Privacy Policy

Starter policy · TODO before accepting customers: identify the legal business entity, business address, contact details, effective date, applicable jurisdiction, and any mandatory consumer rights. Have these terms reviewed for the countries you serve.

Information we process

Google authentication supplies your account identifier, email address, and profile name through Supabase Auth. We store profile information, package selections, order and payment status, app names and installation links, instructions, chat messages, and uploaded screenshots. We do not collect Google passwords or tester account passwords.

Why we use it

We use this information to authenticate you, process and verify purchases, arrange testing, deliver findings, provide support, and protect the service. App links and testing instructions are used by the authorized testing team to perform the purchased service.

Payment handling

Stripe or PayPal processes your payment details. AppTester stores payment references, provider, amount, currency, status, refunds, and timestamps. We do not store full card numbers or card security codes. Crypto checkout remains unavailable until an appropriate provider has been configured and disclosed.

Service providers and access

The application is designed to use Supabase for authentication, database, private file storage, and real-time updates, and Vercel for hosting. The selected payment provider receives information required for checkout. Customers can access their own private orders, while authorized administrators can support orders across the service.

Screenshots and messages

Order messages and screenshots are private. Screenshot links expire after a short period and are issued only after an access check. Avoid uploading unnecessary personal information or production secrets. Full refunds disable customer access to the private testing resources for that order.

Cookies and analytics

Essential session cookies support Google sign-in. This starter application does not send analytics to an external analytics service. If analytics or non-essential tracking is added, this policy and any required consent controls must be updated first.

Retention and your choices

TODO: Define retention periods for profiles, messages, screenshots, order records, payment references, logs, and backups. Add a verified contact channel for requests to access, correct, export, or delete information. Explain any records retained for tax, fraud prevention, or other legal obligations.

International processing and legal details

TODO: Identify the data controller and privacy contact, chosen hosting regions, applicable legal bases, international transfer arrangements, rights under applicable law, age restrictions, complaint procedures, and effective date. We make no claim to certifications that have not been obtained.