Privacy Policy

Learn how TGM Research Pte. Ltd. collects, uses, and protects your personal information when you use TGM Panel services.

Last Updated: February 2026 — Effective: January 1, 2026

Introduction

Your privacy matters to us. This Privacy Policy explains how TGM Research Pte. Ltd. ("TGM", "we", "us", or "our") collects, uses, and shares personal information when you use our services, including:

• The TGM Panels website at tgmpanel.us and related panel websites ("Website") • The TGM Panels mobile application ("App") • Participation in surveys and market research programs ("Services")

This Privacy Policy applies to all users worldwide. We are committed to protecting your privacy and complying with applicable data protection laws, including the GDPR (EU/UK General Data Protection Regulation), CCPA/CPRA (California Consumer Privacy Act / California Privacy Rights Act), and PDPA (Singapore Personal Data Protection Act).

Data Controller

TGM Research Pte. Ltd. 6001 Beach Road, #22-01 Golden Mile Tower Singapore 199589

TGM Research Pte. Ltd. is the sole controller of your personal data. We determine how and why your personal data is processed in connection with the TGM Panel platform.

Contact for all privacy matters: privacy@tgmpanel.com

Transparency Commitment

Participation in surveys requires registration. During registration, you will see information about data processing and a link to this Privacy Policy before submitting your data.

1. Information We Collect

We collect different types of information depending on how you use our Services.

A. Data You Provide Directly

• Account data (email address, password, country) — collected at registration • Profile data (name, date of birth, gender, postcode) — collected at profile completion • Demographic data (education, employment, household, income) — collected via profile surveys • Contact data (phone number, optional) — for phone-based rewards only • Survey responses (answers, completion status, timestamps) — collected during survey participation • Support messages (communications via email or chat) — when you contact us • Verification data (phone number for SMS verification; linked social accounts; verification result from third-party identity verification provider) — when requested for identity verification

B. Special Category (Sensitive) Data

Some profile categories and surveys may involve sensitive personal data, including health-related information, ethnicity or racial origin, political opinions, and religious or philosophical beliefs.

We use a granular consent mechanism in your Privacy Settings that allows you to separately control whether to share sensitive data for market research purposes, whether to share profile information with third parties, and cookie and identifier preferences.

Access to sensitive profile categories (such as Health, Ethnicity) is only available if you have provided explicit consent for sensitive data processing. You can change these settings at any time in your account under Privacy Settings.

C. Data We Collect Automatically

• Device data (device model, operating system, app version) — for compatibility and troubleshooting • Network data (IP address, approximate location from IP) — for fraud prevention and survey eligibility • Usage data (pages visited, features used, timestamps) — for service improvement • Login data (login times, IP at login, derived country) — for security and fraud detection • Advertising identifiers (Google Advertising ID on Android, Apple IDFA on iOS) — for survey partner attribution, respondent deduplication, and fraud prevention

D. Data We Receive from Third Parties (Art. 14 GDPR)

We may receive personal data from survey partners (Cint, PureSpectrum, Lucid) including survey completion status, eligibility confirmations, and quality scores; from payment providers including payment confirmation status and transaction IDs; from Ip2Location including country and city derived from IP address; from identity verification providers including verification results; and from social login providers (LinkedIn, Facebook) including account link confirmation.

2. Platform-Specific Data Collection

Some data collection differs between our Website and App. Cookies and browser data are website-only. Push notification tokens work on both. App crash reports and advertising identifiers (GAID/IDFA) are app-only.

On iOS (14.5+): We request your permission through Apple's App Tracking Transparency (ATT) framework before accessing the IDFA. If you decline, we will not access your IDFA, and you can still use the App normally.

We do NOT collect precise GPS location without explicit consent, use advertising identifiers for advertising or ad targeting, share advertising identifiers with advertising networks, display advertisements within the App, or transmit advertising identifiers for users under the age of 18.

3. How We Use Your Information

We use your information to: create and manage your account (Contract, Art. 6(1)(b)); match you with relevant surveys via profiling (Legitimate Interest, Art. 6(1)(f)); process rewards and payments (Contract); send service communications (Contract); send survey invitations (Legitimate Interest — you may opt out); prevent fraud and ensure security (Legitimate Interest); identity verification (Legitimate Interest or Consent); share profile data with third-party survey providers (Consent via Privacy Settings); process sensitive personal data (Explicit Consent via Privacy Settings); website and app analytics (Consent); customer support (Contract); comply with legal obligations (Legal Obligation, Art. 6(1)(c)).

We do NOT use your data for selling your data to advertisers or third parties, cross-context behavioral advertising, or selling to data brokers.

No Advertising

The TGM Panel App does not display advertisements to users. We do not serve ads, use ad networks, or monetise our users through advertising. The App is a market research tool — not an advertising platform.

Nature of the Service

TGM Panel is a market research platform, not a gambling service. The Service does not involve betting, wagering, games of chance, or any form of gambling. Points earned through survey participation are not currency, have no cash value, and do not constitute money or a financial instrument.

4. Data Sharing

We Do Not Sell Your Data

We do not sell, license, or share your personal data with advertising networks, data brokers, or for advertising measurement purposes.

Service Providers We Use

Amazon Web Services (cloud hosting, EU/US), Firebase Analytics and Crashlytics (app analytics and crash reporting, USA), Firebase Cloud Messaging (push notifications, USA), Google Analytics (website analytics, USA), HelpScout (customer support, USA), Postmark (transactional emails, USA), Meta Facebook Pixel (advertising attribution, website only, USA), Ip2Location (IP geolocation, Singapore), Google reCAPTCHA (bot protection, USA).

