<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width,initial-scale=1" />
  <meta name="theme-color" content="#0EA5E9" />

  <link rel="icon" type="image/png" sizes="32x32" href="/public/og/favicon-32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/public/og/favicon-16.png">
  <link rel="apple-touch-icon" sizes="48x48" href="/public/og/favicon-48.png">
  <title>Privacy Policy — takedowns</title>
  <meta name="description" content="Privacy policy for takedowns: what data we collect, how we use it, how long we keep it, and the rights you have. Plain English, no legalese theatre." />
  <meta name="robots" content="index, follow, max-snippet:-1" />
  <link rel="canonical" href="https://takedowns.vesamuni.com/privacy" />

  <meta property="og:type" content="website" />
  <meta property="og:site_name" content="takedowns by vesamuni" />
  <meta property="og:title" content="Privacy Policy — takedowns" />
  <meta property="og:description" content="What data we collect, how we use it, how long we keep it, and the rights you have." />
  <meta property="og:url" content="https://takedowns.vesamuni.com/privacy" />
  <meta property="og:image" content="https://takedowns.vesamuni.com/public/og/default.png" />

  <link rel="manifest" href="/public/manifest.json" />
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,300;0,9..40,400;0,9..40,500;0,9..40,600;1,9..40,400&family=Instrument+Serif:ital@0;1&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
  <link rel="stylesheet" href="/public/css/glass.css?v=2-light" />
  <link rel="stylesheet" href="/public/css/marketing.css?v=4-light" />
  <script src="/public/js/marketing-css-fix.js" defer></script>

  <script type="application/ld+json">
  {
    "@context": "https://schema.org",
    "@type": "WebPage",
    "name": "Privacy Policy — takedowns",
    "url": "https://takedowns.vesamuni.com/privacy",
    "description": "Privacy policy for takedowns.",
    "lastReviewed": "2026-06-25",
    "publisher": {
      "@type": "Organization",
      "name": "takedowns",
      "url": "https://takedowns.vesamuni.com/"
    }
  }
  </script>
  <script type="application/ld+json">
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://takedowns.vesamuni.com/" },
      { "@type": "ListItem", "position": 2, "name": "Privacy Policy", "item": "https://takedowns.vesamuni.com/privacy" }
    ]
  }
  </script>
</head>
<body>

  <div class="radial-glow"></div>
  <div class="grid-bg"></div>

  <!-- Mobile Overlay Menu -->
  <div class="mobile-menu-overlay" id="mobileMenu" aria-hidden="true" role="dialog">
    <div class="mobile-menu-section">
      <div class="mobile-menu-section-label">Main</div>
      <div class="mobile-menu-links">
        <a href="/">Home</a>
        <a href="/features">Features</a>
        <a href="/pricing">Pricing</a>
      </div>
    </div>
    <div class="mobile-menu-section">
      <div class="mobile-menu-section-label">For You</div>
      <div class="mobile-menu-links">
        <a href="/for-survivors">For Survivors</a>
        <a href="/for-creators">For Creators</a>
      </div>
    </div>
    <div class="mobile-menu-section">
      <div class="mobile-menu-section-label">Resources</div>
      <div class="mobile-menu-links">
        <a href="/how-it-works">How It Works</a>
        <a href="/who-it-helps">Who It Helps</a>
        <a href="/blog">Blog</a>
      </div>
    </div>
    <div class="mobile-menu-actions">
      <a href="/login" class="btn btn-secondary" style="width: 100%;">Sign in</a>
      <a href="/register" class="btn btn-primary" style="width: 100%; background-color: var(--fg); color: var(--bg);">Create account</a>
    </div>
    <div class="mobile-menu-footer">
      <a href="/privacy">Privacy</a>
      <a href="/terms">Terms</a>
      <a href="/cookies">Cookies</a>
      <a href="/dmca">DMCA</a>
      <a href="/acceptable-use">Acceptable Use</a>
    </div>
  </div>

