1. Introduction
As used in this Privacy Policy, "Tarkle," "we," "us," or "our" means:
- Tarkle, Inc., a Wyoming corporation with a registered address at 1309 Coffeen Avenue, Suite 15023, Sheridan, Wyoming 82801, United States, if you are located in the United States; or
- Tarkle Limited, a company incorporated in Hong Kong with a registered address at Unit B, 11/F Yam Tze Commercial Building, 23 Thomson Road, Wan Chai, Hong Kong, if you are located anywhere else in the world.
Tarkle operates tarkle.com and all Tarkle products including Send, Portal, Crew, and Pentler at pentler.com. The applicable Tarkle entity is the data controller for personal data collected through the Services.
This Privacy Policy explains how we collect, use, protect, and share your information when you use our Services. It applies to tarkle.com, pentler.com, and all related services operated by Tarkle.
2. What information we collect
2.1 Account information
When you create an account, we collect your name, email address, company name, and billing information. You may also provide optional information such as job title and phone number.
2.2 Files and content
We store files and content you upload to the platform, including documents, images, videos, and any other files you choose to share or manage through Tarkle. This content remains your property at all times.
2.3 Contractor data (Crew)
When you add contractors to your account in Crew, you may input contractor names, contact information, payment details, contract terms, and work-related information. We do not process or hold contractor payments. We only help you track and organise this information.
2.4 Project data (Pentler)
Briefs, files, brand assets, feedback, and specifications you submit through your Pentler project portal.
2.5 Usage data
We automatically collect information about how you interact with our platform, including pages visited, features used, time spent, browser type, device information, IP address, and referring URLs.
2.6 Cookies and tracking
We use essential cookies for authentication and platform functionality, and privacy-respecting analytics tools to understand usage patterns. See our Cookie Policy for full details.
3. How we use your information
We use your information to:
- Provide, operate, and maintain the Services.
- Process your transactions and manage your account.
- Send important updates, security alerts, and support messages.
- Respond to your questions and provide customer support.
- Analyse usage patterns to improve the platform and develop new features.
- Detect, prevent, and address security issues or fraudulent activity.
- Comply with legal obligations and enforce our Terms of Service.
- Send marketing communications only if you have opted in.
4. Data storage and security
Your data is hosted on Cloudflare's infrastructure using enterprise-grade data centres in the European Union and United States. In the event of a primary infrastructure failure, we maintain a backup system through Backblaze's data centres, managed by SimpleBackups using encrypted transfer protocols.
Our security measures include encryption of data in transit and at rest, regular security audits, strict access controls, automated backup systems, 24/7 monitoring, and secure authentication protocols. For a detailed breakdown of our security posture, visit our Security page.
5. Data retention
We retain your data for as long as your account is active or as needed to provide you with the Services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Full data deletion schedules are set out in the Terms of Service.
6. How we share your information
We never sell your data. We only share your information in the following circumstances.
6.1 Service providers
We work with trusted sub-processors who help us operate the platform. These providers are bound by data protection agreements and may only access data necessary for their specific functions. See the sub-processors table in Section 11.
6.2 Legal requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety. We will notify affected users of government data requests to the extent permitted by law.
6.3 Business transfers
If Tarkle is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your options.
6.4 With your consent
We may share your information with third parties when you explicitly give us permission.
7. Your privacy rights
You have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Correction — Update or correct inaccurate information.
- Deletion — Request deletion of your personal data.
- Export — Download your data in a portable format.
- Opt-out — Unsubscribe from marketing communications at any time.
- Object — Object to certain types of data processing.
- Restrict — Request that we limit how we use your data.
To exercise any of these rights, please visit our contact page. We will respond within 30 days.
8. International data transfers
Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure that international data transfers comply with applicable data protection laws, including GDPR, through Standard Contractual Clauses approved by the European Commission, adequacy decisions where applicable, and other appropriate safeguards.
9. GDPR compliance
Tarkle is committed to GDPR compliance. We process personal data under the following legal bases:
- Contract — Processing necessary to provide the Services to you.
- Legitimate interests — Improving our platform, security monitoring, and preventing fraud.
- Consent — Where you have given explicit permission, for example for marketing communications.
- Legal obligation — Where required by applicable law.
If you are located in the EU or EEA, you have the rights listed above plus the right to lodge a complaint with your local supervisory authority. If you need a Data Processing Agreement, please reach out through our contact page and we will arrange one.
10. California privacy rights (CCPA/CPRA)
Tarkle does not sell your personal information and does not share it for cross-context behavioural advertising. California residents have the right to know what personal information we collect and how it is used, the right to request deletion, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. To submit a verifiable consumer request, please visit our contact page.
11. Sub-processors
| Sub-processor | Legal name | Purpose | Location |
|---|---|---|---|
| Cloudflare | Cloudflare, Inc | CDN, DDoS protection, primary infrastructure | USA / EU |
| Vercel | Vercel, Inc. | Application hosting and deployment | USA |
| Supabase | Supabase, Inc. | Database and authentication | USA |
| Backblaze | Backblaze, Inc. | Redundant cloud storage and backups | USA / EU |
| SimpleBackups | Union Lab SRL | Automated backup orchestration | Belgium |
| Stripe | Stripe, Inc. | Payment processing | USA |
| Sanity | Sanity AS | Content management system | Norway |
| Vercel Analytics | Vercel, Inc. | Web analytics and performance monitoring | USA |
| Google Analytics | Google LLC | Web analytics (where applicable) | USA |
| Resend | Plus Five Five, Inc. | Transactional email | USA |
| Sinch Mailgun | Sinch AB | Transactional email (secondary) | Sweden |
| Emailit | FunFirst s.r.o. | Transactional email (secondary) | Czech Republic |
| Loops | Astrodon Corporation | Marketing email | USA |
| DoneDone | DoneDone, LLC | Customer support and help desk | USA |
| Anthropic | Anthropic PBC | AI features | USA |
| OpenAI | OpenAI, LLC | AI features | USA |
| Google Workspace | Google LLC | Internal email, calendar, docs | USA |
| Veriff | Veriff OÜ | Identity and business verification (Crew) | Estonia |
| SignatureAPI | Signature API, Inc. | Electronic signatures (Crew) | USA |
| Partnero | Partnero, Inc. | Affiliate and referral programs | USA |
| Linear | Linear Orbit, Inc. | Issue tracking | USA |
| Slack | Slack Technologies, LLC | Internal team communication | USA |
| GitHub | GitHub, Inc. | Source code hosting | USA |
12. Reseller accounts and sub-client data
Send includes a reseller plan that allows businesses to operate a white-label file sharing platform for their own clients. When you operate a reseller platform, you act as the data controller for your clients' personal data. Tarkle acts as a data processor on your behalf. As a reseller, you are responsible for maintaining your own privacy policy for your clients, obtaining required consents, and handling their data requests.
Portal includes a built-in reseller feature for agencies to onboard sub-accounts. The same data controller principle applies — you are responsible for your sub-accounts' data.
13. Children's privacy
Tarkle is a business-to-business platform and is not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have done so, we will delete that information promptly.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the last updated date and, for significant changes, by email.
Contact
If you have questions about this Privacy Policy, want to exercise any of your data rights, or need to request a Data Processing Agreement, we are here to help. Please reach out through our contact page or write to us at the address below. We respond to all privacy-related enquiries within 30 days.
Tarkle.com
1309 Coffeen Avenue, Suite 15023
Sheridan, WY 82801
United States