Privacy Policy

This Privacy Policy explains how CoherenIQ collects, uses, and protects information in connection with Chexa, our AI-assisted web testing and automation platform.

Information we collect

• Account/organization: name, email, phone, password (hashed, never stored in plain text), organization name, and role.
• Test content: test cases, steps, recordings, screenshots, and page-element data you create while testing your own applications.
• Agent/machine data: if you install Chexa's agent on your own computer or a cloud VM, its name, browser capabilities, and heartbeat status; for a cloud connection, the SSH host/username you provide (your credential itself is encrypted at rest and never returned by any API response).
• Billing: seat counts and transaction records processed via our payment processor — we do not store your full card details ourselves.
• Usage/device: IP address, browser type, pages visited, and timestamps, for security and diagnostics.

How we use your information

To create and operate your account and provide the Chexa service; to run the test automation you configure; to process AI-assisted requests you explicitly trigger; to process payments; to send service communications (billing, security alerts, product updates); and to maintain security, prevent abuse, and comply with legal obligations.

Consent

By using Chexa, you consent to this Policy. Where you enable AI-assisted features, you separately consent to the relevant content being sent to our AI provider for that specific request — you control this via your organization's AI toggle and per-feature model settings at any time.

Sharing of information

We share information only as needed to operate Chexa, with:

• Our AI provider (Anthropic) — only the content of a request you or your organization explicitly triggers via an AI-assisted feature (e.g. a test description, page structure, or requirement text), and only while your organization's AI features are enabled.
• Our payment processor (Razorpay) — to process subscription and one-time payments.
• Our infrastructure/hosting provider — to run the Chexa platform itself.
• Law enforcement or regulators, only where required by law.

We do not sell your data to third parties.

Data storage and security

Data is stored on infrastructure we operate, with encryption in transit (HTTPS) and, for sensitive credentials such as cloud-connection SSH secrets, encryption at rest (AES-256-GCM). Access to production data is limited to personnel who need it to operate the service.

Data retention

We retain your information for as long as your account is active, and thereafter for as long as necessary to comply with legal, accounting, or tax obligations, or to resolve disputes. You may request deletion of your organization's data by contacting support@cohereniq.com, subject to those obligations.

Your rights

You may access, correct, or request erasure of your personal information, and withdraw consent to AI-assisted processing at any time (by disabling AI features for your organization). Exercise these rights via support@cohereniq.com.

Cookies and local storage

Chexa uses browser local storage and similar technologies to keep you signed in and remember your preferences (such as your last-used project or dark/light theme). We do not use third-party advertising trackers.

Children's privacy

Chexa is a business tool not directed at children, and we do not knowingly collect information from anyone under 18.

Third-party links

Chexa may display or interact with third-party applications (the applications you choose to test). We are not responsible for the privacy practices of those third-party applications.

Changes to this policy

We may update this Policy from time to time; the "Effective" date above reflects the latest revision. We review this page at least once a year to keep it current with how Chexa actually operates.

Grievance officer

For privacy questions or grievances, contact our grievance officer at support@cohereniq.com. We aim to acknowledge grievances within 2 business days.

Governing law

This Policy is governed by the laws of India. Any disputes are subject to the exclusive jurisdiction of the courts at Bengaluru, Karnataka, India.