Privacy Policy

// Privacy

Last updated: February 22, 2026

Last Updated: February 22, 2026
Effective Date: February 22, 2026

1. INTRODUCTION

Welcome to Test AI Models. We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains:

What data we collect
How we use it
Your rights under GDPR and other privacy laws
How to contact us

By using Test AI Models, you agree to this Privacy Policy.

2. WHO WE ARE

Business Name: Marko Milojkovic PR digital m2

Registration Number: 67812549

VAT Number: 114733003

Location: Serbia

Website: https://testaimodels.com

Email: info@testaimodels.com

Payment Processor: Paddle (Paddle.com Market Limited) is our Merchant of Record. Paddle handles all payment data and we never see your credit card information.

3. WHAT DATA WE COLLECT

3.1 Account Information

When you register, we collect:

Email address (required for login and communication)
Password (hashed and encrypted, we never see plaintext)
Name (optional)
Account creation date
Email verification status (whether you confirmed your email)

3.2 Test Data

When you use the Platform, we collect:

Prompts (the text you submit to AI models)
AI responses (outputs from ChatGPT, Claude, Gemini, etc.)
Model selections (which AI models you tested)
Timestamps (when tests were run)
Cost data (API credits consumed, per-model costs)
Speed data (response times in seconds)
User feedback (thumbs up/down ratings, if provided)
Use case category (what you're building: code, content, support, etc.)
Reason for model selection (quality, price, speed)

3.3 Usage Data

We collect technical data:

IP address
Browser type and version
Device information (OS, screen size)
Pages visited (navigation patterns)
Feature usage (which Platform features you use)
Session duration
Subscription status (Free, Pro, Lifetime)
Credits balance and usage

3.4 Payment Data (Handled by Paddle)

We do NOT collect or store:

Credit card numbers
CVV codes
Bank account details
Billing addresses (Paddle collects this for tax purposes)

Paddle collects payment data as our payment processor. See Paddle's Privacy Policy: https://paddle.com/legal/privacy

3.5 Cookies and Tracking

We use cookies for:

Essential functions: Login, session management (required)
Analytics: Usage tracking via PostHog (opt-in, disabled by default)

See Section 14 for cookie details.

4. HOW WE USE YOUR DATA

4.1 To Provide the Platform

Create and manage your account
Run AI model tests and display results
Track model test balance and API credits usage
Calculate costs and generate cost projections
Send email confirmations (password resets, account verification)

4.2 To Improve the Platform

Analyze usage patterns (which features are popular)
Identify bugs and errors
Optimize performance
Develop new features based on user behavior
A/B test new features

4.3 To Communicate with You

Send transactional emails (password resets, account confirmations)
Notify you of important Platform updates (security issues, Terms changes)
Respond to support requests
Send optional product updates (you can opt-out)

4.4 To Generate Community Benchmarks

We automatically collect and aggregate the following data from ALL tests:

Speed: How fast each model responded
Cost: How much each model cost
Model selected: Which AI models users chose
Thumbs up/down: User feedback ratings
Use case category: What users are building
Reason for selection: Why users chose specific models (quality, price, speed)

This data is used to create public benchmarks like:

"For code generation, Claude was selected 57% of the time"
"Average cost for customer support prompts: $0.04"
"Gemini Flash is 2x faster than GPT-4o for summaries"

We DO NOT publicly share:

Your exact prompt text
Your name, email, or account information
Any personally identifiable information

Current Status:

All tests automatically contribute to community benchmarks
Future feature: Opt-out toggle in account settings (planned)

4.5 For Legal Compliance

Comply with laws and regulations (GDPR, tax laws, etc.)
Respond to legal requests (subpoenas, court orders)
Protect our rights and property
Prevent fraud and abuse
Investigate policy violations

5. WHAT WE NEVER DO WITH YOUR DATA

5.1 We NEVER Train AI Models on Your Data

Your prompts are NOT used to train ChatGPT, Claude, or any other AI model
We're a pass-through platform and prompts go to third-party APIs only for your test
We don't feed your data back to AI providers for training purposes

5.2 We NEVER Sell Your Data

Your data is not for sale
We don't share data with advertisers
We don't monetize your information
We don't participate in data broker networks

5.3 We NEVER Show Your Exact Prompts Publicly

Your prompts remain private
Community benchmarks are aggregated and anonymized
We only share statistical patterns (e.g., "57% chose Claude"), not your content

6. DATA SHARING AND THIRD PARTIES

6.1 Third-Party AI Providers

When you run a test, we send your prompt to:

OpenAI (for ChatGPT tests)
Anthropic (for Claude tests)
Google (for Gemini tests)
xAI (for Grok tests)
Mistral AI (for Mistral tests)
Moonshot AI (for Kimi tests)
DeepSeek (for DeepSeek tests)
Alibaba Cloud (for Qwen tests)
Perplexity (for Perplexity tests)

Each provider has their own data policies:

OpenAI: https://openai.com/policies/privacy-policy
Anthropic: https://www.anthropic.com/legal/privacy
Google: https://policies.google.com/privacy
xAI: https://x.ai/legal/privacy-policy
(Other providers' policies available on their websites)

We have no control over what these providers do with your prompts. Review their privacy policies to understand their data practices.

