Privacy Policy

Draft, not yet reviewed. Last updated: 12 November 2026.

What we collect

Your account email address and the workspace you set up: connected assistants, the apps you ask us to test and the hosts they may reach, reviewers, schedules and sources. We also record usage events on our website and in the product, listed in our launch documentation.

The pilot list

When you join the pilot from our home page, we keep your email address, when you joined, who referred you (if you came through someone's link), your place on the list, the referral code in your sharing link, and which version of the page you saw (with or without motion). Anyone who types your address into the form is shown your link and place, so do not treat the link as private. We use it only to invite pilot founders; we send nothing to it until then, and we delete your entry on request.

Screenshots and evidence from checks

When Witness checks your app, the model driving the check receives screenshots of your app under test. We send them to OpenAI under zero data retention; OpenAI retains images its abuse scanner flags for review even then. Each check produces an evidence pack (traces, screenshots and video). We keep packs for 30 days on the free plan and 1 year on paid plans, and countersign records for the life of your workspace. If you run Witness's runners in your own cloud account, screenshots and packs stay in that account.

Test account credentials

Passwords and tokens you give us for test accounts are encrypted at rest, used only to sign in before a check starts, never sent to the model, and never shown again after you save them.

Storage and processors

Our service runs on Amazon Web Services in the United States (us-east-1), with our database on MongoDB Atlas in the same region. Our website runs on Vercel, email is sent through Resend, the checks use OpenAI's API, and billing will use Stripe. We do not sell personal information.

Your rights

You can request a copy or deletion of your data at any time. Deleting a workspace deletes its evidence packs; countersign records you signed are deleted with the workspace.

Contact

Privacy questions: privacy@witness.app (to be set up before launch).