Privacy Policy
Last Updated: February 24, 2026
At AccessLoad (operated by Ornate Software Solutions Pvt Ltd), we take your privacy seriously. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your information.
1. Information We Collect
1.1 Account Information
When you sign up, we collect:
- Username, email address, and password (password is stored as a one-way bcrypt hash — we never store plain-text passwords)
- Full name and company name (optional, provided by you)
- Selected plan (Free, Pro, or Business)
1.2 Test Data
When you run load tests, we collect and store:
- Target URLs and endpoints you test
- Test configuration — virtual users, duration, ramp-up, SLA profiles, network simulation settings
- Test results — throughput (TPS), latency percentiles (P50/P90/P95/P99), error rates, per-endpoint metrics
- Test scripts generated or uploaded by you
- Error snapshots — HTTP status codes, response timings, and headers (response bodies are discarded for bandwidth savings)
We do NOT collect or store response bodies from your target systems.
1.3 Payment Information
Payments are processed by Razorpay. We do not store your credit card numbers, UPI IDs, or bank details. We only store:
- Razorpay order IDs and payment IDs (for transaction tracking)
- Subscription status and billing cycle dates
For Razorpay's privacy practices, see Razorpay Privacy Policy.
1.4 Automatically Collected Data
- IP addresses — for rate limiting, abuse prevention, and security
- Timestamps — account creation, login times, test execution times
We do NOT use cookies for tracking. We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts. We do not collect browser fingerprints, device information, or User-Agent data.
2. How We Use Your Data
| Data | Purpose | Legal Basis |
|---|---|---|
| Account info | Authentication, communication, support | Contract performance |
| Test configs & results | Displaying results, generating reports, AI analysis | Contract performance |
| Anonymized test metrics | Improving our AI analysis engine accuracy | Legitimate interest |
| Payment records | Billing, invoicing, refund processing | Legal obligation |
| IP addresses | Security, rate limiting, abuse prevention | Legitimate interest |
| Test target URLs | Abuse detection (unauthorized testing) | Legitimate interest |
3. AI & Training Data
AccessLoad uses AI to generate performance analysis summaries. Here's how your data relates to our AI:
- Current AI analysis: Your test metrics are processed by a privately-hosted AI engine running on our servers. Your data never leaves our infrastructure for AI processing — we do NOT use OpenAI, Google, or any external AI APIs.
- Training data: We collect anonymized input/output pairs (test metrics → AI summary) to improve our AI model over time. These pairs contain aggregate performance numbers only — no personally identifiable information, URLs, or account details are included in training data.
- No selling of data: Your test data, scripts, and results are never sold, shared, or licensed to third parties for their AI training or any other purpose.
4. Data Retention
Test data retention depends on your plan:
| Plan | Retention Period | After Expiry |
|---|---|---|
| Free | 7 days | Automatically deleted |
| Pro | 30 days | Automatically deleted |
| Business | 90 days | Automatically deleted |
Other retention periods:
- Account data: Retained until you delete your account or 90 days after account deactivation on Free tier.
- Payment records: Retained for 7 years as required by Indian tax law.
- Audit logs (test metadata, IP addresses): Retained for 1 year for security and abuse investigation.
5. BYOC (Bring Your Own Cloud) Privacy
If you use BYOC workers on your own infrastructure:
- Test scripts execute entirely on your servers.
- Only aggregate metrics (TPS, latency percentiles, error rates) are reported back to our controller.
- Response data from target systems stays on your infrastructure and is never transmitted to us.
- Worker heartbeats (status, capacity) are sent to our controller for orchestration.
6. Data Security
We implement the following security measures:
- Encryption in transit: All traffic between your browser and AccessLoad is encrypted via TLS/HTTPS.
- Password hashing: Passwords are hashed using bcrypt with salt — we cannot read your password.
- API key security: API keys are stored as SHA-256 hashes. We show the full key only once at creation.
- Rate limiting: Signup, login, and API endpoints are rate-limited to prevent brute-force attacks.
- Worker authentication: Workers authenticate using shared secrets; unauthorized workers cannot join the cluster.
7. Data Sharing
We do NOT sell your data. We may share data only in these limited circumstances:
- Payment processing: Order amounts and user emails are shared with Razorpay for payment processing.
- Legal compliance: If required by Indian law, court order, or government authority.
- Abuse reports: If a target system owner reports unauthorized testing, we may share relevant account details with them and/or law enforcement.
- Service providers: Our hosting provider (Contabo) has physical access to servers but no access to application-level data.
8. Your Rights
You have the right to:
- Access your data: View all test results, scripts, and account information via the dashboard.
- Export your data: Download test results and reports at any time.
- Delete your data: Request complete account deletion by emailing support@accesssure.in. We will permanently delete all your data within 30 days.
- Correct your data: Update your profile information through account settings.
- Withdraw consent: You may stop using the service at any time. Deletion of data follows retention policies above.
9. Children's Privacy
AccessLoad is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us immediately.
10. International Users
AccessLoad servers are located in Germany (Contabo) and India. By using the service, you consent to your data being processed and stored in these locations. We comply with applicable Indian data protection regulations (IT Act, 2000 and associated rules).
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified via email to registered users at least 15 days before taking effect. The "Last Updated" date at the top reflects the most recent revision.
12. Contact Us
For privacy-related questions, data requests, or concerns:
- Email: support@accesssure.in
- Website: accessload.com/contact
Also see our Terms of Service for acceptable use policies and prohibited activities.