6.2 Payment Processor (Paddle)

Paddle processes all payments and subscriptions
Paddle collects: payment details, billing address, VAT number (if applicable)
We receive: transaction confirmation, customer ID, subscription status
See Paddle Privacy Policy: https://paddle.com/legal/privacy

6.3 Service Providers

We use third-party services for:

Hosting: Bubble.io (Platform infrastructure)
Email: Brevo (transactional emails, password resets)
Analytics: PostHog (usage tracking, opt-in only)

These providers have access to data necessary to perform their services but cannot use it for other purposes.

6.4 Legal Requirements

We may disclose data if required by:

Court orders or subpoenas
Law enforcement requests
Compliance with legal obligations (tax reporting, etc.)
Protection of our rights or safety
Prevention of fraud or policy violations

7. DATA RETENTION

7.1 Test Results and Prompts

All plans: Test results are stored indefinitely (we don't auto-delete)
You can manually delete individual tests or all tests anytime
Deleted tests are removed from our servers within 30 days

Note: We do NOT automatically delete tests after 3 days or any other period. All your tests remain accessible unless you delete them.

7.2 Account Data

Stored until you delete your account
If you delete your account, all data is removed within 30 days

7.3 API Credits Balance

Free model tests: Tracked until consumed or account deleted
API credits: Balance preserved indefinitely (even if you cancel Pro subscription)

7.4 Payment Records

Required for tax compliance and fraud prevention
Retained for 7 years after final transaction (legal requirement)
Cannot be deleted even if you delete your account

7.5 Aggregate Statistics

Once data is anonymized and aggregated, it's no longer linked to you
Aggregate stats are retained indefinitely for benchmarks

8. DATA SECURITY

8.1 How We Protect Your Data

Encryption in transit: All data transmitted via HTTPS (SSL/TLS)
Encryption at rest: Database encrypted (AES-256 via Bubble.io)
Password hashing: Passwords stored using bcrypt (industry standard)
API key protection: Our API keys stored securely, never exposed in frontend
Access controls: Only authorized personnel can access data
Regular security updates: Platform updated for security patches

8.2 No System Is 100% Secure

Despite our efforts, no internet transmission is completely secure
You use the Platform at your own risk
We're not liable for data breaches caused by third parties or factors beyond our control

8.3 Data Breach Notification

If we discover a data breach affecting your personal data:

We'll notify affected users within 72 hours (GDPR requirement)
We'll report to relevant authorities (Serbian Data Protection Agency)
We'll take steps to mitigate the breach
We'll provide guidance on protecting yourself

9. YOUR PRIVACY RIGHTS (GDPR COMPLIANCE)

Under GDPR (and similar privacy laws), you have the following rights:

9.1 Right to Access

Request a copy of your personal data
We'll provide data in machine-readable format (JSON or CSV)
Free of charge (first request)
Response within 30 days

9.2 Right to Deletion ("Right to be Forgotten")

Delete your account and all associated data
Use "Delete My Account" button in account settings
Or email us at info@testaimodels.com
Data removed within 30 days

What's deleted:

Account information (email, password)
All test results and prompts
Usage data
Preferences

What's NOT deleted:

Payment records (required by law for 7 years)
Anonymized aggregate statistics (no longer linked to you)

9.3 Right to Portability

Export your data in machine-readable format
Currently: Not yet implemented
Future: "Download My Data" button (planned)
Workaround: Contact info@testaimodels.com for manual export

9.4 Right to Rectification

Correct inaccurate or incomplete data
Update your email or name in account settings
Note: You cannot change your email address after registration (security measure)

9.5 Right to Restriction

Limit how we process your data
Contact us to discuss restrictions
Example: Stop using your data for community benchmarks (future opt-out feature)

9.6 Right to Object

Object to data processing for specific purposes
Currently: All tests contribute to benchmarks automatically
Future: Opt-out toggle for benchmarks (planned)
You can always object to marketing emails (unsubscribe link)

9.7 Right to Withdraw Consent

Withdraw consent for optional data processing anytime
Example: Disable analytics cookies in account settings
This doesn't affect lawfulness of past processing

9.8 How to Exercise Your Rights

Email us at info@testaimodels.com with subject "GDPR Request" and specify:

Which right you want to exercise
Your registered email address
What data you want accessed/deleted/corrected

We'll respond within 30 days.

