Security

QAlimucho interacts with your checkout flow. Here is exactly how we handle your data.

What Data We Collect

During a test recording, we capture the sequence of user actions (clicks, form inputs, navigation) and element selectors needed to replay those actions. We do not store full page HTML or screenshots by default.

We collect your email address and organisation name for your account. We use Plausible Analytics — a cookieless, privacy-first analytics tool — to understand aggregate site usage.

Credential Handling

Test credentials (login email, password, payment details) are stored encrypted and are only used to replay your recorded test flows. They are never logged, transmitted to third parties, or used for any purpose other than running your tests.

We strongly recommend using dedicated test accounts rather than production credentials.

Payment Data

QAlimucho's WordPress plugin adds a fake payment gateway to your WooCommerce store. Test runs use this gateway — no real payment is ever processed. Real payment gateway credentials are never accessed or stored by QAlimucho.

Data Transmission & Storage

All data is transmitted over HTTPS/TLS. Data is stored on servers located within the European Union. We do not sell, share, or transfer your data to third parties.

Data Retention & Deletion

You can delete individual recordings and test results at any time from your account. Deleting your account permanently removes all associated data within 30 days. Test orders created by the WordPress plugin are automatically deleted after 1 hour.

GDPR

QAlimucho is operated by Springbeats SARL, a French company subject to EU data protection law. You have the right to access, rectify, and delete your personal data. See our Privacy Policy for details.

Responsible Disclosure

If you discover a security vulnerability in QAlimucho, please report it responsibly via our contact form. We will acknowledge your report within 48 hours and work with you to resolve the issue promptly.