Privacy notice
Version 2026-10-22 · Creo Qualitas testing portal
This notice explains what personal data the Creo Qualitas testing portal collects from freelance testers, why, how long we keep it and how you can use your rights under India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Creo Qualitas is the Data Fiduciary for this data.
1. What we collect
| Data | Why we need it |
|---|---|
| Name, email address, password (stored only as a one-way hash) | Your account, signing in, and emails about your work |
| Indian mobile number and city | Contacting you about urgent project work, and planning testing across locations |
| Experience, skills, title, short bio, LinkedIn/portfolio link, profile photo | Choosing the right testers for each project |
| Your test devices (model, OS version, browsers) | Matching you to projects that need those devices |
| Your work: bug reports, screenshots and videos you attach, comments, test case results, reproductions, cycle chat messages, points and rankings | Running test cycles, reviewing quality, and delivering bug reports to our clients |
| Sign-in records (date, time, IP address), a sign-in cookie, and notification settings | Keeping accounts secure, investigating misuse, and sending notifications you turned on |
| Your nominee's name and contact (optional) | Letting that person use your rights if you die or cannot act yourself |
We do not collect Aadhaar, PAN, bank or payment details, and we do not use advertising or tracking cookies. The only cookie is the one that keeps you signed in.
2. Who can see it
- Admins and QA Leads of Creo Qualitas see your profile, contact details and devices to manage the team.
- Other testers on the same project or test cycle see your name, photo, title, city and device names, and your work in that cycle.
- Our clients receive bug reports, which may include your name as the reporter and the screenshots you attached. Clients do not get your contact details.
- Service providers that run the portal for us: our server host and our email provider (to deliver emails). If you turn on push notifications, your browser's push service delivers them.
We never sell your data, and we share it only as described here or when the law requires it.
3. How long we keep it
- Sign-ups that never confirm their email are deleted after 7 days.
- Applications that are not approved are deleted after 180 days.
- While you are on the team, we keep your data so we can offer you work. When you delete your account, or when we end your membership and you ask us to, we erase your profile, contact details, devices, photo, chat messages and notifications.
- Bug reports you wrote are part of our clients' deliverables, so they stay with the client project. After erasure, they show "Deleted user" instead of your name.
- Security logs are kept for 2 years (the law requires at least one year). Encrypted backups are kept for up to 14 days.
4. How we protect it
The portal uses HTTPS encryption, hashed passwords, access limited by role, protection against form forgery and password guessing, a security log of sign-ins and admin actions, and encrypted backups. If a personal data breach affects you, we will tell you without delay. We will also report it to the Data Protection Board of India, as the DPDP Rules require.
5. Your rights
- See your data: download everything we store about you from My profile → Your data and privacy.
- Correct it: edit your profile and devices at any time. To change your email, send a request.
- Withdraw consent and erase your data: delete your account from My profile, or send a request. Withdrawing consent means we can no longer offer you testing work.
- Nominate someone to use these rights for you if you die or cannot act yourself (in My profile).
- Complain: contact our Grievance Officer. We reply within 90 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Send a privacy request or complaint
6. Age
The portal is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has signed up, tell us and we will delete the account.
7. Contact
Grievance Officer, Creo Qualitas
Email: rupanand.official@gmail.com
If this notice changes, we will ask you to read the new version the next time you sign in.