10. DATA PROCESSING AND LEGAL BASIS

10.1 Legal Basis for Processing (GDPR)

We process your data based on:

Contract Performance:

To provide the Platform service you signed up for
To process payments and manage subscriptions
To deliver test results and features you requested

Legitimate Interests:

To improve the Platform based on usage patterns
To prevent fraud and abuse
To generate anonymous community benchmarks
To maintain security and prevent attacks

Consent:

Optional analytics cookies (PostHog) - opt-in required
Optional marketing emails - opt-in required
Future: Opt-in for contributing to community benchmarks

Legal Obligations:

Tax compliance (payment records, VAT)
Responding to legal requests (subpoenas, court orders)
GDPR compliance (data protection)

10.2 International Data Transfers

Our servers are located in the United States (Bubble.io hosting)
If you're in the EU, your data may be transferred outside the EU
We rely on Bubble.io's GDPR-compliant infrastructure (Standard Contractual Clauses)
Paddle (payment processor) complies with GDPR for payment data

10.3 Data Processing Agreement

Bubble.io and Paddle have Data Processing Agreements (DPAs) in place
These ensure GDPR compliance for EU users
You can request copies of DPAs by emailing info@testaimodels.com

11. CHILDREN'S PRIVACY

The Platform is NOT intended for users under 18 years old
We don't knowingly collect data from children
No age verification: We rely on users being honest about their age
If we discover a child's account, we'll delete it immediately
If you're a parent and believe your child created an account, contact us at info@testaimodels.com

12. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you're a California resident, you have additional rights under CCPA:

12.1 Right to Know

What personal data we collect
How we use it
Who we share it with
Covered in Sections 3, 4, and 6 above

12.2 Right to Delete

Request deletion of your personal data
Same as GDPR "Right to Deletion" (Section 9.2)

12.3 Right to Opt-Out of Sale

We don't sell personal data (so nothing to opt-out of)

12.4 Non-Discrimination

We won't discriminate against you for exercising your rights
No price increases, service degradation, or denial of service

To exercise these rights, email info@testaimodels.com with subject "CCPA Request."

13. CHANGES TO THIS PRIVACY POLICY

13.1 How We Update

We may update this Privacy Policy to reflect:
New features or data practices
Legal requirements
User feedback

13.2 Notification of Changes

We'll notify you of significant changes via:
Email to your registered address
Platform notification banner
Updated "Last Updated" date at top of this page

13.3 Effective Date

Changes take effect 30 days after notification
Continued use after changes means you accept the new policy
Material changes require explicit consent

14. COOKIES AND TRACKING

14.1 Essential Cookies (Required)

These cookies are necessary for the Platform to function:

Session cookies: Keep you logged in
Security cookies: Prevent CSRF attacks, secure authentication
Preference cookies: Remember your settings (theme, language)

You cannot disable essential cookies. The Platform won't work without them.

Retention: Session cookies expire when you close browser; preference cookies persist for 1 year.

14.2 Analytics Cookies (Opt-In)

These cookies help us understand how you use the Platform:

Provider: PostHog (privacy-friendly analytics)
Data collected: Pages visited, features used, session duration, errors encountered
No cross-site tracking: We don't track you across other websites
Default: Disabled (you must opt-in)

To enable analytics cookies:

Account Settings, Privacy, Enable "Help improve the Platform with usage analytics"

To disable analytics cookies:

Account Settings, Privacy, Disable "Help improve the Platform with usage analytics"
Or use browser extensions (e.g., uBlock Origin)

14.3 No Advertising Cookies

We don't use advertising cookies
We don't track you for ad targeting
We don't share data with ad networks (Google Ads, Facebook Pixel, etc.)

14.4 Managing Cookies

Browser settings:

Chrome: Settings, Privacy and security, Cookies
Firefox: Settings, Privacy & Security, Cookies and Site Data
Safari: Preferences, Privacy, Cookies and website data

Cookie consent banner:

First-time visitors see a cookie consent banner
You can change your preferences anytime in Account Settings

Third-party cookie tools:

Browser extensions: uBlock Origin, Privacy Badger, Cookie AutoDelete
Do Not Track (DNT): We respect DNT signals for analytics cookies

15. DO NOT TRACK (DNT) SIGNALS

Some browsers send "Do Not Track" signals
We respect DNT signals for analytics cookies only
DNT does not affect essential cookies (required for functionality)

16. THIRD-PARTY LINKS

The Platform may link to third-party websites:
AI provider documentation (OpenAI, Anthropic, Google, etc.)
Paddle payment portal
Support resources
We're not responsible for their privacy practices
Review their privacy policies before sharing data
Example third-party links: Paddle Customer Portal, AI provider terms

17. COMMUNITY BENCHMARKS (OPT-OUT COMING SOON)

17.1 Current Status

All tests automatically contribute to community benchmarks.

We collect and aggregate:

Speed (response times)
Cost (per-model pricing)
Model selections (which models users chose)
Thumbs up/down ratings
Use case category
Reason for selection (quality, price, speed)

We DO NOT share:

Your exact prompt text
Your name or email
Any personally identifiable information

17.2 Future Feature: Opt-Out Toggle

Planned feature (coming soon):

Account Settings, Privacy, Toggle "Share my tests for community benchmarks"
Default: Enabled (opt-out available)
When disabled: Your tests won't contribute to public statistics

17.3 How Shared Data Is Used

Display aggregate statistics on the Platform (e.g., "Claude wins 57% for code generation")
Publish industry insights on our blog
Help other users make informed model choices
Improve Platform recommendations