All US-based service providers are certified under the EU-US Data Privacy Framework. All providers are bound by data processing agreements.

How We Share Your Data with Survey Partners

When we match you with a survey from a partner, we share limited data: internal panelist ID (not your name or email), country, age range, gender, device type, and IP address. We sometimes share region/state, household size, employment status, and education level when surveys have specific requirements. We never share your email address, name, phone number, or government ID with survey partners.

Our survey partners include Cint AB (Stockholm, Sweden), Lucid Holdings LLC (New Orleans, USA), and PureSpectrum Inc. (USA). Each acts as an independent controller for surveys conducted through their marketplace.

5. Profiling and Automated Decision-Making

We use profiling to match you with relevant surveys based on your demographic profile and participation history. This helps reduce irrelevant invitations and improves research quality. Legal Basis: Legitimate Interest (GDPR Art. 6(1)(f)).

You have the right to object to profiling under GDPR Art. 21. If you object, we will stop using your profile data for automated survey matching. You will still be able to use your account, but this may result in fewer or no survey invitations. Contact privacy@tgmpanel.com to exercise this right.

Profile factors used for matching: age group, gender, country, region/postcode, household composition, employment status, and education level. Matching does not use sensitive personal data unless you have separately consented.

6. International Transfers

Your data may be transferred to countries outside your residence, including the United States and Singapore.

Most US-based service providers are certified under the EU-US Data Privacy Framework (DPF), providing a valid transfer mechanism under GDPR. We also maintain EU Standard Contractual Clauses (SCCs) as a fallback. For transfers to Singapore, we rely on SCCs.

7. Data Retention

• Account and profile data: Duration of account + 12 months after deletion • IP addresses and login history: Duration of account + 12 months • Survey responses: Anonymised within 24 months of collection • Points and rewards: Points expire after 6 months of inactivity • Error logs: 90 days • Analytics data: Retained by Google for 14 months • Marketing cookies: 90 days • Support messages: Duration of account + 12 months

Inactive accounts: Accounts with no login or survey activity for 12 consecutive months will be scheduled for deletion. We will send a notice at least 30 days before deletion.

8. Cookies and Tracking Technologies

We use cookies and similar technologies on our Website. When you first visit, you are presented with a cookie consent banner that allows you to choose which categories you accept. Non-essential cookies are not set until you give affirmative consent.

Cookie categories: Essential (login, security — no consent required), Functional (language preferences — no consent required), Analytics (Google Analytics — consent required), Marketing (Facebook Pixel — consent required).

You may withdraw your cookie consent at any time by clicking "Cookie Settings" in the website footer or by contacting privacy@tgmpanel.com.

9. Your Privacy Rights

Depending on your location, your rights include: Access (request a copy of your data), Correction (correct inaccurate data), Deletion (request deletion of your data), Portability (receive data in portable format), Objection (object to certain processing), Withdraw consent (at any time, without affecting prior processing), and Lodge a complaint with a supervisory authority (Art. 77 GDPR).

How to Exercise Your Rights

Email: privacy@tgmpanel.com In-app: Settings > Privacy Website: Profile settings > Privacy We respond within 30 days (GDPR) or 45 days (CCPA).

10. Account Deletion

You can delete your account: In-app (Settings > Account > Delete Account), Website (Profile > Account Settings > Delete Account), or Email (privacy@tgmpanel.com).

Before deletion is finalised, we will remind you of your current points balance and you may redeem eligible points. Consequences: forfeiture of remaining unredeemed points, removal from all panels, data deleted within 30 days.

11. Children's Privacy

TGM Panel is intended exclusively for users aged 18 or older. Our Services are not directed at, designed for, or intended to be used by children under the age of 18.

We implement age verification measures including registration date-of-birth gate, age validation against profile data, and account review for suspected underage users. We do not knowingly collect personal information from children under 13 (COPPA compliance).

12. Data Security

We implement appropriate security measures including encryption in transit (HTTPS/TLS) and at rest, access controls, security monitoring and logging, regular security assessments, and employee training on data protection.

13. Region-Specific Disclosures

California Residents (CCPA/CPRA)

Your California rights include: right to know what data we collect, right to delete your data, right to correct inaccurate data, right to opt-out (we don't sell data), and right to non-discrimination. To exercise rights: Email privacy@tgmpanel.com with subject "California Privacy Request".

EU/UK Residents (GDPR)

To lodge a complaint, contact your local supervisory authority. UK: Information Commissioner's Office (ico.org.uk). EU: Your local data protection authority.

Contact Us

TGM Research Pte. Ltd. 6001 Beach Road, #22-01 Golden Mile Tower Singapore 199589

General privacy inquiries: privacy@tgmpanel.com Response time: Within 30 days

Data Protection Officer

TGM Research has designated Marcin Kaleta as Data Protection Officer in accordance with GDPR Article 37. The DPO is an external legal counsel provided by IT Law Solutions Sp. z o.o. and exercises his supervisory function independently of TGM Research management.

Data subjects may contact the DPO directly on any matter relating to the processing of their personal data or the exercise of their rights under the GDPR.

Email: privacy@tgmpanel.com Post: Data Protection Officer — Marcin Kaleta c/o IT Law Solutions Sp. z o.o. ul. Taneczna 78 02-829 Warszawa, Poland

This Privacy Policy is effective from January 1, 2026. © 2026 TGM Research Pte. Ltd. All rights reserved.