A
    AVRM-Soft

    Privacy Policy

    This policy covers the AVRM-Soft website (avrm-soft account, subscriptions) and the Small Tester Chrome extension. Small Tester operates in two modes with different data implications — both are described below.

    Last updated: August 14, 2026. This page is the canonical privacy policy; it supersedes the copy previously published in the Small Tester extension repository.

    The two operating modes of Small Tester

    BYOK mode (bring your own key). You configure your own LLM provider API key in the extension. In this mode the extension works the way the original policy described: it runs locally in your browser, your API keys are stored exclusively in your browser and are never sent to AVRM-Soft, and page content is sent only to the LLM provider you configured. AVRM-Soft collects no test data in BYOK mode.

    Default-key mode (built-in AI models). You use the built-in models billed in credits. In this mode your test requests flow through the AVRM-Soft backend, which forwards them to third-party LLM providers using our API keys. This mode requires a signed-in account and involves the server-side data processing described in the sections below. Statements such as “no user data is collected” apply to BYOK mode only.

    Data we process to provide the service (default-key mode)

    • Account data: email address, display name, password hash (if you set a password), email-verification status, and how the account was created (e.g. via Small Tester).
    • Subscription and payment metadata: your plan, subscription status, billing period, and payment references. Payments are processed by our Merchant of Record (payment provider); we never receive or store your card details — we store only provider references, amounts, and statuses.
    • Usage telemetry: server-side records of runs and AI calls — model used, token counts, credits spent, computed cost, latency, and outcome — linked to your account. We collect these on our backend as part of providing and billing the service; there is no client-side analytics script and no consent banner involved.
    • AI call logs: the full request and response payloads of default-key AI calls (which include the page content your tests operate on) are kept for a short period for incident investigation: up to 2 days in an active log plus up to 5 more days archived, then deleted automatically. These logs are linked to your account and never contain API keys.
    • Funnel events: server-side records of visits to Small Tester pages (landing, sign-in, checkout) used to understand where the sign-up flow loses people.

    AI processing by third-party providers

    In default-key mode, the content of pages your tests interact with is sent to third-party LLM providers (routed through our inference gateway) to execute your test instructions. In BYOK mode it is sent directly to the provider you configured. In both modes, consult the relevant provider's privacy policy for their data handling practices. No third party other than the LLM provider receives your test content.

    What the extension never does (both modes)

    • It does not extract or transmit login credentials, cookies, or any other browser data beyond what your test instructions operate on.
    • Your own API keys (BYOK) never leave your browser; our backend API keys never leave our servers.

    Anonymous usage statistics (opt-in, extension)

    Independently of the modes above, the extension can send anonymous usage statistics to help improve features. This is disabled by default and only occurs after you explicitly agree in the consent dialog or Settings. Collected events cover lifecycle (installed, updated, consent), test execution (status, duration, step counts, error categories — never message texts), test authoring (created/deleted/imported/exported counts), and which LLM provider type is configured (never the configuration itself). They never include URLs or page contents, test case names or data, prompts or AI conversation contents, API keys or credentials, or identity/email/location profiles. Events use a random local identifier deleted when you turn telemetry off (Settings → General → Privacy).

    Your control and rights

    • You may delete your extension-side conversation history and reset all settings at any time; uninstalling removes all locally stored data.
    • You can request deletion of your AVRM-Soft account and its associated server-side data by contacting us at the address below.
    • Setting a password and verifying your email are optional for accounts created through checkout; paid features work without them.

    Business transfers

    AVRM-Soft develops several products. If one of them — or the company itself, or the assets behind one of its services — is sold, merged, or otherwise transferred, the personal data related to that service may be transferred to the acquirer as part of the transaction, so that your account and subscription keep working under the new operator.

    In that case only the data belonging to the transferred service is passed on. It remains subject to this policy until the acquirer notifies you of a different one, and your rights above — including deletion of your account and its server-side data — are unaffected by the change of operator.

    Policy updates

    The policy may be revised to reflect practice updates, legal changes, or new features. The date at the top reflects the latest revision; review periodically for changes.

    Contact us

    For questions about this Privacy Policy, contact avrm.soft@gmail.com.

    See also: Terms of Service · Refund Policy