Who we are
Tespr is an AI usability testing platform run by VanDesigns Inc. This policy covers tespr.vercel.app, the Tespr MCP server and the Tespr Figma plugin. When it says “we”, it means Tespr.
We wrote it in plain language, and it describes what the product does today. If anything here doesn't match what you see, email us at tech.tespr@gmail.com.
What we collect
- Your account
- Your email address, and the name, username and photo you add to your profile.
- The waitlist
- Your email address and where you joined from.
- Your tests
- The designs, screenshots, Figma frames and website addresses you submit, the personas and files you add, your tasks, the reports we generate, your chats with personas, and any feedback you leave on them.
- Support messages
- Your email address, your message, the page you sent it from and the test it's about.
- Usage counts
- How many reports, checks and chats you've used, so we can apply plan limits.
- Analytics
- How you use the site, covered in Analytics and session replay.
- Technical data
- Your IP address, browser and device, used to run the site, keep it secure and work out your country.
How we use it
- To run Tespr: sign you in, generate reports and save them to your account.
- To email you sign-in links, invitations and replies to your messages.
- To apply limits and stop abuse.
- To find out what works, where people get stuck and what breaks, and to fix it.
If you're in the EU, EEA, UK or Switzerland, our legal bases are: performing our contract with you when we run the product, your consent for analytics cookies and session replay, and our legitimate interests in keeping Tespr secure, reliable and affordable to run.
Analytics and session replay
PostHog is our main analytics tool. It records the pages you visit, what you click, how you scroll and move around a page, how long you stay, your browser, device and rough location, and errors and page speed. Once you're signed in, this is linked to your account ID, not your name or email.
Session replay rebuilds what happened on screen so we can see where people struggle. Anything typed into a form is masked. Your dashboard and report pages are not recorded, and on those pages we also remove the text of whatever you clicked. Report links and one-time sign-in codes are removed from everything we send.
Google Analytics runs on our home page only. Vercel Web Analytics counts page visits without cookies.
Your choice. If you're in the EU, EEA, UK or Switzerland, or we can't tell where you are, PostHog and Google Analytics stay off until you accept. You can change your mind at any time with Cookie settings in the site footer; declining stops them and removes what they stored in your browser. Everywhere else they run by default, and you can block them with your browser's cookie settings or a content blocker.
Service measurements. Our servers also record how the service performs, whatever you choose above: which AI model ran, how many tokens it used, how long it took, whether a report finished, and which MCP tools were used. Signed-in usage is linked to your account ID. These records never include your prompts, AI replies or design content.
How AI is used
Reports and persona chats are generated by Anthropic's Claude models. To do that, we send Anthropic your designs or website captures, your personas, tasks and messages. Reports and chats are then saved to your account so you can come back to them.
We don't use your content to train AI models, and we don't review it by hand unless you ask us to, or we need to for security or a legal reason.
Who processes your data
We use these providers to run Tespr. Each one only gets what it needs for its job.
- Supabase
- Database, file storage and sign-in.
- Vercel
- Hosting and cookieless page counts.
- Anthropic
- The AI behind reports and chats.
- PostHog
- Product analytics, session replay and error reports.
- Google Analytics, and a copy of the waitlist in Google Sheets.
- Resend
- Sign-in, invitation and notification emails.
- Figma
- Fetching frames when you test a Figma design.
- Firecrawl
- Capturing the pages of a website you ask us to test.
We may also share information if the law requires it, or to protect Tespr and its users. If Tespr is ever sold or merged, we'll tell you before your data moves.
Some of these providers work in the United States and other countries, so your data may be processed outside the country you live in.
Report links
A report made through the MCP server comes with a private link. Anyone who has the link can open the report, so share it with care. If nobody saves it to an account, the report and its files are removed after 7 days.
How long we keep it
- Tests, reports and chats stay until you delete them or delete your account.
- Deleting your account removes your profile, tests, reports and uploaded files.
- Waitlist emails stay until you ask us to remove them.
- Analytics stay in PostHog, Google Analytics and Vercel under each service's retention settings.
Your choices and rights
You can delete a test from your dashboard, and your whole account from Settings. For anything else, email tech.tespr@gmail.com.
Depending on where you live, you can ask to see, correct, delete or move your data, object to how we use it, or withdraw consent. We'll reply within 30 days. You can also complain to your local data protection authority.
Security
Data is encrypted in transit, access is limited by account, and we keep what we send to analytics to a minimum. No online service is perfectly secure, so if something goes wrong that affects you, we'll tell you.
Children
Tespr isn't for children under 13, and we don't knowingly collect their data. If you think a child has given us information, email us and we'll delete it.
Changes to this policy
We'll update this page when our practices change, and change the date at the top. If a change is significant, we'll tell you clearly before it takes effect.
Contact
Questions, requests or concerns about your privacy: tech.tespr@gmail.com.