This policy explains how Digitaldrreamer Hub, a business registered in Nigeria under registration number RC 9225239 and trading as BattleTest ("BattleTest", "we", "us", or "our"), handles personal data when you visit our websites, use our security-review and testing services, or contact us (collectively, the "Service"). BattleTest is the controller of the personal data described here, except where another party, such as our payment provider, acts as an independent controller.
We collect this information from you, members of your organisation, your use of the Service, integrations you connect (such as GitHub), our service providers, and publicly available sources used for security research and vulnerability intelligence.
Depending on the activity and applicable law, we rely on performance of our contract, our legitimate interests in operating and securing the Service, compliance with legal obligations, or your consent. You may withdraw consent at any time without affecting earlier processing.
BattleTest uses automated systems, including third-party AI services, to analyse code, application behaviour, and security evidence. We send only the content reasonably needed for the requested analysis. Depending on the feature, this may include code changes, target responses, screenshots, prompts, and prior findings. AI-generated results may be incomplete or incorrect and should be reviewed by a qualified person before important decisions are made.
We do not use automated processing to make decisions that produce legal or similarly significant effects about individuals. Information about current providers and high-level data handling is available in our Security & Data Handling documentation.
We do not sell personal data or share it for cross-context behavioural advertising. We may disclose information to:
We may publish or share aggregated or de-identified information that cannot reasonably identify you.
BattleTest and its providers may process information in countries other than where you live. Where required, we use recognised transfer mechanisms and contractual, organisational, or technical safeguards. Those countries may have different data-protection laws from your jurisdiction.
We keep information only for as long as reasonably necessary for the purposes described above. Retention depends on the type of record, your plan and settings, security and support needs, legal requirements, and whether the information is needed to resolve a dispute.
You can request deletion at any time. Disconnecting an integration stops future access but does not necessarily delete findings and reports already created; delete those records or your account separately where available.
We use administrative, organisational, and technical safeguards designed to protect information in light of its sensitivity and the risks involved. No service can guarantee absolute security. You are responsible for protecting your credentials, limiting integration permissions, and using test credentials rather than production secrets whenever practical. Report suspected security issues to [email protected]. Where required by law, we will notify affected people and authorities of a personal-data breach.
Subject to applicable law, you may have the right to:
Send requests to [email protected]. We may need to verify your identity and authority. Rights are not absolute, and we may retain or continue processing information where permitted by law. You may also manage profile data, integrations, communications, and account deletion from the Service.
We use first-party cookies and browser storage for authentication, security, navigation state, preferences, and onboarding. We no longer set referral attribution cookies: the referral and affiliate programmes are closed, and the short links that used to plant one now redirect without setting anything. If your browser picked one up before that change, it expires on its own within 60 days of the day it was set. We also use first-party product analytics to understand page and feature usage. We do not use third-party advertising cookies or sell analytics data.
Operational messages about your account, billing, security, and requested services are necessary to provide the Service. You can unsubscribe from marketing emails using the link in each message or your account settings. We may still send non-marketing messages after you opt out of marketing.
The Service is intended for business users aged 18 or older. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data to the Service.
We may update this policy to reflect changes in the Service, our practices, or applicable law. We will post the revised policy and update its effective date. Where required by law or where changes materially affect your rights, we will provide additional notice.
Data controller: Digitaldrreamer Hub (RC 9225239), trading as BattleTest, Nigeria.
Privacy questions and rights requests: [email protected]
Legal notices: [email protected]
General support: [email protected]