Privacy Policy

fore ai AG | www.foreai.co Last Updated: 4 May 2026

1. Introduction

fore ai AG (“fore ai”, “we”, “us”, or “our”) is committed to protecting the privacy and security of the personal data we process. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you when you visit our website at www.foreai.co, use our autonomous QA testing platform, or otherwise interact with our services (collectively, the “Services”).

This policy applies to all visitors, customers, and users of our Services. Please read it carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are

fore ai AG is the data controller responsible for your personal data. Our contact details are:

fore ai AG Website: www.foreai.co Email: security@foreai.co

If you have any questions about this Privacy Policy or our data practices, please contact us at the address above.

3. Information We Collect

fore ai collects only data necessary for service delivery (data minimisation). This includes:

3.1 Information You Provide Directly

• Account registration data: name, email address and company name when you create an account or request a demo.
• Communications: messages, feedback, support requests, or other communications you send to us.

3.2 Information Collected Automatically

• Usage data: pages visited, features used, test configurations, test results, and interaction logs within the platform.
• Device and technical data: browser type and version, operating system, screen resolution, and device identifiers.
• Log data: access timestamps, error logs, and crash reports.
• Cookies and similar tracking technologies (see Section 7 below).

3.3 Information From Third Parties

• Single Sign-On (SSO) providers: if you authenticate via Google, GitHub, or another identity provider, we receive basic profile information (name, email) with your consent.
• Integration partners: when you connect fore ai with third-party tools (CI/CD pipelines, issue trackers, etc.), we may receive metadata necessary to provide the integration.

3.4 Customer Test Data

When you use fore ai to run automated tests, the platform may process content from the applications under test (“Test Data”). Test Data is processed solely on your behalf as a data processor, in accordance with our Data Processing Agreement (DPA). We do not use Test Data for our own purposes.

4. How We Use Your Information

We use the information we collect for the following purposes, relying on the legal bases indicated:

4.1 Providing and Improving the Services (Contractual Necessity / Legitimate Interest)

• Creating and managing your account.
• Delivering, operating, and maintaining the platform and its features.
• Diagnosing technical problems and ensuring service reliability.
• Developing new features, products, and capabilities.

4.2 Security and Compliance (Legal Obligation / Legitimate Interest)

• Detecting, investigating, and preventing fraud, abuse, and security incidents.
• Complying with applicable laws, regulations, and enforceable legal requests.
• Enforcing our Terms of Service and other agreements.

4.3 Analytics (Legitimate Interest)

• Understanding how users interact with the Services to improve user experience.

Customer Data is logically isolated using a unique Organisation ID assigned to each customer. Fore ai’s API layer enforces strict data scoping to ensure no cross-customer data access is possible in the multi-tenant environment. Also Customer data is never used to train fore ai’s global AI models.

5. How We Share Your Information

We do not sell your personal data. We share information only as described below:

5.1 Service Providers

We engage trusted third-party vendors who process data on our behalf, including cloud infrastructure providers, payment processors, email delivery services, and analytics tools. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Business Transfers

If fore ai is involved in a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected users via email or prominent notice on our website before data is transferred and becomes subject to a different privacy policy.

5.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid legal process (such as a court order or government request), or where we believe disclosure is necessary to protect the rights, property, or safety of fore ai, our users, or the public.

6. Data Storage & Residency

fore ai AG is headquartered in Switzerland. All personal data is stored exclusively within the EEA and Switzerland using Microsoft Azure infrastructure. No personal data is transferred outside the EEA or Switzerland.

You may request a copy of the relevant safeguards by contacting us at security@foreai.co.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (such as web beacons and pixels) to operate our website, remember your preferences, and collect analytical data. The types of cookies we use include:

Strictly Necessary Cookies Essential for the website to function and cannot be switched off. They are usually set in response to actions you take such as logging in or filling in forms.

Analytical / Performance Cookies Allow us to count visits and traffic sources so we can measure and improve the performance of our website. All information collected is aggregated and anonymous.

Functional Cookies Enable enhanced functionality and personalisation, such as remembering your settings and preferences.

You can manage or withdraw your cookie consent at any time via our Cookie Preference Centre on the website, or by adjusting your browser settings. Blocking certain cookies may affect the functionality of our Services.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Customers and users have the right to request the deletion of their information by making a request in writing.

In general:

• Tool interaction logs: 30 days (export or deletion available on request)
• Account and contractual data: duration of the customer relationship plus applicable legal retention periods

Upon contract termination, personal data is securely deleted using Azure native deletion capabilities. Disposal records are maintained.

9. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• End-to-end encryption in transit (TLS 1.2+) and encryption at rest (for e.g. AES-256).
• Strict role-based access controls and least-privilege principles.
• ISO 27001 certification and SOC 2 compliance (see our Trust Centre at foreai.eu.trust.site).
• Multi-factor authentication for platform access.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities as required by applicable law.

10. Your Privacy Rights

Depending on your location and applicable law, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. All valid requests are fulfilled within 30 days. Submit requests to: security@foreai.co

Where fore ai processes data as a Data Processor on behalf of a customer, data subject requests relating to that customer’s data should be directed to the customer in the first instance.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:

• Sending an email to the address associated with your account, and/or
• Displaying a prominent notice on our website prior to the change becoming effective.

The “Last Updated” date at the top of this policy indicates when it was most recently revised. We encourage you to review this policy periodically. Your continued use of our Services after the effective date of any changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy team:

Email: security@foreai.co Website: www.foreai.co

fore ai AG Registered in Switzerland

© 2026 fore ai AG. All rights reserved.

This document is provided for informational purposes. For legal advice, please consult a qualified data protection professional.