Privacy Policy: E8 Test Summary Report (Azure DevOps extension)
This policy explains how the E8 Test Summary Report extension for Azure DevOps (the "extension") handles information, including personal information. The extension is provided free of charge by E8 Tech Consulting Pty Ltd (ABN 21 696 339 974) ("E8", "we", "us"), an Australian company. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Summary
- The extension runs entirely in your web browser, inside Azure DevOps.
- E8 does not collect, receive or store any of your data. We do not operate a server for this extension, and the extension contains no analytics, tracking or advertising.
- Reports are created in your browser and downloaded to your own computer.
- Your report settings are stored in your own Azure DevOps organisation, for your user only.
- The optional AI summary sends only your notes and result totals directly from your browser to Anthropic, using your own API key, and only after you agree.
1. Information the extension reads
When you use the extension, it reads the following from your Azure DevOps organisation, using your own sign-in and permissions. It requests read-only access to test management and work items, and never changes them.
- Test plans, test suites and test points, including test case titles, outcomes, configurations, tester names and run dates.
- Work items linked to those test cases (bugs, user stories and requirements), including title, state, severity, priority, assigned person and area path.
- The names of your organisation and project (to build links to work items) and your display name (to pre-fill "Prepared by").
This information is processed only in your browser to show the report screens and build the Word and PDF files. It is not sent to E8.
2. Reports you download
Word and PDF reports are generated in your browser and saved to your device through your browser's normal download. The extension does not upload, email or share them. Once downloaded, the files are under your control.
3. Settings saved in Azure DevOps
To remember your choices, the extension saves your report settings in the Azure DevOps Extension Data Service, scoped to your user in your organisation. This includes the report title and details you type (for example environment, scope, objectives, approach, risks, deviations, notes, an accepted AI summary and your release recommendation), the sections you chose and your status thresholds, together with a record that you accepted the AI notice.
This data is stored by Microsoft within your Azure DevOps organisation, under your organisation's agreement with Microsoft. E8 has no access to it. Test results themselves are not saved there. To remove saved text, clear the fields and click Save settings.
4. Optional AI summary ("Make it professional")
This feature is optional and is used only when you click Make it professional.
- Your consent first. The first time, the extension shows a notice explaining what will be sent, and nothing is sent until you agree.
- What is sent: your notes (at most 2,000 characters) and result totals only: test counts, pass and execution rates, open defects by severity, the overall status, the release recommendation and the names of the report sections.
- What is never sent: test case names or steps, defect titles or details, people's names, other report settings, or your Azure DevOps credentials.
- Where it goes: directly from your browser to Anthropic's API (
api.anthropic.com), using your own Anthropic API key. It does not pass through E8. Anthropic processes it under your agreement with Anthropic and Anthropic's privacy policy. - Your API key is kept in your browser only: for the current browser tab by default, or in that browser's local storage if you tick Remember on this computer. It is never sent to E8 and never saved in Azure DevOps. You can delete it at any time with Remove key. Anyone with access to your browser's developer tools could read a remembered key, so do not tick the box on a shared computer.
5. Where information is stored and sent (including overseas)
- E8 does not disclose your personal information to anyone, in Australia or overseas, because the extension never sends it to us.
- Azure DevOps data, including your saved report settings, is stored by Microsoft in the location your organisation chose when it was created, which may be outside Australia. This is covered by your organisation's agreement with Microsoft.
- The optional AI summary sends your notes and result totals directly from your browser to Anthropic, which processes data in the United States and possibly other countries. This happens only when you choose it, after the notice described in section 4, and under your own agreement with Anthropic. Do not include personal information in your notes if you do not want it sent to Anthropic.
6. Information collected by Microsoft
When you find, install or use extensions, Microsoft may collect information through the Visual Studio Marketplace and Azure DevOps, for example installation counts. This is governed by Microsoft's privacy statement, not by this policy.
7. Cookies, analytics and tracking
The extension does not set cookies and contains no analytics, tracking or advertising code.
8. Security
The extension uses Azure DevOps' own sign-in, so it never asks for your Azure DevOps password or a personal access token. Connections to Azure DevOps and to Anthropic are encrypted (HTTPS).
9. Children
The extension is a business tool and is not intended for children.
10. Access and correction
Because E8 does not collect or hold personal information through the extension, we will usually have nothing to give you or correct. You can view, change or delete your saved report settings yourself in the extension (clear the fields and click Save settings); your Azure DevOps administrator manages the rest of your organisation's data. You are still welcome to contact us with any request, and we will respond within 30 days.
11. Complaints
If you have a question or complaint about privacy, please contact us first using the details below. We will acknowledge it promptly and aim to respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
12. Changes to this policy
If we change how the extension handles information, we will update this policy and the "Last updated" date above. Significant changes will also be noted in the extension's Marketplace listing.
13. Contact
E8 Tech Consulting Pty Ltd
ABN: 21 696 339 974
Email: quality@e8tech.co
Website: https://www.e8tech.co/