Terms of Service

Access is invitation-based during private preview and is offered for business use only. Paid service is governed by these terms and the billing terms of the selected plan.

The service

QAVetted helps business customers assess QA engineers, SDETs, and automation engineers. Clients can create assessments, invite candidates, combine practical tasks with multiple-choice questions, and review AI evaluations and scores, examples from submitted work, summaries, activity records, integrity results, and hiring recommendations. The client remains responsible for every hiring decision.

Private-preview access and accounts

Access is currently invitation-based. We may approve, limit, postpone, or decline a private-preview request. An approved organization is responsible for its authorized users, the confidentiality of credentials, and activity under its account. Suspected unauthorized access must be reported promptly to support@qavetted.com. Available access is determined by the organization’s trial or subscription plan.

Trial, pricing, and payment

When offered, a new approved account may receive a seven-day trial with ten candidate attempts and five new assessments, where a copy made with Reuse counts as one of the five, without a payment card or overage charges. Online assessments and Live Interviews share the attempt allowance. Invitations are unlimited while the account has access; sending or opening an invitation does not consume an attempt.

Before processing candidate data during a trial, the first organization administrator must accept these Terms, including the Data Processing Agreement, on the organization's behalf during account setup.

Every paid plan, including an annual plan, has the same fair-use ceiling of 300 new assessments per month. Monthly windows are anchored to the original start of the current subscription and do not restart when you change plans. A new assessment counts when its creation completes; refused creation consumes none and replaying a completed request adds no creation, and deleting a completed assessment returns no capacity. On a paid plan, reusing an assessment for more candidates or interviews consumes no new creation. Unused capacity does not carry over and is neither sold as extra usage nor credited on a plan change. At the ceiling, further creations wait until the next monthly window; contact support@qavetted.com if you need more.

One attempt is consumed when a candidate first starts an online assessment or a host admits them to a Live Interview. A started attempt remains consumed if the candidate leaves, times out, evaluation fails or their data is deleted. Resuming, submitting, evaluating or retrying evaluation of that same attempt does not consume another attempt. Whether an attempt uses trial or paid allowance is determined when it starts, and work already started can finish if account access later expires.

The Pricing page and subscription checkout show the plan, currency, price, billing interval, included usage and extra-attempt rate before payment. By accepting these terms at checkout, you authorize charges for attempts beyond the paid plan’s included allowance at the disclosed rate, without a separate confirmation for each invitation or start. Stripe processes payments and subscription billing, including automatic collection and saved-card retries; QAVetted does not store complete card numbers.

Extra attempts are charged in batches of the size shown on Pricing, counted across the organization, including earlier billing periods and subscriptions. When a batch is full, further extra attempts wait until it is paid; a remainder smaller than a batch is collected at the monthly boundary, including for annual plans. While any invoice is unpaid, no new candidate can start; candidates who already started can finish, and invitations can still be sent while the account has access. A failed payment removes that access until it is resolved, but does not interrupt work already started.

An upgrade starts a new full billing term on the day of the upgrade and is charged at once. The value of included attempts you paid for and have not used is deducted from that charge. Unused time is not credited and nothing is refunded in cash. Extra attempts already used must be paid before an upgrade is accepted.

Cancellation Policy

A client may cancel a QAVetted subscription at any time by emailing support@qavetted.com. Email requests must identify the client organization and be sent by an authorized account contact.

Cancellation prevents the next renewal and takes effect at the end of the current paid billing period. The client retains paid-plan access until that period ends, subject to the subscription remaining paid and current. Cancellation does not reverse usage already incurred or charges already earned during the current period.

QAVetted processes an authorized email cancellation request within two Indian business days and confirms when cancellation has been scheduled. A request received before renewal counts as timely even if processing finishes later. If a renewal is charged after a timely request, that charge is treated as an incorrect charge under the Refund Policy below.

Refund Policy

Amounts already paid are generally non-refundable after service access has been provided. A refund or billing correction may be approved when:

• the same charge was processed more than once;
• the charged amount or billing interval differs from the selected plan or agreed billing terms;
• QAVetted did not provide the purchased service access;
• a valid cancellation request was received before renewal but the renewal was still charged;
• a separately agreed customer order, if any, provides another remedy; or
• applicable law requires a refund.

If the client loses service through a platform failure, such as a candidate's attempt that could not be completed or evaluated, QAVetted reviews the case and may offer a credit. To ask for it, email support@qavetted.com with the client organization and what was affected; this request does not depend on the seven-day refund window below. The rule that an upgrade credits no unused time and refunds nothing in cash does not exclude this remedy.

To request a refund, email support@qavetted.com within seven calendar days of the charge. Include the client organization, invoice or payment reference, charge date, amount, and reason. Do not email card numbers, bank credentials, passwords, or identity documents.

QAVetted acknowledges the request within two Indian business days and identifies any information needed to review it. QAVetted communicates the decision within ten Indian business days after receiving the request and the information reasonably required to evaluate it. An approved refund is initiated to the original payment method within seven Indian business days after approval. The customer's bank or card issuer controls the additional time before the credit appears.

