Privacy Policy

The data controller is New Company 1, registered at New Address 1, company number 000000000. This is a placeholder legal identity pending incorporation and will be replaced with our registered company details before launch. For any privacy question, contact privacy@producthands.com.

• Account data: name, email, language, timezone, and role (customer or tester).
• Project and test-run data: scope, environments, credit balance, and history.
• Findings and evidence: bug reports, Product Signals, screenshots, screen recordings, and device/environment metadata submitted by testers.
• Communications: Telegram identifiers and message content needed to route missions and deliver task packs, and support correspondence.
• Candidate assessment data: training progress, practical assessment results, and, where you apply as a tester, voice interview recordings and transcripts (see clause 4).
• Ledger and payout data: credit purchases, earnings, and the identity information required for payout and, above a payout threshold, identity verification.
• Technical data: device, browser, and log data needed to operate and secure the platform.

We process account, project, and payment data to perform our contract with you (delivering test runs, matching testers, operating the credit ledger). We process candidate and quality data on the basis of our legitimate interest in running a reliable verification marketplace, balanced against your rights. Where we ask for your explicit consent — most notably before recording a voice interview — we rely on that consent, and you may withdraw it at any time going forward. We process some data to comply with a legal obligation, such as retaining financial records or responding to a lawful request from a supervisory authority.

Where you apply to become a Product Hand, part of assessment may involve an AI-conducted voice interview. Before any substantive question is asked, the interview discloses that it is automated and asks for your explicit consent to being recorded and to the resulting transcript being processed. That consent is stored against your candidate record together with a timestamp and the version of this policy in effect at the time you gave it.

A non-voice, text-based alternative is always available if you would rather not complete a voice interview — choosing it does not disadvantage your application. Interview data is used only for candidate assessment; it is not used to infer or score protected characteristics, and it does not by itself determine an employment or access outcome without a documented human review for borderline or inconsistent results.

• To match testers to test runs by device, language, locale, and domain relevance.
• To route missions and deliver task packs through Telegram, with credentials issued short-lived and revoked at completion.
• To operate the credit ledger, calculate tester earnings, and process payouts.
• To review finding quality, detect fraud, and run calibration checks.
• To respond to support requests and disputes.
• To meet our legal, accounting, and record-keeping obligations.

We share data with service providers who help us run the platform: cloud hosting and storage, our payment provider for processing top-ups and payouts, communications infrastructure for Telegram delivery, and, where you consent, the provider that conducts voice interviews. Each is bound by contract to protect your data and to use it only to provide the service to us. We do not sell personal data, and we do not share unredacted evidence, credentials, or customer secrets in shared or group channels.

Because testers and customers are located worldwide, data may be processed outside the country where you are based, including outside the European Economic Area and the United Kingdom. Where that happens, we rely on appropriate safeguards, such as standard contractual clauses, to ensure your data continues to receive an equivalent level of protection.

We keep account and ledger data for as long as your account is active and for a further period afterward to meet our legal and accounting obligations. Evidence, recordings, and ticket content are retained according to the retention period agreed with the relevant customer for that project, after which they are deleted on a scheduled basis. You can ask us to delete data sooner, subject to clause 10.

Subject to applicable law, you have the right to: access the personal data we hold about you; have inaccurate data corrected; have data erased; restrict or object to certain processing; receive a portable copy of data you provided to us; and withdraw consent at any time where we rely on it. If you are in the European Union or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.

You can request an export of your account, project, and finding data, or request deletion of your account, from your account settings or by emailing privacy@producthands.com. We will action a deletion request within a reasonable period, except where we are required to retain specific records for legal, accounting, or dispute-resolution purposes — in which case we will tell you what is retained and why.

Evidence and media are stored encrypted at rest and in transit and are accessed only through signed, time-limited URLs. Access to task packs, credentials, and evidence is logged. Credentials issued for a mission are least-privilege and short-lived by default, and are revoked at completion or expiry. Personal data is redacted from screenshots and recordings wherever it is not the subject of the finding itself.

Product Hands is not directed at, and is not available to, anyone under 18. We do not knowingly collect personal data from children.

We use a limited set of cookies to keep you signed in, remember your preferences, and understand how the platform is used. Full detail is in our Cookie Policy.

We may update this policy from time to time. Where a change is material we will notify account holders before it takes effect and, for consent-based processing such as voice interviews, the applicable policy version will be recorded against your consent.