Privacy Policy
This policy explains what data TestHeal collects and who controls it. TestHeal is one of several early-stage products built and operated by AppTechLab, which acts as the data controller for all of them.
Who controls your data
AppTechLab (apptechlab.com) is the data controller for information collected through this page, not TestHeal individually. This gives you one place to ask about, correct, or delete your data across every AppTechLab product.
What we collect
- Email address — only if you submit the "Reserve early access" form, together with a timestamp and the consent you gave at signup. If you also select a primary test framework, that value is stored linked to your signup row and deleted automatically if that row is deleted.
- Live-demo activity log — every run through the "Find the healed selector" box is recorded as one row with a timestamp and a confidence level (high/medium/low). The pasted before/after HTML, the selector, the intent text, and the model's full reasoning are never written to that log — only the confidence level.
- Page views — a first-party, cookieless count of page path and referrer, used only for aggregate traffic numbers. No cookie or other client-stored identifier is set for this, which is why no cookie banner appears on this page.
What we don't collect
No cookies are set by this page. No third-party advertising or tracking pixels are loaded. No payment information is collected — this page has no live payment processing. Your IP address is never stored in readable form; it is hashed with a server-side secret salt before being used to enforce the demo's rate limit, and that hash is not linked to your email or to any activity-log row.
About the live demo specifically
The HTML you paste — together with the selector and any optional intent text — is sent to Google's Gemini API to find the semantically matching element after the change; do not paste anything you would not want a third-party AI provider to process, and never paste real credentials, secrets, or personal data embedded in your markup. Neither the pasted HTML nor the model's response is stored server-side; both exist only in memory for the duration of your request. No browser is launched and no live URL is fetched — see the "Scope" note on the homepage for what this demo does and does not do.
How we use it
Your email is used to notify you when TestHeal opens for self-serve access, and occasionally about other AppTechLab developer tools. It is never sold or shared with third parties.
Your rights
You can ask AppTechLab to access, correct, or delete your data at any time by emailing the contact address on
apptechlab.com, or by calling POST /api/delete-account with your email and the deletion code
shown when you signed up — this removes your signup record (and any test-framework note attached to it) and
logs a one-way hash of the deletion for audit purposes only. The code is only ever shown once, at signup, so
that knowing someone else's email address alone is not enough to delete their data; if you lose it, use the
email option instead. As part of AppTechLab's data retention policy, data belonging to a discontinued product
is deleted within 30 days of that product's retirement.
Storage
Data is stored with Supabase, our database provider. Your email address is only ever written by our server, through the "Reserve early access" endpoint, which validates and rate-limits every submission before it reaches the database — this page's own browser code cannot write to the signup table directly. The live-demo activity log has no public read or write access at all; only the server-side healing function can write to it, and only the server-side dashboard endpoint can read from it (and only returns the confidence level + minute-rounded time, never a full row or the underlying HTML).