TestSudo Privacy Policy

Effective Date: April 17, 2026 Last Updated: April 17, 2026

This Privacy Policy explains how Doc Watson Technologies, Inc., a West Virginia corporation doing business as TestSudo ("TestSudo," "Company," "we," "us," or "our"), collects, uses, discloses, stores, and otherwise processes information in connection with the TestSudo website, platform, services, software, agents, integrations, dashboards, demos, trials, and related offerings (collectively, the "Services").

This Privacy Policy applies to information we collect from users, customers, prospective customers, trial users, website visitors, administrators, and other individuals who interact with the Services.

By accessing or using the Services, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to information we collect:

1. directly from you;
2. from your use of the Services;
3. from systems, accounts, devices, and environments you connect to the Services;
4. from third-party integrations and providers you authorize us to access;
5. from communications between you and TestSudo; and
6. from trial, onboarding, demo, support, and account administration activity.

This Privacy Policy does not apply to third-party websites, services, or platforms that may link to or interoperate with the Services. Those third parties maintain their own terms and privacy practices, and we are not responsible for them.

2. Information We Collect

We may collect the following categories of information:

A. Account and Contact Information

• names
• business names
• usernames
• email addresses
• login credentials or authentication-related information
• account identifiers
• billing and account-administration details
• support contact details

B. Onboarding and Access Information

• tenant, domain, organization, and workspace information
• identity-provider information
• Microsoft Graph or similar OAuth-granted access information
• access tokens, permission scopes, refresh-state information, and connected-service metadata
• configuration details relating to connected environments

C. Security and Operational Data

• endpoint telemetry
• security telemetry
• security analytics
• alerts
• logs
• audit records
• configuration states
• detections
• device or user activity relevant to security review and platform operation

D. Content Submitted or Made Available Through the Services

• uploaded files
• messages
• suspicious emails
• message content
• attachments
• release-review materials
• notes, inputs, and administrative actions
• any other content you or your authorized users upload, transmit, authorize, or otherwise make available through the Services

E. Usage and Technical Information

• IP addresses
• browser type
• device type
• operating system
• session activity
• clickstream or feature-usage information
• timestamps
• diagnostic information
• crash information
• performance information
• API activity

F. Communications Information

• emails and messages sent to or from TestSudo
• support tickets
• support chat records
• legal or billing correspondence
• feedback, survey responses, or other communications

3. How We Collect Information

We collect information:

1. when you create an account or register for a demo, trial, or paid service;
2. when you connect systems, tenants, endpoints, or third-party services to the Services;
3. when you upload files, messages, attachments, logs, telemetry, or other data;
4. when you or your authorized users use platform features;
5. when you contact us for support, legal, or billing matters;
6. automatically through operation of the Services; and
7. from third-party systems and providers you authorize us to access.

4. How We Use Information

We may use information we collect to:

1. provide, operate, maintain, secure, support, and improve the Services;
2. authenticate users and administer accounts;
3. connect to and interact with customer-authorized systems and data sources;
4. review security-related information and generate detections, insights, classifications, recommendations, workflows, reports, and customer-facing outputs;
5. review suspicious messages, attachments, telemetry, logs, and other materials in order to provide the Services requested or enabled by the customer;
6. perform read-only actions, customer-approved actions, or policy-enabled actions configured by the customer;
7. monitor performance, reliability, abuse, misuse, fraud, and security;
8. respond to support requests, billing matters, legal matters, and operational issues;
9. troubleshoot technical issues and enforce our Terms of Service;
10. comply with law, lawful process, enforceable requests, and our internal compliance needs;
11. protect the Services, our customers, and third parties from fraud, abuse, or security threats; and
12. create aggregated, de-identified, or anonymized analyses, metrics, and service-improvement insights, provided that such information does not identify a specific customer or individual.

5. What We Do Not Do

We do not sell customer-identifiable data to advertisers.

We do not share customer-identifiable data with advertisers for advertising purposes.

