Privacy Policy
Last updated: 3 November 2026
Your organization's data
Your organization's data belongs to your organization. Cadlytic processes it to provide the service your organization uses — planning, testing, verification and delivery of software — and to keep that service secure, to take payments and to meet legal obligations. We do not sell it.
AI features
Some Cadlytic features use an AI model to draft tests, summaries and suggestions. When they do, the relevant text is sent to our AI providers: Anthropic (Claude), which answers or checks every request, and OpenAI (GPT), which may prepare a first draft or answer when Claude is unavailable. Short extracts are also turned into search vectors by Google so that search works. If your organization uses its own AI key, the text goes to your provider instead.
Before any text leaves Cadlytic we remove secrets (keys, passwords, tokens) and common personal identifiers (email addresses, phone numbers, card numbers, IP addresses, PAN). Names written in free text may not be detected, so please keep personal data out of tickets where it is not needed.
We use these providers' paid commercial services, under which this content is not used to train their models. Cadlytic does not train AI models on your data. Within your organization only, Cadlytic remembers patterns from your work (for example recurring defects) to improve its suggestions to you; this is never shared with other organizations.
Your administrators can switch external AI off for the whole organization in Settings. When it is off, nothing from your organization is sent to any AI provider.
Where data is processed
Cadlytic's servers run on Jio Cloud in India and its database is managed by Supabase in the Mumbai region, India. AI processing (Anthropic, OpenAI, Google) and network protection (Cloudflare) take place outside India.
Who can see your data
Each organization's data is separated from every other organization's. Your administrators decide who in your organization has access.
How long we keep it
Your workspace data is kept while your subscription is active. Test evidence files (screenshots, videos, logs) are kept for your plan's period: Free 7 days, Team 90 days, Enterprise as agreed. After that the file is deleted and a fingerprint of it is kept, so a past result stays on record and is clearly marked "original file no longer available". Audit, security and billing records are kept as long as law and security require.
Your rights
You can download your personal data from your account settings. You can ask us to erase your account's personal data; we will do so, except for records we must keep by law (audit and billing records). To ask for anything else about your data, including deletion of your organization's workspace, contact us below.
Security
Data is encrypted in transit (TLS). Sessions are short-lived and limited to your organization. Key administrative actions are recorded in an audit log your administrators can review.
Service providers
Jio Cloud (servers, India) · Supabase (database, Mumbai, India) · Cloudflare (network) · Razorpay (payments) · Zoho (email) · Anthropic and OpenAI (AI) · Google (search indexing) · GitHub (only if you connect it).