Privacy policy

Purgio ("we", "us") provides a content-protection service for creators: we scan the web for leaked or stolen content, verify matches with you, and file takedown requests on your behalf. For anything in this policy you can reach us at info@purgio.com.

We only collect what the service needs to work:

• Account data — your email address, display name and login credentials.
• Protection profile — the names, handles and reference photos you choose to give us so we can recognise your content and likeness.
• Scan results — links and metadata of content our scanners find that may match your profile, and the takedown status of each match.
• Verification data — proof that you own the accounts you ask us to protect, and (if you choose identity verification) your government ID and a selfie.
• Biometric data — from your reference photos and identity selfie we derive facial-recognition data used only to confirm a match is really you.
• Billing data — handled by our payment processor Stripe; we never see or store your full card details.

To confirm a match is genuinely you — and, optionally, to verify your identity — we process facial-recognition data derived from your reference photos and, if you complete identity verification, a photo of your ID document and a selfie. Under the GDPR this is "special category" (biometric) data, and we only process it on the basis of your explicit consent, which you give when you upload reference photos or start identity verification.

Identity verification is carried out by our processor Veriff(Veriff OÜ), who checks your document and selfie and returns only the result to us. We store the recognition data (mathematical face descriptors) solely to match content to you; we never use it to identify you elsewhere or share it for any other purpose. Delete your account and this data is erased along with your reference photos.

• To find content that matches your names, handles and reference photos.
• To verify matches (face & watermark recognition) so we only act on content that is really yours.
• To prepare and file takedown notices you have approved.
• To operate your account, subscription and support cases.

We do not sell your data, we do not use your reference material for anything other than protecting you, and we never publish or expose anything you share with us.

We share data only with service providers needed to run Purgio (hosting, payment processing via Stripe, email delivery) and, when you approve a takedown, with the parties a takedown notice legally has to be sent to (such as the hosting provider or search engine). Notices contain only what is required to identify the infringing content.

We keep your data for as long as you have an account. You can delete your account yourself at any time from your settings — this immediately removes your protection profile, scan results, reference photos and biometric recognition data, and cancels any active subscription. We complete erasure within 30 days, except where we are legally required to keep records (for example invoices).

Data is encrypted in transit, stored with access controls in the EU, and reference material is only accessible to the systems and people that need it to operate the service.

Under the GDPR you can ask us to access, correct, export or delete your personal data, and you can object to or restrict processing. Email info@purgio.com and we will respond within 30 days. You also have the right to lodge a complaint with your data-protection authority.

If we change this policy we will update the date at the top and, for material changes, notify you by email or in the app.