Privacy Policy.

Last updated: 3/6/2026

1. Data We Collect

Tuppli is a security company. We collect the absolute minimum data required to protect your content and run your takedowns:

  • Account Data: Email address, billing information, and authentication credentials.
  • Forensic Telemetry: Images or videos you upload. These are immediately processed into perceptual hashes (mathematical representations) and discarded unless you explicitly request vault storage for legal evidence.
  • Enforcement Logs: IP addresses, metadata, and communications related directly to infringing websites and hosts during the DMCA process.

Zero-Knowledge Architecture

Your unprotected source files are never stored in plain text. Once fingerprinted, your media is represented purely as un-reversible mathematical tensors. We cannot view your content, and neither can an attacker.

2. How We Use Your Data

We do not sell, rent, or monetize your data. It is used exclusively for:

  • Executing localized and global distributed web scans.
  • Issuing legally-binding DMCA notices to third-party hosts on your behalf.
  • Improving our threat intelligence and neural matching models.
  • Processing your payments and managing your subscription lifecycle.

3. Data Retention and Deletion

You have the right to be forgotten. If you delete your Tuppli account, all your neural hashes, scans, enforcement logs, and account metadata are permanently cryptographically shredded within 72 hours. Backup archives are cycled out completely within 30 days. No exceptions.