This policy does not limit any refund or other remedy required by applicable law.

Service Access and Delivery

QAVetted access is provided online after the organization is approved. Paid-plan access becomes available when the subscription is active and payment is confirmed. The selected plan and these published terms govern the service.

If paid access is unavailable after subscription payment is confirmed, contact support@qavetted.com. Failure to provide purchased access is eligible for correction or refund as described above.

Client responsibilities

The client is responsible for:

• the roles, assessments, and candidates it chooses;
• having a lawful basis to invite, assess, and monitor candidates and giving any notices its own obligations require;
• reviewing assessment evidence and making every shortlist, rejection, and hiring decision;
• keeping challenge content and candidate access links confidential; and
• using the service in accordance with employment, equality, data-protection, and other laws applicable to its hiring process.

Candidate data and data protection

For candidate assessment data, the hiring company decides why and how the data is used and acts as controller; QAVetted processes that data to deliver the requested assessment service. For QAVetted's own prospect, account, support, and billing data, the operator acts as controller. The Privacy Notice describes these roles, providers, retention, rights, and security practices.

The Data Processing Agreement below forms part of these Terms and covers client-controlled personal data during both trials and paid use.

Acceptable use

A user must not use QAVetted unlawfully; probe, attack, disrupt, or bypass the platform; scrape or bulk-extract content; publish or resell challenge material; misrepresent an assessment result; upload malware or another person's confidential material without authority; or use QAVetted output as the sole automatic basis for a hiring or rejection decision.

Intellectual property

QAVetted's software, assessment framework, challenge catalog, and brand remain the property of the operator or its licensors. Client assessment configurations and candidate submissions remain the property of their respective owners, subject to the limited rights required to host, process, evaluate, secure, and support the service. Candidate or client personal data is not used to train general-purpose AI models.

Service standard and disclaimers

We aim to provide the service with reasonable skill and care. Assessment evidence supports professional judgment; it does not guarantee that a candidate will perform successfully in a role. AI evaluations, scores, summaries and integrity results may be incomplete or mistaken and require human review. Private-preview access may change, and material changes affecting a client are communicated where reasonably practicable.

Liability

Nothing in these terms excludes liability that cannot lawfully be excluded. Subject to that limit, QAVetted is not responsible for indirect or consequential loss, lost profit, or a client's hiring outcome. For a paid service, total liability arising from the service in any twelve-month period is limited to the amount the client paid for that service during the same period, unless a separately agreed customer order states otherwise.

Suspension, termination, and account closure

A client may request account closure by emailing support@qavetted.com. We verify the request before deleting client-controlled personal data under the Data Processing Agreement. The Privacy Notice describes retention of QAVetted's own account and billing records. We may suspend or terminate access for a material breach, security risk, unlawful use, or non-payment, with notice where reasonably practicable.

Changes

We may update these terms as the private preview and service evolve. The effective date changes when the terms change. Material changes affecting an existing client are communicated before they take effect where reasonably practicable.

Governing law

These terms are governed by the laws of India. Courts with jurisdiction over QAVetted's registered place of business in India have jurisdiction, unless a written client order states another lawful forum.

Contact

QAVetted's registered business address is E-703, Palash 2E, Wakad, Pune, Maharashtra 411057, India. Its business telephone is +91 99228 72272. General, contractual, and billing questions: support@qavetted.com. Privacy questions: data-protection@qavetted.com.

Data Processing Agreement

This Data Processing Agreement (DPA) is part of the Terms of Service between the client organization and QAVetted, the Indian sole proprietorship identified above. It sets out the obligations that apply when QAVetted processes personal data on the client's behalf, including during a free trial. It takes effect as part of a validly accepted customer agreement; publication alone does not establish a client's acceptance.

For this processing, the client is the controller and QAVetted is the processor. The client determines the assessment and hiring purposes, establishes a lawful basis, supplies required notices, and issues lawful instructions. QAVetted's processing for its own prospect, account-administration and billing purposes is described in the Privacy Notice and is outside this DPA. Client-controlled data processed to provide support remains covered.

Processing covered

• People: candidates invited by the client and authorized users whose information appears in the client's assessment and interview records.
• Information: identity and contact details; invitations, interview schedules and meeting details; answers, submissions, workspace files and test output; scores, evaluation evidence and narratives; reviewer notes and hiring decisions; candidate AI assistant conversations and usage; bounded browser-activity observations; and records of assessment and interview sessions and of email delivery.
• Activities and purpose: receiving, organizing, storing, retrieving and presenting information; delivering invitations and workspaces; running online assessments and Live Interviews; marking multiple-choice answers against a fixed answer key; using AI to evaluate submitted practical work against the task's criteria, review activity records for possible integrity concerns, write summaries and help prepare a hiring recommendation; running the AI assistant when the client offers it; and providing authorized support and deletion of data.
• Duration: the service relationship and the period needed to complete deletion under this DPA, subject to retention required by applicable law. The Privacy Notice describes the category-specific retention schedule.

