This Privacy Policy ("Policy") describes how TakeDex, an Ohio limited liability company ("TakeDex," "we," "us," or "our"), collects, uses, discloses, and protects personal information in connection with the TakeDex platform, website, and all related services (collectively, the "Services").
This Policy applies to all users of the Services, including creators who subscribe to content protection, individuals who submit non-consensual intimate imagery (NCII) removal requests, agencies managing multiple creators, and visitors to our website. It should be read together with our Terms of Service, which it incorporates by reference.
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please do not use the Services.
We collect the categories of personal information described below. The specific information we hold about you depends on how you interact with the Services.
| Category | Examples | Source |
|---|---|---|
| Account & contact data | Name, email address, password (hashed), agency or business name, billing address | You, at registration |
| Identity verification data | Legal name, date of birth, government ID images, selfie for liveness check | You, during KYC verification |
| Content & protection data | Reference images/videos you upload, usernames, profile URLs, and the source URLs of detected matches | You and our scanning systems |
| Biometric data (optional) | Facial geometry templates derived from images, used only if you opt in to FaceMatch | You, with explicit consent |
| Payment data | Card type, last four digits, billing token (full card numbers are handled by our processor, not stored by us) | Our payment processor |
| Usage & device data | IP address, browser type, device identifiers, pages viewed, actions taken in the dashboard | Automatically, via cookies/logs |
| Communications | Support tickets, emails, and the contents of forms you submit | You |
We do not require you to provide copies of the infringing content itself when submitting takedown or NCII requests; URLs and identifiers are generally sufficient.
We use personal information only for legitimate purposes connected to operating and improving the Services, including to:
Where the EU/UK General Data Protection Regulation (GDPR) or similar laws apply, we rely on the following legal bases to process your personal information:
FaceMatch is an optional feature that uses facial recognition to find your likeness across monitored sources. It is strictly opt-in and requires your separate, affirmative consent, distinct from creating an account.
When you enable FaceMatch, we derive a mathematical facial-geometry template from the images you provide. This biometric identifier is:
You may withdraw FaceMatch consent and request permanent deletion of your biometric data at any time through your account settings or by emailing support@takedex.com. We will permanently delete your biometric templates within 30 days of a valid request, subject to any narrow legal retention obligations. We process biometric data in accordance with applicable biometric privacy laws.
Because we file legal notices as your authorized agent, we are required to verify that you are a real, identifiable adult who holds the rights you assert. During verification we collect your legal name, date of birth, address, government-issued photo ID, and a selfie for liveness comparison.
Identity verification documents are encrypted in transit (TLS 1.3) and at rest (AES-256), are accessible only to authorized compliance personnel, and are retained only as long as required by law or our compliance obligations. They are never sold or shared except where legally compelled. You may request deletion of this data by contacting support@takedex.com, subject to applicable retention requirements. See Section 20 of our Terms of Service for the full legal basis.
We share personal information only in the limited circumstances below. We never sell your data.
We use cookies and similar technologies to keep you logged in, remember your preferences, secure the platform, and understand how the Services are used. We distinguish between:
You can control non-essential cookies through our consent banner or your browser settings. We honor recognized opt-out signals, including Global Privacy Control (GPC), where applicable.
We retain personal information only as long as necessary for the purposes described in this Policy:
When data is no longer needed, we securely delete or irreversibly anonymize it.
We implement administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls and least-privilege permissions, logical separation of sensitive data, and ongoing monitoring.
No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify you and the appropriate authorities as required by applicable law.
Depending on where you live, you may have some or all of the following rights regarding your personal information:
To exercise any other right, or if you can't access your account, email support@takedex.com. We will verify your identity before fulfilling a request and respond within the timeframe required by applicable law (generally 30–45 days). You may also have the right to lodge a complaint with your local data protection authority. California residents may exercise rights under the CCPA/CPRA, and EU/UK residents under the GDPR.
TakeDex is based in the United States, and we process and store information in the U.S. and in countries where our service providers operate. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in a country with different data protection laws.
Where we transfer personal information from the EU, UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or other lawful transfer mechanisms.
The Services are intended solely for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.
Reports involving intimate imagery of a person under 18 are treated as the highest priority and are reported to the National Center for Missing & Exploited Children (NCMEC) as required by law. Do not upload imagery of minors to TakeDex; report it directly to the NCMEC CyberTipline.
The Services interact with and may link to third-party platforms and websites that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you use.
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and notify you by email or through the Services. We encourage you to review this Policy periodically. Your continued use of the Services after the effective date of any change constitutes acceptance of the revised Policy.
If you have questions, concerns, or requests relating to this Policy or your personal information, please contact us at: