Privacy Policy

Last updated: May 24, 2026

1. Introduction

As used in this Privacy Policy, "Tarkle," "we," "us," or "our" means:

  • Tarkle, Inc., a Wyoming corporation with a registered address at 1309 Coffeen Avenue, Suite 15023, Sheridan, Wyoming 82801, United States, if you are located in the United States; or
  • Tarkle Limited, a company incorporated in Hong Kong with a registered address at Unit B, 11/F Yam Tze Commercial Building, 23 Thomson Road, Wan Chai, Hong Kong, if you are located anywhere else in the world.

Tarkle operates tarkle.com and all Tarkle products including Send, Portal, Crew, and Pentler at pentler.com. The applicable Tarkle entity is the data controller for personal data collected through the Services.

This Privacy Policy explains how we collect, use, protect, and share your information when you use our Services. It applies to tarkle.com, pentler.com, and all related services operated by Tarkle.

2. What information we collect

2.1 Account information

When you create an account, we collect your name, email address, company name, and billing information. You may also provide optional information such as job title and phone number.

2.2 Files and content

We store files and content you upload to the platform, including documents, images, videos, and any other files you choose to share or manage through Tarkle. This content remains your property at all times.

2.3 Contractor data (Crew)

When you add contractors to your account in Crew, you may input contractor names, contact information, payment details, contract terms, and work-related information. We do not process or hold contractor payments. We only help you track and organise this information.

2.4 Project data (Pentler)

Briefs, files, brand assets, feedback, and specifications you submit through your Pentler project portal.

2.5 Usage data

We automatically collect information about how you interact with our platform, including pages visited, features used, time spent, browser type, device information, IP address, and referring URLs.

2.6 Cookies and tracking

We use essential cookies for authentication and platform functionality, and privacy-respecting analytics tools to understand usage patterns. See our Cookie Policy for full details.

3. How we use your information

We use your information to:

  • Provide, operate, and maintain the Services.
  • Process your transactions and manage your account.
  • Send important updates, security alerts, and support messages.
  • Respond to your questions and provide customer support.
  • Analyse usage patterns to improve the platform and develop new features.
  • Detect, prevent, and address security issues or fraudulent activity.
  • Comply with legal obligations and enforce our Terms of Service.
  • Send marketing communications only if you have opted in.

4. Data storage and security

Your data is hosted on Cloudflare's infrastructure using enterprise-grade data centres in the European Union and United States. In the event of a primary infrastructure failure, we maintain a backup system through Backblaze's data centres, managed by SimpleBackups using encrypted transfer protocols.

Our security measures include encryption of data in transit and at rest, regular security audits, strict access controls, automated backup systems, 24/7 monitoring, and secure authentication protocols. For a detailed breakdown of our security posture, visit our Security page.

5. Data retention

We retain your data for as long as your account is active or as needed to provide you with the Services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Full data deletion schedules are set out in the Terms of Service.

6. How we share your information

We never sell your data. We only share your information in the following circumstances.

6.1 Service providers

We work with trusted sub-processors who help us operate the platform. These providers are bound by data protection agreements and may only access data necessary for their specific functions. See the sub-processors table in Section 11.

6.2 Legal requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety. We will notify affected users of government data requests to the extent permitted by law.

6.3 Business transfers

If Tarkle is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your options.

6.4 With your consent

We may share your information with third parties when you explicitly give us permission.

7. Your privacy rights

You have the following rights regarding your personal data:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Update or correct inaccurate information.
  • Deletion — Request deletion of your personal data.
  • Export — Download your data in a portable format.
  • Opt-out — Unsubscribe from marketing communications at any time.
  • Object — Object to certain types of data processing.
  • Restrict — Request that we limit how we use your data.

To exercise any of these rights, please visit our contact page. We will respond within 30 days.

8. International data transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure that international data transfers comply with applicable data protection laws, including GDPR, through Standard Contractual Clauses approved by the European Commission, adequacy decisions where applicable, and other appropriate safeguards.

9. GDPR compliance

Tarkle is committed to GDPR compliance. We process personal data under the following legal bases:

  • Contract — Processing necessary to provide the Services to you.
  • Legitimate interests — Improving our platform, security monitoring, and preventing fraud.
  • Consent — Where you have given explicit permission, for example for marketing communications.
  • Legal obligation — Where required by applicable law.

If you are located in the EU or EEA, you have the rights listed above plus the right to lodge a complaint with your local supervisory authority. If you need a Data Processing Agreement, please reach out through our contact page and we will arrange one.

10. California privacy rights (CCPA/CPRA)

Tarkle does not sell your personal information and does not share it for cross-context behavioural advertising. California residents have the right to know what personal information we collect and how it is used, the right to request deletion, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. To submit a verifiable consumer request, please visit our contact page.

11. Sub-processors

Sub-processorLegal namePurposeLocation
CloudflareCloudflare, IncCDN, DDoS protection, primary infrastructureUSA / EU
VercelVercel, Inc.Application hosting and deploymentUSA
SupabaseSupabase, Inc.Database and authenticationUSA
BackblazeBackblaze, Inc.Redundant cloud storage and backupsUSA / EU
SimpleBackupsUnion Lab SRLAutomated backup orchestrationBelgium
StripeStripe, Inc.Payment processingUSA
SanitySanity ASContent management systemNorway
Vercel AnalyticsVercel, Inc.Web analytics and performance monitoringUSA
Google AnalyticsGoogle LLCWeb analytics (where applicable)USA
ResendPlus Five Five, Inc.Transactional emailUSA
Sinch MailgunSinch ABTransactional email (secondary)Sweden
EmailitFunFirst s.r.o.Transactional email (secondary)Czech Republic
LoopsAstrodon CorporationMarketing emailUSA
DoneDoneDoneDone, LLCCustomer support and help deskUSA
AnthropicAnthropic PBCAI featuresUSA
OpenAIOpenAI, LLCAI featuresUSA
Google WorkspaceGoogle LLCInternal email, calendar, docsUSA
VeriffVeriff OÜIdentity and business verification (Crew)Estonia
SignatureAPISignature API, Inc.Electronic signatures (Crew)USA
PartneroPartnero, Inc.Affiliate and referral programsUSA
LinearLinear Orbit, Inc.Issue trackingUSA
SlackSlack Technologies, LLCInternal team communicationUSA
GitHubGitHub, Inc.Source code hostingUSA

12. Reseller accounts and sub-client data

Send includes a reseller plan that allows businesses to operate a white-label file sharing platform for their own clients. When you operate a reseller platform, you act as the data controller for your clients' personal data. Tarkle acts as a data processor on your behalf. As a reseller, you are responsible for maintaining your own privacy policy for your clients, obtaining required consents, and handling their data requests.

Portal includes a built-in reseller feature for agencies to onboard sub-accounts. The same data controller principle applies — you are responsible for your sub-accounts' data.

13. Children's privacy

Tarkle is a business-to-business platform and is not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have done so, we will delete that information promptly.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the last updated date and, for significant changes, by email.

Contact

If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to request a Data Processing Agreement, we are here to help. Please reach out through our contact page or write to us at the address below. We respond to all privacy-related enquiries within 30 days.

Tarkle.com
1309 Coffeen Avenue, Suite 15023
Sheridan, WY 82801
United States