The service is not designed to collect special-category or criminal-offence data. The client must avoid submitting unnecessary sensitive information, including in free-text content. QAVetted does not collect camera or microphone recordings, screen recordings, biometric data or keystroke content through assessment monitoring. Clipboard text is used only in browser memory for internal-copy matching and is not stored in monitoring records.

Instructions and confidentiality

QAVetted will process client-controlled personal data only on documented client instructions, including instructions about transfers. Processing required by law outside those instructions is permitted only to the extent allowed by applicable data-protection law. Where legally permitted, QAVetted will tell the client about that requirement before processing. The Terms, assessment settings and authorized service requests document the client's instructions; additional instructions can be sent to data-protection@qavetted.com. QAVetted will immediately inform the client if an instruction appears to infringe applicable data-protection law and suspend the affected instruction while it is resolved.

QAVetted will limit access to people who need it to provide the service and are bound by confidentiality obligations. It will not sell client-controlled personal data, use it for advertising, or use it to train general-purpose AI models.

Security

QAVetted will maintain technical and organizational measures appropriate to the processing risk. These include encrypted connections and storage, organization-scoped access, role-based permissions, protected credentials, restricted submission storage, and exclusion of personal content and secrets from operational logs. QAVetted will assess these measures regularly and maintain procedures for incident response and restoring the service after an incident. Changes must not materially reduce the protection of client-controlled data.

Subprocessors

Under an accepted DPA, the client gives general authorization for QAVetted to use subprocessors to deliver the service. The current service providers and their purposes are identified in the Privacy Notice. AWS supports hosting, file storage, transactional email and operational logs; Supabase supports the database and sign-in; Cloudflare supports delivery and security; Anthropic supports AI processing; Sentry receives scrubbed operational information; Google Workspace supports business email. A provider acts as a subprocessor only to the extent it processes client-controlled personal data on QAVetted's behalf. A recipient listed for QAVetted's own billing or business purposes is not automatically a subprocessor under this DPA.

QAVetted will impose equivalent applicable data-protection duties on subprocessors by contract and remains responsible to the client for their performance. Before adding or replacing a subprocessor, QAVetted will notify the client's account contact with sufficient time to raise a reasoned data-protection objection before the change. QAVetted will address the objection before the affected processing begins; if no suitable resolution is possible, the affected processing will not proceed and either party may end the affected service.

Assistance and personal-data breaches

QAVetted will forward requests about client-controlled data to the client without undue delay and assist with access, correction, erasure, restriction and other applicable rights. It will not independently answer such a request except on the client's instructions or where law requires it.

Taking account of the processing and information available, QAVetted will assist the client with security obligations, impact assessments and required consultation with regulators. On becoming aware of a personal-data breach affecting client-controlled data, QAVetted will notify the client without undue delay, provide available details about the nature, affected people and records, likely consequences and response measures, and supply further information as it becomes available. Privacy and incident contact: data-protection@qavetted.com.

Deletion

When the client closes its account or otherwise ends the processing relationship, QAVetted will delete client-controlled personal data and every copy in its own systems. Legally required retention is permitted only to the extent allowed by applicable data-protection law. Canceling subscription renewal or reaching the end of a trial does not itself close the account or instruct deletion. The client may also issue lawful earlier deletion instructions. QAVetted will verify the requester's authority and confirm completion or explain any legally required retention. Retained data remains protected and is used only for the permitted retention purpose.

QAVetted keeps no disaster-recovery backups of its databases or stored submissions. Providers keep some copies under their own terms: an address the email provider stops sending to after a bounce or complaint stays on that list until a granted erasure removes it, a delivered email cannot be recalled, and error reports, provider logs and the AI provider's copies follow those providers' retention terms. A confirmation of deletion states what was deleted and never claims that a provider copy was deleted.

Compliance information and audits

QAVetted will provide information necessary to demonstrate compliance with this DPA and allow and contribute to audits, including inspections, by the client or its authorized independent auditor. The parties will coordinate scope, timing, confidentiality and secure access to protect other clients' information without preventing an audit required by applicable law or a competent regulator.

International transfers

The operator is in India, primary application hosting is in the United Kingdom, and providers may process information elsewhere as described in the Privacy Notice. QAVetted will not make a restricted transfer of client-controlled data unless the applicable legal requirements are met, including an appropriate transfer mechanism and any required assessment or additional safeguards. Client instructions or general subprocessor authorization do not waive these requirements.

This DPA is not itself the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or the UK Addendum. Where one of those instruments is relied on, its applicable provisions and completed annexes must form a binding part of the arrangement before the relevant transfer. Nothing in this page represents an uncompleted transfer instrument as already in force.

Priority and continuing obligations

For client-controlled personal data, this DPA prevails over conflicting service terms. Applicable mandatory transfer clauses prevail over this DPA, including their liability, governing-law and jurisdiction provisions. Obligations concerning retained data, confidentiality and deletion continue for as long as QAVetted holds the client's personal data.