  <!-- Floating Navigation -->
  <div class="nav-wrapper" id="navWrapper">
    <nav class="nav-pill" id="navPill" aria-label="Main Navigation">
      <a href="/" class="brand" aria-label="takedowns home">
        <div class="brand-logo" aria-hidden="true">
          <img src="/public/og/logo-mark.png" alt="" width="32" height="32" />
        </div>
        <span>takedowns</span>
      </a>
      <div class="nav-links">
        <a href="/">Home</a>
        <a href="/features">Features</a>
        <div class="nav-item-dropdown" data-dropdown>
          <button type="button" class="nav-trigger" aria-haspopup="true" aria-expanded="false">For You</button>
          <div class="nav-dropdown" role="menu">
            <a href="/for-survivors" role="menuitem">
              <span class="nav-dropdown-title">For Survivors</span>
              <span class="nav-dropdown-desc">Confidential, self-serve recovery</span>
            </a>
            <a href="/for-creators" role="menuitem">
              <span class="nav-dropdown-title">For Creators</span>
              <span class="nav-dropdown-desc">OnlyFans, Fansly, webcam protection</span>
            </a>
          </div>
        </div>
        <div class="nav-item-dropdown" data-dropdown>
          <button type="button" class="nav-trigger" aria-haspopup="true" aria-expanded="false">Resources</button>
          <div class="nav-dropdown" role="menu">
            <a href="/how-it-works" role="menuitem">
              <span class="nav-dropdown-title">How It Works</span>
              <span class="nav-dropdown-desc">Five steps from reference to removal</span>
            </a>
            <a href="/who-it-helps" role="menuitem">
              <span class="nav-dropdown-title">Who It Helps</span>
              <span class="nav-dropdown-desc">Survivors, advocates, agencies, creators</span>
            </a>
            <a href="/blog" role="menuitem">
              <span class="nav-dropdown-title">Blog</span>
              <span class="nav-dropdown-desc">Practical guides and case studies</span>
            </a>
          </div>
        </div>
        <a href="/pricing">Pricing</a>
      </div>
      <div class="nav-actions">
        <a href="/login" class="btn btn-text" style="color: var(--fg-secondary); padding: 8px 16px;">Sign in</a>
        <a href="/register" class="btn btn-primary">Create account</a>
      </div>
      <button class="burger-btn" id="burgerBtn" aria-label="Toggle Menu" aria-expanded="false">
        <svg viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">
          <line x1="3" y1="6" x2="21" y2="6" class="line-top"></line>
          <line x1="12" y1="12" x2="21" y2="12" class="line-mid"></line>
          <line x1="3" y1="18" x2="21" y2="18" class="line-bot"></line>
        </svg>
      </button>
    </nav>
  </div>

  <section class="container" style="padding-top: 140px; padding-bottom: 24px; max-width: 760px;">
    <span class="hero-label">Legal</span>
    <h1 class="hero-title" style="font-size: clamp(32px, 4.4vw, 46px); line-height: 1.15; margin-bottom: 1rem;">Privacy Policy</h1>
    <p class="section-desc" style="margin: 0;">Last updated: 25 June 2026. Plain English. We will email you at least 30 days before any material change.</p>
  </section>

