中文摘要
下方的英文文本是具有法律效力的版本。本中文摘要僅為方便閱讀；如有出入，以英文文本為準。
- 您的檔案只用於測試，絕不會被出售或公開。
- 程式碼最多保存 90 天，實驗室保存 12 個月。
- AI 步驟由一家外部 AI 服務商在英國境外的伺服器上處理，且只在您同意後進行。
- 依據英國法律 (UK GDPR)，您對自己的資料享有查閱、更正和刪除的權利。
- 如對您的資料有疑問，請聯絡 TrueTest 客服 (地址見英文文本)。
Privacy Notice
Controller: Dean Jung, trading as TrueTest, 4 Lepid Grove, Selly Oak, Birmingham B29 6RU, United Kingdom. Contact: support@truetest.uk.
This notice covers both TrueTest services: the strategy tester at https://truetest.uk and WebAISEO, our AI-search checker at https://truetest.uk/ai-search (also reached at aiwebsitebuilder.uk). The "Website checks" section below is about WebAISEO.
B1. What we collect and why
| Data | Why | Lawful basis (UK GDPR) | Kept for |
|---|---|---|---|
| Website address you submit and the check results | to run the check and show results | legitimate interests (free check) / contract (paid) | free: not stored after the result is shown; paid: reports 30 days, order records 12 months, sales records (website, email, amount) 2 years |
| Trading records you upload (reports, statements, CSV) and their results | to give the verdict and make the paid report | legitimate interests (free check) / contract (paid) | 30 days, then deleted |
| Strategy code, settings and descriptions you upload, your email and the details you enter | to read and test your strategy and reply to you | legitimate interests / steps before a contract | 90 days, then deleted (longer only if you order a test, as an order record) |
| Files you send before giving an email (the free first read) | to show you the first read | steps you asked for before a contract | up to 60 minutes, in memory only, then gone unless you start a lab |
| Your Strategy Lab: email, name, rule card, results and forward watch | to run the lab you asked for and show you its results | steps before a contract / contract | 12 months after your last visit, run or confirm, then deleted with its results and forward watch (one reminder email 30 days before); ask us and we delete it sooner |
| A coded count of how many versions you tested (made from your email with a secret key; it holds no email address) | so the luck bar cannot be reset by deleting a lab | legitimate interests | 24 months after your last activity |
| The record of the optional AI step: which provider, model and prompt version, and a fingerprint of exactly what was sent | to show what the AI step did for your lab | consent (the tick box) | kept with your lab |
| Share links you make for a lab | so people you choose can see its results | contract / legitimate interests | while the lab exists |
| Visits and steps on our pages, kept only as daily totals per page, step and source (no cookies, no network addresses, no names) | to see which pages help people and compare years | legitimate interests | 24 months |
| Your network address (IP address) | to apply rate limits, stop one connection holding more than two launch-price places, and protect the service | legitimate interests | your network address: a coded form, for up to 1 hour in our rate limits and up to 12 days if you start a launch-price checkout; web server and system logs 14 days, with the domain of the site that linked to us, never its page; up to 1 day if our firewall blocks it for attacking the server; up to 5 weeks if it tries to log in to the server itself |
| Name, email and billing details from Stripe checkout | to take payment, deliver your report and handle refunds | contract; legal obligation (accounting) | our sales record 2 years; Stripe keeps payment records under its own policy; accounting records 6 years |
| Email address and website (monitoring) | to send monthly scores and alerts | contract | while subscribed, then 90 days after cancellation; the score history (dates and scores only, no address or email) is kept under the subscription's reference number, with no end date |
| Partners (affiliates): name, channel or website, email, country, your consent choices with their dates, your partner code, the orders made with it (amount, date, refunds; not the customer's name) and payouts | to run the partner programme, work out and pay commission, keep self-billing records | contract; consent for programme and marketing emails (you can withdraw it at any time) | 24 months after your last payout (if you were never paid, 24 months after your application was declined or you left the programme), then deleted; accounting records of payouts 6 years |
| What an AI assistant sends through our connector | to answer the assistant's request | legitimate interests / steps before a contract | a trading record: read and discarded after the answer; code without an email: the free first read only, not stored; code with an email: a Strategy Lab as above, and we send no email to an address given through an assistant; a website check: the one page is fetched and nothing is stored |
| Backups | to recover from failures | legitimate interests | daily copies of the above, kept 14 days (Strategy Vault backups are kept permanently) |
| Agent data: agent ID, test names, hypotheses and results sent to the luck checker | to judge results and keep the permanent ledger the service depends on | contract / legitimate interests | permanently (see B4) |
| Strategy rules deposited in the Strategy Vault | see Part C | consent | permanently (see Part C) |
If you use TrueTest through an AI assistant, your conversation is handled by the assistant's provider under its own privacy policy; we receive only what the assistant sends to our tool.
We do not use cookies for advertising or tracking, and the public site sets no non-essential cookies.
Website checks (WebAISEO)
When you check a website with WebAISEO, we receive the website address you type, and our server fetches public pages of that website, as a search engine would. A free check is not stored after the result is shown. A paid audit keeps the website address, the check results, the PDF report and the Fix Kit for 30 days, and our sales record (website, email, amount) for 2 years. An Agency pack keeps its audits for 12 months. Monthly monitoring keeps the website address and your email while you subscribe (each payment keeps access for 35 days) and for 90 days after you cancel; the score history is kept as described in B1. We share this only with Stripe (payment) and Resend (emails). No outside AI service sees your website, its pages or your results: the website check is rule-based.
B2. Who we share it with
- Stripe (payments) — Stripe Payments UK Ltd. For fraud prevention and its own legal obligations Stripe acts as a separate controller under its own privacy policy.
- Resend (sending emails) — data processed in the EU (Ireland region).
- IONOS (server hosting) — servers in the United Kingdom.
- Our AI service (run by an outside AI provider, on servers outside the UK) — only if you tick the box when you upload strategy code: it reads the text of your code and settings files (with email addresses, links, author lines and secret-looking values removed first) to draft the rule card. If you do not tick it, a person writes the rule card. See https://truetest.uk/security.
- Professional advisers and authorities where the law requires.
We do not sell personal data. Some of these providers are part of groups based outside the UK and may transfer data outside the UK. For the optional AI step, the provider's servers are outside the UK, in a country for which the UK has made no adequacy decision; your code is sent there only if you tick the box on the upload form.
B3. Your rights
You can ask for access, correction, deletion, restriction, objection or a copy of your data, and you can withdraw consent at any time (this does not affect processing before withdrawal). You can complain to the Information Commissioner's Office (ico.org.uk).
B4. The permanent agent ledger
The luck checker only works if every test an agent registers is counted forever: deleting tests would let results look stronger than they are. Ledger entries are therefore permanent and hash-chained. Please do not put personal data in test names, hypotheses or results. If personal data is entered by mistake, contact us: because each entry is chained to the next, we cannot simply delete it, but we will deal with your request as data-protection law requires, and the count of tests stays.