Privacy Policy

Last Updated: January 10, 2026

1. Introduction

Welcome to 12Testers ("we", "our", "us"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://12testers.io and use our mobile application testing services.

This policy applies to all users of our services, including developers, game studios, and testers. By using our services, you consent to the data practices described in this policy.

We are committed to compliance with the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

Create an Account: Name, email address, company name (optional), phone number (optional), and password.
Submit an Application for Testing: Application package name, version details, app description, Google Play Console information, testing requirements, and any special instructions.
Make a Payment: Billing information including name, address, and payment card details (processed securely through our payment processor, Stripe).
Contact Support: Name, email address, and any information you choose to provide in your support request or communication.
Subscribe to Newsletter: Email address and preferences.

2.2 Application Data

When you submit an application for testing, we collect and temporarily store:

Application files (APK/AAB files)
Application metadata (package name, version, size)
Screenshots and promotional materials you provide
Testing notes and bug reports generated during testing

2.3 Automatically Collected Information

When you access our website or services, we automatically collect certain information:

Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
Usage Data: Pages visited, time spent on pages, links clicked, referring website, and other diagnostic data.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity and store certain information. See our Cookie Policy for more details.

2.4 Information from Third Parties

We may receive information from third-party services:

Authentication Services: If you sign in using Clerk or other authentication providers, we receive your name, email address, and profile information.
Payment Processors: Stripe provides us with payment confirmation and transaction details (but not your full payment card information).
Analytics Services: We use analytics tools to understand how users interact with our services.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 To Provide and Maintain Our Services

Process and fulfill testing service requests
Distribute your application to our testing team
Generate and deliver testing reports
Manage your account and provide customer support
Process payments and send transaction confirmations

3.2 To Communicate With You

Send service-related notifications and updates
Respond to your inquiries and support requests
Send testing status updates and report delivery notifications
Send marketing communications (with your consent, which you can withdraw at any time)
Request feedback and reviews

3.3 To Improve Our Services

Analyze usage patterns and trends
Conduct research and development
Monitor and analyze the effectiveness of our services
Detect, prevent, and address technical issues
Improve our website, services, and user experience

3.4 For Legal and Security Purposes

Comply with legal obligations and regulatory requirements
Protect our rights, property, and safety, and that of our users
Prevent fraud, abuse, and security incidents
Enforce our Terms of Service

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or UK, our legal basis for collecting and using your personal information depends on the data and context:

Contract Performance: Processing is necessary to perform our contract with you (e.g., providing testing services).
Consent: You have given us explicit consent to process your data for specific purposes (e.g., marketing communications).
Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our services, fraud prevention), provided these interests do not override your rights.
Legal Obligation: Processing is necessary to comply with legal obligations (e.g., tax reporting, responding to legal requests).

5. Disclosure of Your Information

We may share your information in the following circumstances:

5.1 With Our Testing Team

Your application and related testing information are shared with our qualified testers who have signed non-disclosure agreements (NDAs) and confidentiality agreements. Testers only receive the information necessary to perform testing services.

5.2 With Service Providers

We engage third-party service providers to help us operate our business:

Payment Processing: Stripe (for secure payment processing)
Authentication: Clerk (for user authentication and management)
Email Services: Resend (for transactional and marketing emails)
Cloud Hosting: Vercel, AWS, or similar providers (for hosting our services)
Analytics: Google Analytics or similar tools (for usage analytics)

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information.

5.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

Valid legal requests from government authorities
Court orders or subpoenas
Legal processes or investigations
Protection of our rights, property, or safety, or that of others

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS. Application files are stored on encrypted servers.
Access Controls: Access to personal information is restricted to authorized personnel only, on a need-to-know basis.
Authentication: We use secure authentication mechanisms and require strong passwords.
Regular Security Audits: We conduct regular security assessments and vulnerability testing.
Data Minimization: We only collect and retain data that is necessary for our services.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

Provide our services to you
Comply with legal obligations
Resolve disputes and enforce our agreements

Specific retention periods:

Account Information: Retained for as long as your account is active, plus 12 months after account closure.
Application Files: Permanently deleted within 30 days after testing completion, unless you request earlier deletion.
Testing Reports: Retained for 2 years to allow you to access historical reports.
Payment Records: Retained for 7 years to comply with tax and accounting regulations.
Support Communications: Retained for 3 years for quality assurance and dispute resolution.

8. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 Rights Under GDPR (EEA and UK Users)

Right to Access: You can request a copy of the personal information we hold about you.
Right to Rectification: You can request that we correct inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal information, subject to certain exceptions.
Right to Restrict Processing: You can request that we limit how we use your information.
Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
Right to Object: You can object to our processing of your information for certain purposes, including marketing.
Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
Right to Lodge a Complaint: You can file a complaint with your local data protection authority.

8.2 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You may need to verify your identity before we can fulfill your request.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data from the EEA or UK to other countries, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Other legally approved transfer mechanisms

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information from our systems.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files stored on your device.

Types of cookies we use:

Essential Cookies: Necessary for the website to function properly (e.g., authentication, security).
Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics).
Functional Cookies: Remember your preferences and settings.
Marketing Cookies: Track your activity to deliver relevant advertisements (only with your consent).

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website. For more information, see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to be tracked. We currently do not respond to DNT signals, as there is no industry standard for how to respond to such signals.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

Posting the updated policy on our website with a new "Last Updated" date
Sending you an email notification (if you have an account)
Displaying a prominent notice on our website

Your continued use of our services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]
Data Protection Officer: [email protected]
Support: [email protected]
Website: https://12testers.io/dashboard/support

For EEA/UK Users

If you are located in the European Economic Area or United Kingdom, you have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with applicable data protection laws.

Our Commitment

We are committed to protecting your privacy and handling your data responsibly. We will respond to all legitimate requests within 30 days and work with you to resolve any privacy concerns.