  <article class="container" style="padding-top: 0; padding-bottom: 80px; max-width: 760px; color: var(--fg-secondary); font-size: 16px; line-height: 1.7;">
    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2rem 0 0.75rem;">1. What this is, and isn't</h2>
    <p>This policy describes what data takedowns collects when you use takedowns.vesamuni.com, the takedowns web app, and related services. It is written in plain English because the people who need to read it most are often the people with the least patience for legalese.</p>
    <p>takedowns is operated by Vesamuni Cybersecurity ("we", "us", "our"). If you have questions about anything in this document, email <a href="/contact">our team</a> and a human will reply.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">2. What we collect</h2>
    <p><strong style="color: var(--fg);">Account data.</strong> Email address, display name, and password hash. We do not require a real name, phone number, or identity verification. The Free plan is genuinely pseudonymous.</p>
    <p><strong style="color: var(--fg);">Case data.</strong> The fingerprints, URLs, and metadata you submit. Perceptual fingerprints are derived in your browser before transmission &mdash; we never see your original media unless you explicitly upload it (and we recommend you do not).</p>
    <p><strong style="color: var(--fg);">Dispatch data.</strong> Recipients, timestamps, and notice bodies for every takedown we send on your behalf.</p>
    <p><strong style="color: var(--fg);">Payment data.</strong> Processed by Stripe. We never see your card number. We store only the last four digits, the card brand, and the billing email you used.</p>
    <p><strong style="color: var(--fg);">Operational telemetry.</strong> Server logs (IP address truncated to /24, user agent, request path, status code) retained for 30 days for security and debugging.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">3. What we do not collect</h2>
    <p>We do not collect biometric data. We do not sell your data to third parties. We do not run third-party advertising trackers. We do not fingerprint your device for cross-site tracking.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">4. How we use what we collect</h2>
    <ul style="margin: 0.5rem 0 0.5rem 1.5rem;">
      <li>To deliver the service you signed up for (case management, scans, dispatch, monitoring).</li>
      <li>To send you service-critical email: account verification, dispatch confirmations, security alerts.</li>
      <li>To send you product email you can opt out of at any time (release notes, tips).</li>
      <li>To respond to lawful legal process. We publish a <a href="/transparency">transparency report</a> twice a year.</li>
    </ul>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">5. How long we keep it</h2>
    <p>Account data lives until you delete your account, then is purged within 30 days. Case data lives until you delete the case. Dispatch records live for the life of the case plus 7 years, because they may be needed as evidence. Server logs auto-purge after 30 days. Financial records (transaction IDs, amounts, billing email) are kept for 7 years for tax compliance.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">6. Your rights</h2>
    <p>You can export everything we have on you from the dashboard at any time. You can delete your account, your cases, and your fingerprints with a single click. You can request an immediate hard delete that bypasses the 30-day grace window. If you are in the EEA, UK, or California, you have additional statutory rights we honour globally: access, rectification, restriction, portability, and objection.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">7. Where your data lives</h2>
    <p>Application data is hosted in Singapore and Frankfurt, with backups in a second region. Payment processing happens in Stripe's PCI-DSS Level 1 infrastructure. Email delivery is handled by a transactional email provider; we never put case content in the body of an email.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">8. Children</h2>
    <p>takedowns is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it within 24 hours.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">9. Changes to this policy</h2>
    <p>If we make a material change, we email you at least 30 days in advance and show a banner on the dashboard. Non-material changes (typo fixes, contact email updates) do not get a banner.</p>

    <h2 class="section-title" style="font-family: var(--font-editorial); font-style: italic; font-size: 1.6rem; color: var(--fg); margin: 2.5rem 0 0.75rem;">10. Contact</h2>
    <p>Email <a href="/contact">our team</a> or write to Vesamuni Cybersecurity, Sri Lanka. The data controller is Vesamuni Cybersecurity, reachable at the same address.</p>
  </article>

  <footer class="app-footer">
    <div class="container">
      <div class="footer-grid">
        <div class="footer-brand">
          <a href="/" class="brand" aria-label="takedowns home">
        <div class="brand-logo" aria-hidden="true">
          <img src="/public/og/logo-mark.png" alt="" width="32" height="32" />
        </div>
        <span>takedowns</span>
      </a>
          <p>Privacy-first platform helping survivors, advocates, agencies, and creators track, document, and request removals of non-consensual and unauthorized intimate material — including images, video, audio, and AI-generated content.</p>
        </div>
        <div class="footer-col">
          <h4>Product</h4>
          <ul>
            <li><a href="/features">Features</a></li>
            <li><a href="/how-it-works">How It Works</a></li>
            <li><a href="/pricing">Pricing</a></li>
            <li><a href="/for-survivors">For Survivors</a></li>
            <li><a href="/for-creators">For Creators</a></li>
          </ul>
        </div>
        <div class="footer-col">
          <h4>Company</h4>
          <ul>
            <li><a href="/about">About</a></li>
            <li><a href="/contact">Contact</a></li>
            <li><a href="/trust">Trust and Privacy</a></li>
            <li><a href="/blog">Blog</a></li>
          </ul>
        </div>
        <div class="footer-col">
          <h4>Legal</h4>
          <ul>
            <li><a href="/privacy">Privacy Policy</a></li>
            <li><a href="/terms">Terms of Service</a></li>
            <li><a href="/cookies">Cookie Policy</a></li>
            <li><a href="/dmca">DMCA Policy</a></li>
            <li><a href="/acceptable-use">Acceptable Use</a></li>
          </ul>
        </div>
      </div>
      <div class="footer-bottom">
        <span>&copy; 2026 takedowns. Built under Vesamuni Cybersecurity.</span>
        <div class="footer-bottom-links">
          <a href="/privacy">Privacy</a>
          <a href="/terms">Terms</a>
          <a href="/cookies">Cookies</a>
        </div>
      </div>
    </div>
  </footer>

  <script src="/public/js/marketing.js" defer></script>
</body>
</html>