We do not use customer-identifiable data to support unrelated third-party advertising profiles.

6. Legal Bases and Customer Responsibility

You represent and warrant that you have all rights, permissions, authorizations, notices, and lawful bases necessary to provide information to TestSudo, to connect third-party services and environments, and to authorize our access and processing as contemplated by the Services and our Terms of Service.

You are responsible for determining whether your use of the Services, and any data you provide to us, complies with applicable privacy, employment, communications, surveillance, consumer-protection, sector-specific, and other laws.

7. Disclosure of Information

We may disclose information:

1. to our employees, contractors, service providers, subprocessors, and professional advisors who need access to perform services for us or on our behalf;
2. to third-party providers and infrastructure operators that support hosting, storage, analytics, communications, security, authentication, and related business operations;
3. to the customer organization and its authorized administrators, where the information relates to that customer's account, environment, users, or activity;
4. if required by law, subpoena, court order, lawful governmental demand, or other legal process;
5. when we reasonably believe disclosure is necessary to investigate, prevent, or respond to fraud, abuse, misuse, security incidents, unlawful conduct, or threats to the Services, our business, our customers, or third parties;
6. in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other corporate transaction; and
7. with your consent or at your direction.

8. Third-Party Services and Integrations

The Services may rely on or interoperate with third-party platforms, providers, APIs, identity services, cloud environments, and security systems, including Microsoft, Microsoft Graph, Azure, Huntress, and other external services authorized by customers.

Information made available through such services is also subject to those third parties' terms, permissions, and privacy practices. We are not responsible for the privacy or security practices of third-party services.

9. Cookies and Similar Technologies

We may use cookies, session tokens, local storage, pixels, logs, and similar technologies to operate the Services, maintain sessions, authenticate users, remember preferences, improve performance, measure usage, support security, and troubleshoot issues.

You may be able to control some cookies or browser-storage settings through your browser or device settings, but disabling them may affect functionality of the Services.

10. Data Retention

Unless otherwise expressly agreed in writing, TestSudo does not undertake any obligation to store, preserve, maintain, archive, or make available any information for any minimum duration.

We retain information for as long as we reasonably determine necessary for business, operational, security, contractual, legal, or compliance purposes, after which we may delete, de-identify, aggregate, or otherwise dispose of it.

Customers are solely responsible for their own systems of record, backups, retention schedules, legal holds, archives, and evidentiary preservation.

11. Data Security

We use commercially reasonable administrative, technical, and organizational measures designed to help protect information against unauthorized access, misuse, alteration, disclosure, or destruction. However, no method of transmission, storage, or security is guaranteed, and we cannot guarantee absolute security.

12. International and Jurisdictional Limits

The Services are intended only for persons who are at least 18 years old and who are United States citizens or lawful permanent residents of the United States. The Services are not intended for minors.

The Services are not intended for public-sector or government use unless expressly agreed by us in a separate written agreement.

13. Children's Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we may delete such information and terminate the associated account.

14. Your Choices

Depending on the nature of your relationship with us, you may be able to:

1. update certain account information through the Services;
2. change connected-service permissions through the applicable third-party provider or customer administrator;
3. opt out of certain optional beta or preview features;
4. request support relating to account access issues; or
5. discontinue use of the Services.

Because the Services are primarily business-oriented and often administered by customer organizations, many access, correction, deletion, and permission decisions may need to be directed through your organization or its authorized administrator.

15. Customer-Administrator Access

If you use the Services through an employer, customer organization, managed service provider, or other organization account, the administrators of that account may have access to information associated with your use of the Services, including account information, connected data, activity, outputs, and administrative records.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make a material change, we may provide notice through the Services or by other in-platform notice. The updated Privacy Policy becomes effective on the date stated in the updated version.

17. Contact Us

If you have questions about this Privacy Policy, you may contact us at:

Legal: legal@docwatson.tech Support: support@testsudo.ai Billing: billing@testsudo.ai

By using the Services, you acknowledge that you have read and understood this Privacy Policy.