Who is responsible
TestSetGo is operated by Version Zero Limited. For participant identity, answers and assessment results, the organisation named before a test starts normally decides why the information is collected and acts as data controller. Version Zero Limited processes that information to deliver TestSetGo.
Version Zero Limited separately controls the limited information needed for creator accounts, public enquiries, billing records, security, abuse prevention and reliable platform operation.
What we collect
Creator accounts contain a name, email address and secure authentication data. Workspaces contain tests, sources, settings and membership records. A participant test may collect a name, email address, answers, timing, score and the technical credentials needed to save and resume an attempt. The exact identity mode and purpose are shown before a participant starts.
Payments for paid plans are processed by Stripe. Card details go directly to Stripe and never reach our servers; we hold only the billing records needed for accounting, such as invoices and the plan you are on.
We do not sell participant information or use participant answers for advertising or public-model training. We do not collect participant dates of birth, and public self-serve workspaces cannot collect data from children under 13.
How information is used
We use information to run tests, save answers, grade and report results, operate workspaces, prevent misuse, support creators and maintain the service. Access is limited to the participant, authorised workspace members and operational support where it is necessary and audited.
Public contact enquiries
When you use our contact form, we store your name, email, organisation, optional role and participant range, and message to handle your enquiry and respond.
We send organisation, role, participant range and message to OpenRouter for AI classification of spam, relevance and buying intent. The name and email fields are excluded from that request, but message text is sent unchanged and may contain personal information you include.
We keep accepted enquiries and classification results, including spam, uncertain messages and failed classifications. Valid enquiries are emailed to our team; buying-interest alerts contain only an internal record ID. Contact records currently have no automatic deletion period. Contact support@testsetgo.com to request access or erasure.
Support messages
Signed-in creators can send a message from the support form. We email the message, topic, account name and account email to support@testsetgo.com through Mailgun. We use the account email to reply. The form does not send test content, participant information or results. It is not available on participant pages. You can also email support@testsetgo.com directly.
Error reporting
Sentry receives technical error reports to help us fix failures. Reports include the error type, code location and release version. We remove request data, account identity, answer text and error messages before sending them. Sentry does not run analytics or session replay on participant pages.
Retention and deletion
Participant retention is set by each workspace and shown before a test starts. The default is 24 months. When records are erased, TestSetGo removes identity, free-text answers and active resume access while retaining only the small non-identifying assessment history needed for audit and aggregate integrity. Workspace owners can schedule workspace deletion with a 30-day recovery window.
Optional public-page analytics
With your consent, we use Google Analytics, Cloudflare Web Analytics and our own visit measurement on public marketing pages to understand which pages are useful. Google receives a random cookie identifier, the public page path, referring website, browser and device information, and connection information including your IP address. Google states that Analytics does not log or store individual IP addresses. This is separate from participant and workspace data: we do not send account IDs, names, emails, answers, results, form contents or private links to Google Analytics.
Google Analytics may process information outside the UK and EEA, including in the United States, under Google's data processing terms and applicable transfer safeguards. See Google’s Privacy Policy and Google’s data processing terms. Google Signals, advertising personalisation, automatic form tracking and Google Ads links are disabled for this property. Detailed Google Analytics user and event data is retained for two months, without resetting that period on each visit. Aggregate reports can be retained longer.
You can accept or reject analytics with equal ease. Before acceptance, we do not load the analytics tags or send Google consent pings. Use Cookie settings in the public-page footer to withdraw consent at any time. Withdrawal stops future tracking and removes our analytics cookies and browser measurement state; it does not undo processing already carried out with your consent. Participant, creator, sign-in and registration pages do not load these tags.
Cookies and local storage
Essential cookies keep the product working. Creators get a sign-in session cookie. Participants get a short-lived cookie so an interrupted attempt can be resumed and a result link reopened. We remember your analytics choice in local storage for 180 days and ask again when it expires. If you accept analytics, Google sets host-only tsg_ga and tsg_ga_* cookies for up to 180 days without renewing their expiry on each visit. Marketing pages also store a random identifier, an event queue and first-touch attribution in your browser, only after acceptance. If you arrive from a paid Google Search ad and accept analytics, we retain Google's click identifier with your first account's attribution record. We use it only to measure whether the ad led to a qualified assessment use. We may return that identifier to Google Ads with the activation time, never with your name, email address, participant information or answers.
We use no advertising tracking scripts. Pages participants see carry no analytics or support chat. You can clear browser storage through your browser settings.
Your choices and rights
Participants should first contact the organisation and support address shown on the test disclosure. It can provide access, correction or erasure and can contact TestSetGo for processor support. Creators can manage participant rights and deletion from Workspace and Results. During private beta, creators can raise a privacy request through the support channel in their invitation.