Privacy Policy
How Robonito handles your information, connected AI clients, testing data, and privacy choices.
Last updated:
1. Who we are
Robonito Pvt. Ltd., an Indian company trading as Robonito, operates our website, test-automation platform, and Model Context Protocol (MCP) server. This policy explains how we handle personal information when you use these services or contact us.
Robonito Pvt. Ltd.4/583 Firdaus Complex, Hamdard Nagar A, Aligarh, Uttar Pradesh 202002, India
Email: info@robonito.com
This is the same company identified in our Terms & Conditions. The terms are governed by Indian law; this policy also respects any data-protection rights that apply where you live.
2. Information we collect
- Account and contact information: your name, email address, and any phone number, address, location, requirements, or comments you provide.
- Testing information: workspace and test names, test definitions, run results, and test-writing conversations. This content can describe your application and its behaviour.
- Application content: page content and screenshots processed when you run tests against an application.
- Connection information: access tokens, refresh tokens, client registrations, and MCP session information used to authenticate and manage connected clients.
- Usage information: information about your visits and interactions with our services, including information collected through cookies and similar technologies.
Only submit information you are authorised to share. Avoid including unnecessary personal information or secrets in tests, screenshots, and tool requests.
3. How we use information
We use information to provide and maintain Robonito, manage accounts and client connections, create and run tests, return results, fulfil our agreements, respond to support requests, and protect the service against misuse.
We also use usage information to understand and improve our services and marketing. We may send service notices and, where permitted, product news or offers. You can opt out of marketing communications.
Where applicable law requires a legal basis, we rely on performance of our agreement with you, legal obligations, legitimate interests such as service security and improvement, or consent where required. You may withdraw consent without affecting processing that already took place.
4. Connected AI clients and MCP
When you connect an AI client to Robonito’s MCP server, the client can call Robonito tools using the access you authorise. Robonito receives only the information the client sends to those tools, together with the connection information needed to process the requests. We do not receive or access your other AI conversations.
Depending on the tool you use and your authorised access, Robonito may return your name, email address, workspace and test names, run results, and test-writing conversations. These responses may contain details about your application.
The connected client’s AI provider then processes the returned information under your own agreement with that provider, including its terms, privacy policy, and data settings. Review those before connecting. Robonito’s retention periods do not control copies held by that provider.
5. AI providers used for test runs
Test runs use the AI provider you configure in Robonito. That provider receives page content and screenshots from the application under test so it can support test execution. These can contain personal information or confidential application content.
The provider processes this information under the terms, privacy policy, and settings applicable to your relationship with it. Choose a provider and configure your test environment accordingly.
6. Model training
Robonito uses MCP data to train models. Contact info@robonito.com for information about this use and to ask about your available choices.
Connected AI clients and the AI providers you configure have their own model-training policies. Their use of data depends on your agreement and settings with them.
8. How long we keep information
| Information | Period |
|---|---|
| Access tokens | 1 hour |
| Refresh tokens | 30 days |
| Client registrations | 180 days |
| Run records | 7 days |
| MCP sessions | 24 hours unused |
| Saved tests and results | Until you delete them |
Token lifetimes and session expiry govern access. Revoking access does not itself delete saved tests or results. Run records have the separate period shown above.
We retain other personal information for the purposes described in this policy, including account support, legal obligations, dispute resolution, and enforcement of our agreements. Any information that must be retained by law is kept for that legal purpose. Third-party providers apply their own retention policies.
9. Your controls and deletion
You can delete saved tests and results using the deletion controls in Robonito. To request deletion of other personal data or your account, contact info@robonito.com from the email address associated with your account.
You can also contact that address to request revocation of a connected client’s access. Identify the client you want disconnected; do not send passwords or access tokens. Disconnect it in the AI client as well to stop further requests.
We may need to verify your identity before acting on a request. Requested data and account deletion, including deletion from backups, is completed within 30 days, except for records we are legally required to retain.
Deleting information in Robonito does not delete copies already returned to an AI client or provider. Use that provider’s controls or contact it directly for those copies.
10. Your data-protection rights
Depending on the law that applies to you, you may have rights to access or obtain a copy of your personal information, correct it, request deletion, restrict or object to processing, obtain a portable copy, or withdraw consent. You may also have the right to complain to the relevant data-protection authority.
Send rights requests to info@robonito.com. We handle them according to applicable law and may verify your identity to protect your information.
12. Security and international transfers
We take reasonable measures to protect personal information. No internet transmission or electronic storage system is completely secure.
Your information may be processed in India and other countries where we or our providers operate. Those countries may have different data-protection laws. We use safeguards required by applicable law for international transfers.
Third-party websites and services have their own privacy policies. Review them when you follow a link or enable an integration.
13. Children’s privacy
Robonito is intended for users aged 18 or older, as stated in our terms. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and delete it.
14. Changes and contact
We may update this policy by posting a revised version and changing the date above. We provide any additional notice required by applicable law.
For privacy questions, rights requests, or complaints, contact:
Robonito Pvt. Ltd.4/583 Firdaus Complex, Hamdard Nagar A, Aligarh, Uttar Pradesh 202002, India
Email: info@robonito.com