This Privacy Policy ("Policy") describes how TakeDex, an Ohio limited liability company ("TakeDex," "we," "us," or "our"), collects, uses, discloses, and protects personal information in connection with the TakeDex platform, website, and all related services (collectively, the "Services").
This Policy applies to all users of the Services, including creators who subscribe to content protection, individuals who submit non-consensual intimate imagery (NCII) removal requests, agencies managing multiple creators, and visitors to our website. It should be read together with our Terms of Service, which it incorporates by reference.
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Services.
We collect the categories of personal information described below. The specific information we hold about you depends on how you interact with the Services.
| Category | Examples | Source |
|---|---|---|
| Account & contact data | Name, email address, password (hashed), agency or business name, billing address | You, at registration |
| Identity verification data | Legal name, date of birth, government ID images, selfie for liveness check | You, during KYC verification |
| Content & protection data | Reference images/videos you upload, usernames, profile URLs, and the source URLs of detected matches | You and our scanning systems |
| Biometric data (optional) | Facial geometry templates derived from images, used only if you opt in to FaceMatch | You, with explicit consent |
| Payment data | Card type, last four digits, billing token (full card numbers are handled by our processor, not stored by us) | Our payment processor |
| Usage & device data | IP address, browser type, device identifiers, pages viewed, actions taken in the dashboard | Automatically, via cookies/logs |
| Communications | Support tickets, emails, and the contents of forms you submit | You |
| Evidence & case data | Screenshots and archival captures of pages and messages, perceptual fingerprints (hashes) of images and video keyframes, notice and escalation records, and correspondence with platforms, hosts, registrars, and regulators | Our systems, and material you or we capture |
| Third-party account access (optional) | Credentials or one-time codes for your own social, messaging, or email accounts, where you choose to provide them so we can capture evidence of harassment or abuse | You, by email, entirely at your option |
| Third-party personal data | Information about people who are not TakeDex users — for example a harasser’s username, profile details, messages, or images they sent you — captured and retained as evidence | Captured from public pages, or from your account at your direction |
We do not require you to provide copies of the infringing content itself when submitting takedown or NCII requests; URLs and identifiers are generally sufficient.
We use personal information only for legitimate purposes connected to operating and improving the Services, including to:
Where the EU/UK General Data Protection Regulation (GDPR) or similar laws apply, we rely on the following legal bases to process your personal information:
FaceMatch is an optional feature that uses facial recognition to find your likeness across monitored sources. It is strictly opt-in and requires your separate, affirmative consent, distinct from creating an account.
When you enable FaceMatch, we derive a mathematical facial-geometry template from the images you provide. This biometric identifier is:
Processing providers. To run a FaceMatch search we send your reference image(s) and candidate images to the providers that perform the matching — including image-search services (to find where your likeness may appear) and facial-recognition processing, which may be self-hosted by us or operated by a vetted vendor under contract. These providers process the images only to deliver the feature and are not permitted to use them for any other purpose. We do not otherwise disclose your biometric data except as required by law.
You may withdraw FaceMatch consent and permanently delete your biometric data at any time — instantly from your dashboard (FaceMatch → Delete my face data), through your account settings, or by emailing support@takedex.com. Self-service deletion is immediate; emailed requests are completed within 30 days, subject to any narrow legal retention obligations. We process biometric data in accordance with applicable biometric privacy laws (including Illinois BIPA and the GDPR where they apply).
Because we file legal notices as your authorized agent, we are required to verify that you are a real, identifiable adult who holds the rights you assert. During verification we collect your legal name, date of birth, address, government-issued photo ID, and a selfie for liveness comparison.
Identity verification documents are encrypted in transit (TLS 1.3) and at rest (AES-256), are accessible only to authorized compliance personnel, and are retained only as long as required by law or our compliance obligations. They are never sold or shared except where legally compelled. You may request deletion of this data by contacting support@takedex.com, subject to applicable retention requirements. See Section 20 of our Terms of Service for the full legal basis.
We share personal information only in the limited circumstances below. We never sell your data.
We use cookies and similar technologies to keep you logged in, remember your preferences, secure the platform, and understand how the Services are used. We distinguish between:
You can control non-essential cookies through our consent banner or your browser settings. We honor recognized opt-out signals, including Global Privacy Control (GPC), where applicable.
We retain personal information only as long as necessary for the purposes described in this Policy:
When data is no longer needed, we securely delete or irreversibly anonymize it.
We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls and least-privilege permissions, logical separation of sensitive data, and ongoing monitoring.
Where you choose to send us credentials for one of your own accounts, we ask that you send them by email rather than through your dashboard, so they are not retained in your account record on the platform. Such credentials are held in encrypted storage maintained separately from the Services, are made available only to the personnel working on your matter, and the source email is deleted once they have been transferred. We remove them when your matter closes or when you ask us to. This describes our current practice and is not a guarantee of any particular security outcome.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.
Depending on where you live, you may have some or all of the following rights regarding your personal information:
To exercise any other right, or if you can't access your account, email support@takedex.com. We will verify your identity before fulfilling a request and respond within the timeframe required by applicable law (generally 30–45 days). You may also have the right to lodge a complaint with your local data protection authority. California residents may exercise rights under the CCPA/CPRA, and EU/UK residents under the GDPR.
TakeDex is based in the United States, and we process and store information in the U.S. and in countries where our service providers operate. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in a country with different data protection laws.
Where we transfer personal information from the EU, UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.
The Services are intended solely for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.
Reports involving intimate imagery of a person under 18 are treated as the highest priority and are reported to the National Center for Missing & Exploited Children (NCMEC) as required by law. Do not upload imagery of minors to TakeDex; report it directly to the NCMEC CyberTipline.
The Services interact with and may link to third-party platforms and websites that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you use.
Delivering the Services necessarily means handling personal information about people who do not hold a TakeDex account — most often someone who has uploaded a user’s content, or who is harassing or abusing them. This may include their username, profile information, posts, messages, and any images they have sent, together with the URLs where the material appears.
We process that information to establish and preserve evidence, to substantiate takedown and NCII notices, to support abuse and harassment casework, and to comply with legal obligations. Where the GDPR or a similar law applies, we rely on legitimate interests — our users’ interest in removing unlawful or non-consensual material about them, and in documenting abuse directed at them — and, for criminal matters, on the substantial public interest in preventing and reporting crime. We do not use this information for advertising or profiling, and we do not sell it.
We keep it only as long as the related matter is open, plus any period we must retain it for legal, evidentiary, or regulatory reasons, and then delete it. If you believe we hold information about you and you are not a TakeDex user, you may contact us at support@takedex.com to ask what we hold and to exercise the rights described in Section 11. We may need to withhold material where disclosure would prejudice an active investigation, compromise evidence, or put another person at risk.
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you by email or through the Services. We encourage you to review this Policy periodically. Your continued use of the Services after the effective date of any change constitutes acceptance of the revised Policy.
If you have questions, concerns, or requests relating to this Policy or your personal information, please contact us at: