← Back to CasePilot

Privacy Policy

CasePilot AI Test Case Generator — Effective April 3, 2026 | Last updated: April 3, 2026
Developer: Ihor Kosheliev | Publisher: IK CasePilot

Overview

CasePilot is an Azure DevOps Marketplace extension that generates structured test cases from User Stories using AI. This privacy policy explains what data is accessed, how it is processed, and what is stored.

We are committed to minimal data collection. CasePilot does not collect personal information, does not use cookies, and does not track individual users.

1. Data We Access and Process (Not Stored)

When you click "Generate Test Cases," the extension reads the following data from the current Work Item:

• Work Item title and description
• Acceptance Criteria field
• Discussion comments (human-authored comments only)
• Wiki page content (only if configured in project settings)

This data is sent to our backend service for AI processing. It is processed in real-time and not stored on our servers. Once the AI response is returned, the input data is discarded.

2. Data We Store

Data	Where	Purpose	Retention
Organization ID	Azure Table Storage (West Europe)	Usage tracking	Indefinite
Monthly usage count	Azure Table Storage (West Europe)	Plan limit enforcement	Monthly reset
Subscription info	Azure Table Storage (West Europe)	Billing management	Until canceled
Project settings	Azure DevOps Extension Data Service	AI context	Controlled by you

We do not store: work item content, wiki content, generated test cases, or any personal user data.

3. Data We Do Not Collect

• Personal information (names, emails, profile data)
• Authentication credentials or access tokens
• Browser cookies, local storage, or session data
• Analytics or telemetry about individual users
• IP addresses or device information

4. Third-Party Services

OpenAI API — Work item content is sent to OpenAI (GPT-4o-mini) for test case generation. Data sent via the API is not used to train models. OpenAI API Data Policy

Microsoft Azure — Backend and storage hosted in West Europe. Azure Privacy

Stripe — Payment processing for paid plans. Stripe handles all payment data. CasePilot never sees or stores credit card numbers. Stripe Privacy

Azure DevOps — Project settings stored within your own Azure DevOps organization via the Extension Data Service.

5. Data Flow

1. User clicks "Generate Test Cases" on a User Story.
2. Extension reads work item fields and (optionally) Wiki pages.
3. Content is sent over HTTPS to our Azure Function backend (West Europe).
4. Backend forwards content to OpenAI API for generation.
5. Generated test cases are returned to the extension.
6. Extension creates Test Case work items in Azure DevOps.
7. Usage counter is incremented. No content is retained.

6. Data Security

• All data in transit encrypted via HTTPS/TLS
• No work item content stored at rest
• Azure Table Storage uses built-in encryption at rest
• Access tokens used in-transit only, never persisted

7. GDPR Compliance

• Data minimization: Only organization ID and usage count stored
• Purpose limitation: Data processed solely for test case generation
• Data location: EU (West Europe Azure region)
• Right to deletion: Contact us to remove your organization's data

8. Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the date above. Continued use constitutes acceptance.

9. Contact

Ihor Kosheliev
Email: [email protected]