Privacy Policy

1. Who we are and how to contact us

Testabrand US at us.testabrand.com is operated by Purple Panda Limited, a company registered in Hong Kong, operating as Testabrand US. This Privacy Policy explains the information handled for the US service. For privacy questions or requests, email support@testabrand.com.

2. Information we collect

Account information includes your name, email address, phone number, password hash, age and US residency confirmation, verification status, profile details, payment-contact details and any optional marketing preference. Passwords are stored as one-way hashes rather than readable passwords.

Campaign and financial information includes bookings, product and Amazon order references, purchase screenshots, survey responses, claim decisions and resubmission history, referrals, Coins balances and ledger entries, payout and refund reconciliation references, and communications about those records.

Technical and security information may include IP address and approximate location, browser and device details, session and cookie identifiers, referral and campaign attribution, page activity, security events and diagnostic logs. We do not treat IP location, a phone number or a user declaration as conclusive identity or residency verification.

Before uploading evidence, remove unrelated purchases, full payment-card details, passwords and other unnecessary personal information while keeping the evidence needed to assess the claim.

3. How we use information

We use information to operate accounts, check eligibility, secure access, administer campaigns and bookings, review claims and feedback, account for Coins, administer payouts and refunds, investigate errors and fraud, respond to support requests and meet applicable legal and financial recordkeeping obligations.

We use contact details for verification, security and account or campaign communications. Optional marketing preferences are separate from age/residency declarations and account access. You can withdraw marketing consent through the available unsubscribe mechanism or by contacting support; this does not prevent necessary service or security communications.

Phone verification messages are used to confirm control of the submitted number. Your mobile carrier may apply message or data charges. We do not treat supplying a phone number for verification as consent to unrelated promotional SMS.

4. Brands, service providers and other disclosures

We share survey feedback with the relevant campaign brand for product feedback and reporting. Reports may include campaign, order or claim information where needed for administration, verification or disputes. Do not place unnecessary personal or sensitive information in survey answers.

Replit and its infrastructure providers support application hosting, the database and file storage. Mailjet supports email delivery and receives relevant recipient and message information. Twilio supports SMS delivery and receives the destination number and necessary message information.

Google provides reCAPTCHA security checks and, where configured, Drive and Sheets for campaign reporting and refund reconciliation. These functions may involve device/security signals or the relevant campaign, claim and payment-reference data. US reporting destinations are separate from Canadian campaign and refund sheets.

Amazon receives information associated with marketplace visits, purchases and affiliate links under its own policies. Any payment provider used to send your payout receives the payment details and transaction information necessary for that transfer. OpenAI supports configured administrative content-generation functions; do not submit customer purchase evidence or unnecessary personal data to those functions.

Authorized staff and service providers may access information needed for their duties. We may also disclose relevant information to comply with lawful requests, protect legal rights, investigate fraud or manage a business transfer subject to applicable safeguards.

We do not sell personal information for money. Disclosures and technologies that constitute a sale, sharing or targeted advertising under applicable state law remain subject to the rights and choices required by that law.

5. Cookies, browser storage and choices

We use cookies and browser storage for account sessions, security, preferences, referral attribution and campaign attribution. Referral and attribution information is distinct from authentication and is not all described as strictly necessary.

Where analytics or advertising technologies are enabled, they may receive device, activity and attribution information. Any notice, consent, opt-out or recognized browser preference required by applicable law applies to that processing. Marketing email consent is not blanket consent to unrelated tracking.

Browser settings can limit cookies or clear local storage, although doing so may sign you out or affect features. Contact support@testabrand.com about privacy or tracking choices that are not available through your account or browser.

6. International processing and US account separation

The operator is registered in Hong Kong, and our providers may process information in the United States or other countries where they operate. A US-facing service and US eligibility rules do not mean that every service provider or processing location is exclusively in the United States.

Information may be subject to laws and lawful government-access requirements in the country where it is processed. US campaign records, account balances and reporting destinations are administered separately from the Canadian platform; this does not imply separate corporate ownership of every provider account.

7. Retention and security

We retain information as reasonably needed to operate accounts and campaigns, administer payments, investigate fraud, resolve disputes and satisfy legal, tax, accounting and recordkeeping obligations. Retention depends on the record and purpose rather than a single period for all data.

Account closure or a deletion request may leave records that must be retained for these purposes. Backups may retain information until their normal rotation or lawful deletion. Information no longer needed should be deleted or de-identified as appropriate.

Security measures include HTTPS, password hashing, authentication, permission checks and restricted access to private purchase evidence. No system is completely secure. Protect your account and contact support promptly about suspected unauthorized access. We will provide breach notifications where required by applicable law.

8. Privacy requests and state-law rights

Depending on your residence and applicable law, you may have rights to access, correct, delete or obtain a portable copy of information, opt out of certain sales, sharing or targeted advertising, limit certain uses of sensitive information, and appeal a denied request.

Send requests or appeals to support@testabrand.com. We may request information reasonably necessary to verify your identity or an authorized agent's authority. We will respond within the period required by the applicable law and explain any legally permitted limitation or extension.

We will not unlawfully discriminate against you for exercising privacy rights. Some information is necessary to provide campaign, verification or payment services; deleting it or withdrawing a necessary permission may prevent those services from continuing.

9. Adults only and policy changes

The platform is intended only for adults age 18 or older in the 50 US states or DC. If you believe a minor has supplied information, contact support so we can investigate and take appropriate restriction, deletion or legally required retention measures.

We may update this Policy by publishing the revised version and update date at us.testabrand.com. We will give additional notice or obtain consent where required for a material change or new use. This Policy does not waive rights that applicable law makes non-waivable.