Privacy Policy

1. Who we are

QATested ("we", "us", "our") operates the platform at qatested.io and app.qatested.io — a two-sided marketplace where developers post paid QA tests and testers earn by completing them. Questions about this policy can be sent to hello@qatested.io.

2. What we collect

When you create an account (all users):

• Name and email address
• Account role (developer or tester)
• Authentication metadata managed by Clerk

If you are a tester, we also collect:

• Government-issued ID for identity verification (processed by a third-party verification service)
• Stripe Connect account details for payouts
• Skills assessment responses
• Your tier, rating, and approval history

If you are a developer, we also collect:

• Payment information processed by Stripe (we never store raw card numbers)
• Test content you create: URLs, instructions, form questions, deadlines

Usage data collected automatically:

• Pages visited and actions taken in the app
• Browser type, operating system, and device type
• IP address and approximate location

3. How we use your data

• To provide the platform — matching testers to tests, processing payments, delivering submissions
• To verify tester identity and enforce quality standards
• To calculate tier ratings and test eligibility
• To send transactional emails (submission alerts, payment confirmations, deadline reminders)
• To investigate disputes or policy violations
• To improve the product — we may analyse usage patterns in aggregate, never individually

We do not sell your data. We do not use your data for advertising targeting on third-party platforms.

4. Third-party services

Running the platform requires the following services. Each has its own privacy policy.

• Clerk — authentication, session management, and user identity (clerk.com/legal/privacy)
• Supabase — database and storage, hosted in the US (supabase.com/privacy)
• Stripe — payment processing and tester payouts via Stripe Connect (stripe.com/privacy)
• Loom — screen recording for tester submissions (testers record and link their own Loom videos; we store the link, not the video)
• Resend — transactional email delivery
• Vercel — hosting and infrastructure

5. Tester identity documents

Identity documents submitted for verification are reviewed only for the purpose of confirming your identity. They are handled with strict access controls, not used for any other purpose, and retained only as long as required to maintain your verified status. You may request deletion by contacting us at hello@qatested.io.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (such as transaction records, which Stripe may retain independently).

7. Your rights

Depending on where you live, you may have rights including:

• Access to the data we hold about you
• Correction of inaccurate data
• Deletion of your data ("right to be forgotten")
• Portability of your data in a machine-readable format
• Objection to certain types of processing

To exercise any of these rights, email hello@qatested.io. We'll respond within 30 days.

8. Cookies

We use cookies and similar technologies for authentication (session tokens managed by Clerk) and to keep you signed in. We do not use advertising cookies or third-party tracking pixels. You can clear cookies in your browser settings; doing so will sign you out.

9. Children

QATested is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this policy as the platform evolves. When we make material changes, we'll update the date at the top of this page and, where appropriate, notify you by email. Continued use of the platform after changes constitutes acceptance.

11. Contact

Questions, concerns, or requests: hello@qatested.io