Privacy Policy
Last updated: July 2026
Who we are
LitmusLab is an AI quality testing platform that helps development teams define, verify, and monitor the quality of AI-powered applications. You can reach us at hello@litmus-lab.com.
What we collect
Waitlist and contact forms
When you request early access or contact us, we collect your name, email address, company name (if provided), and the message you send. We use this only to respond to you and to understand interest in LitmusLab.
Accounts
When you create an account, we collect your name and email address. Your password is hashed using bcrypt — we never store it in plain text.
Your test data
LitmusLab stores the test configurations, API endpoints, test cases, scenarios, and expected behaviors you define, along with the API responses captured during test runs. This data is yours — we use it only to provide the service.
Evaluation logs
Diagnostic logs generated during AI evaluations are stored temporarily and automatically deleted after 7 days.
Operational logs
We retain basic server logs (request timestamps, error traces) for operational purposes. These do not contain your personal data beyond IP addresses.
What we don't collect
We do not use advertising networks or sell, rent, or share your personal data with third parties for marketing purposes.
How we use your data
- To operate and improve the LitmusLab service
- To send transactional emails (account setup, password reset)
- To respond to contact and inquiry form submissions
- To notify you of service updates or changes that affect you
We do not use your data to train AI models or share it with LLM providers beyond what is required to run your evaluations.
Third-party services
Amazon Web Services
We use AWS for hosting and operation of the LitmusLab service. Data is stored in the US East region. AWS is subject to their own privacy policy.
LLM providers
When running AI evaluations, your API request and response data is sent to the LLM provider configured for your account (such as OpenAI or Google Gemini). If you use the hosted plan, LitmusLab sends this data to our configured provider on your behalf. Each provider is subject to their own data processing terms.
FullStory
We use FullStory for session analytics and diagnostic purposes. FullStory may collect information about how you interact with LitmusLab, including page views and clicks, using cookies and similar technologies. You can learn more at fullstory.com/legal/privacy-policy.
Data retention
- Waitlist and contact submissions: retained until you request deletion
- Account data: retained until you delete your account
- Evaluation logs: automatically deleted after 30 days (Enterprise plans may configure custom retention)
- Test configurations and results: retained as long as your account is active
Your rights
You can request access to, correction of, or deletion of your personal data at any time by emailing hello@litmus-lab.com. We will respond within 30 days.
Security
We encrypt data in transit and at rest, and follow standard security practices to protect your information.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top reflects the most recent revision. For material changes, we will notify registered users by email.
Contact
Questions about this policy? Email us at hello@litmus-lab.com.