Privacy policy
Last updated:
We wrote this policy in plain language. Takkad checks your file to give you a preliminary triage result and does not use it for anything else. We collect as little data as we can, and we delete the file automatically after 24 hours.
What we collect
- The file you upload (an image, audio or video), for the check only.
- The file’s digital fingerprint (SHA-256) and the upload time, to document that the file did not change.
- The result of the check and the signals it was built on.
- Your email address when you sign in with a Google account, and a display name if you choose to add one.
- A visitor without an account is asked for no identifying data. An anonymous session is created for checking only.
- Technical data produced by hosting and protection, such as the connection address (IP), to protect the service from abuse and to apply usage limits.
Why we use it
We use the file for the check only. We never use it to train models without your separate, explicit consent, and you can withdraw it at any time.
We use your email to sign you in and keep your history of checks, and the technical data to protect the service.
How long we keep it
- The file you uploaded: 24 hours.
- A visitor’s result, without an account: 24 hours.
- An anonymous visitor session: 30 days.
- Files of cases referred to the lab: until the case is closed, then 30 days.
- Usage counters: 90 days.
- The audit log: permanent, and it never contains the content of files.
Who processes data with us
We rely on providers to run the service, and we never sell your data:
- Vercel: hosting the site and the analysis functions.
- Supabase: the database, authentication and file storage.
- Google: signing in with a Google account.
- Cloudflare Turnstile: checking that a visitor is not a bot.
- Gemini from Google: wording the explanation of the result in plain language when it is turned on. It never receives your file or any personal data, only numbers and labels.
Where data is kept
During the competition phase data is kept in the nearest region Supabase offers, which is currently in Europe (Frankfurt). Before we contract with any organization we will move hosting to a region inside the Kingdom.
Your rights
Ask for this from your account page when it is available, or write to us at the address below.
- To see your data and export it (JSON).
- To correct your display name.
- To delete your data.
- To withdraw your training consent at any time.
Protection
The connection is encrypted, each user’s data is separated from everyone else’s by rules inside the database, and sensitive actions are written to an audit log that cannot be changed. If an incident affects your data we notify the competent authority (SDAIA) within 72 hours, and those affected when needed.
Changes to this policy
We may update this policy, and we put the date of the last update at the top of the page.
Contact
For any question about this page or to use your rights, write to us at info@takkad.com