Legal
Privacy Policy
Last updated: June 13, 2026
1. Introduction
TestAPM ("we", "us", or "the Platform") operates a marketplace that connects merchants who need to verify Alternative Payment Method (APM) integrations with local testers who can complete real payment tests. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using TestAPM — including our website, merchant dashboard, and Telegram bot — you agree to the practices described here. If you do not agree, please do not use the Platform.
2. Who this policy applies to
- Merchants — businesses or developers posting APM test tasks and paying platform fees.
- Testers — individuals who register via Telegram, complete test payments, and receive task rewards.
- Visitors — anyone browsing our marketing site without an account.
3. Information we collect
3.1 Merchant data
- Account details: company or individual name, business email address.
- Financial account data: prepaid platform balance, transaction history, and records of fees charged per task.
- Integration data: optional webhook URLs, webhook signing secrets, checkout or payment links provided for testers, and task notes.
- Usage data: task creation timestamps, status changes, confirmation events, and dashboard activity logs.
3.2 Tester data
- Telegram profile: chat ID, username, and messages sent to our bot during registration and task execution.
- Verification materials: screenshots or images of APM accounts submitted for manual review.
- Payout information: PayPal or Wise email addresses used to receive USD rewards.
- Task records: claimed tasks, payment confirmation timestamps, uploaded payment screenshots, and earnings history.
- Location-related data: country code and declared list of APMs you hold (not precise GPS location).
3.3 Automatically collected data
- Technical logs: IP address, browser type, device information, pages visited, and request timestamps when you use our website or API.
- Cookies and similar technologies: essential cookies required for dashboard sessions and security (we do not use third-party advertising cookies).
4. How we use your information
We use collected information to:
- Operate the Platform, including task creation, dispatch, and status tracking.
- Match tasks to eligible testers based on country and supported APMs, and send Telegram notifications.
- Verify tester eligibility, process manual payouts, and resolve disputes between merchants and testers.
- Deliver webhook events to merchants (e.g. task claimed, payment made, task completed) when configured.
- Maintain platform security, prevent fraud, and enforce our Terms of Service.
- Improve our services and communicate important operational updates.
We do not sell your personal information to third parties. We do not process APM wallet credentials or store your local payment app passwords.
5. Legal bases for processing (EEA/UK users)
If you are in the European Economic Area or United Kingdom, we process personal data on the basis of:
- Contract — to perform our agreement with you (task marketplace services).
- Legitimate interests — fraud prevention, platform security, and service improvement, balanced against your rights.
- Legal obligation — where required by applicable law (e.g. tax or accounting records).
- Consent — where you explicitly opt in (e.g. optional marketing communications, if offered).
6. How we share information
We may share information only in these circumstances:
- Between parties to a task — merchants receive task completion signals and may receive payment proof; testers receive merchant-provided payment links necessary to complete a test. Merchants do not receive tester payout addresses by default.
- Service providers — cloud hosting (e.g. Google Cloud), database storage, Telegram (Bot API), and payment processors (PayPal, Wise) that help us operate the Platform under contractual confidentiality obligations.
- Legal requirements — when required by law, court order, or to protect the rights and safety of TestAPM, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice where required by law.
7. Data retention
- Task event logs — retained indefinitely for dispute resolution and audit purposes, unless deletion is required by law.
- Payment screenshots — stored in cloud storage for up to 90 days after task completion, then deleted unless a dispute is open.
- Account and transaction records — retained for as long as your account is active and for a reasonable period thereafter to meet legal and accounting obligations.
- Server logs — typically retained for up to 90 days.
8. Security
We implement technical and organizational measures including encrypted connections (TLS), HMAC-signed webhooks, database access controls, and transactional integrity for financial operations. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
Merchant webhook secrets and tester payout emails are access-controlled. Sensitive fields may be masked in the dashboard display.
9. International transfers
TestAPM may process data in countries other than your own (including the United States and regions where our cloud providers operate). Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA/UK.
10. Your rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to certain processing.
- Data portability (receive a copy in a structured format).
- Withdraw consent where processing is consent-based.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact us at privacy@testapm.com. We will respond within the timeframe required by applicable law.
11. Children
TestAPM is not intended for users under 18. We do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it promptly.
12. Third-party services
Our Platform integrates with Telegram, PayPal, Wise, and merchant-configured webhook endpoints. Your use of those services is governed by their respective privacy policies. TestAPM is not responsible for third-party practices outside our control.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use after changes constitutes acceptance of the revised policy.
14. Contact
Questions about this Privacy Policy or our data practices:
- Email: privacy@testapm.com
- General inquiries: hello@testapm.com
15. Governing law
This Privacy Policy is governed by the laws of the Hong Kong Special Administrative Region, without regard to conflict-of-law principles. You agree that the courts of Hong Kong shall have exclusive jurisdiction over any dispute arising out of or relating to this Privacy Policy or our handling of your personal data, subject only to mandatory protections that cannot be waived in your jurisdiction.
See also our Terms of Service for additional terms governing use of the Platform.