it

The website runs only over HTTPS, access to inquiries and client data is limited to the BugsQA team, and our accounts use strong passwords and two-factor authentication. No system is perfectly secure, but if a breach ever affects your personal information, we will tell you and the relevant authorities as the law requires.

Your rights

Wherever you are, you can ask us to:

• tell you what personal information we hold about you and give you a copy
• correct or update it
• delete it
• stop using it for a purpose, or withdraw a consent you gave
• show you proof of the consent you gave us

Depending on where you live, you may have further rights. In the European Union and the United Kingdom you can also object to processing based on legitimate interest, ask us to restrict processing, and receive your data in a portable format. In US states with privacy laws, such as California, you can opt out of the sale or sharing of personal information (we do neither) and you will not be treated differently for using your rights. In Canada, PIPEDA (and, in Quebec, Law 25) gives you the right to access and correct your information and to complain to the Office of the Privacy Commissioner of Canada. In Colombia, Law 1581 of 2012 gives you the rights to know, update and correct your data, to request proof of your authorization, to be told how your data is used, to revoke your authorization or request deletion, and to file a complaint with the Superintendencia de Industria y Comercio.

How to make a request

Email contact@bugsqa.com with your request and the email address you used with us. We may ask you to confirm your identity before we act. We answer questions within 10 business days and requests to correct, update or delete data within 15 business days, the time limits set by Colombian law, which also fall within the limits of the GDPR and US state laws. If we need more time, we will tell you why and when to expect an answer.

If you are not happy with our answer, you can complain to your local data protection authority. In Colombia that is the Superintendencia de Industria y Comercio.

We treat a Global Privacy Control signal from your browser as a refusal of analytics cookies.

Children

Our website and services are for businesses and are not directed to anyone under 18. We do not knowingly collect information from children. If you think a child has sent us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy when our practices or the law change. We will change the "last updated" date at the top of this page, and if a change is significant, we will say so clearly on the website or tell you directly if we are in contact with you.

Contact us

For any question or request about your personal information, contact Camilo Delgado and Juan Camilo Alzate, who handle privacy requests for BugsQA:

• Email: contact@bugsqa.com
• Phone: +57 317 607 8479
• Address: Calle 18A #55-105, Apto 309 C, Cali, Colombia