Draft for review, not yet in effect. This notice needs legal review before launch.
Tupll Site Check
Privacy notice
What we collect when you order a Site Check report, who helps us process it, how long we keep it, and how to have it deleted.
This notice adds detail for Site Check to the general Tupll Privacy Policy, which still applies. Where the two differ for a Site Check order, this notice controls. Site Check has no accounts, passwords or sign-in.
What we collect
- Your email address, to send your confirmation, your reports and any refund notices.
- The addresses or coordinates you ask us to score, and any area you choose for a market order or describe in a market-report request.
- Order details: order number, items, amounts, sales tax, refunds, due and delivery dates, and the reports we produce.
- Billing details are collected by Stripe. We receive your billing address for sales tax, never your full card number.
- Messages you send us, including questions through the form on the Site Check page.
How we use it
Only to take your order, produce and deliver your reports, handle refunds and corrections, keep tax records, and answer you. We do not sell your information, and we do not add you to a marketing list because you ordered. The addresses you send are used to produce your report; they are not shared or published.
To locate an address on the map we send the address text alone, never your name or email, to public address-lookup services (the U.S. Census Bureau geocoder, and if needed the OpenStreetMap Nominatim service).
Who processes it for us
| Service | What it does for us | What it handles |
|---|---|---|
| Stripe | Payments, receipts, refunds and sales tax | Your email, billing address and card details (card details go to Stripe only) |
| Supabase | Database and private file storage for orders and reports | Your email, addresses, order details and report files |
| Resend | Sending order and delivery emails | Your email and the email contents, including the report attachment |
| Railway | Hosting the tupll.com website and its servers | Order requests as they pass through; logs never record full addresses, emails or download links |
| Google Tag Manager | Site measurement on marketing pages only (the Site Check home page, the sample report and the market-report page) | Standard page-visit data. It is switched off on the checkout, thanks and download pages, so it never sees your order |
Each provider processes data only to provide its service to us, under its own terms and privacy commitments.
Tracking on sensitive pages
Google Tag Manager and all other third-party scripts are switched off on the checkout, thanks and download pages. Those pages also tell your browser not to pass on the page address and not to cache the page. Download links live in the link itself, and are kept out of our logs.
How long we keep it
| Data | Kept for | Then |
|---|---|---|
| Orders, payment records and refunds | 7 years, for tax records | Deleted |
| Your email on an order | With the order (7 years), or until you ask us to delete it | Removed from the order on request |
| Report files (PDF and spreadsheet) | 3 years after the last report we delivered to your email | Files deleted; the index figures stay on the order record |
| Questions and requests that did not become an order | 24 months | Deleted |
| Market-report requests without an accepted quote | 24 months | Deleted |
Download links stop working 90 days after delivery. Database backups are kept for 7 days, and report files are copied nightly to a second private location so they can be restored after an outage; both follow the periods above.
Deleting your data
Email hello@tupll.com from the address on your order and ask us to delete your data. We will:
- switch off every download link for your reports;
- delete your report files;
- remove your email from your orders.
Payment and tax records are kept for the 7 years the law requires, without your email attached. A refund on its own does not delete anything; you keep your report unless you ask us to delete it.
Contact
Questions about this notice: hello@tupll.com. Your other privacy rights and how to use them are described in the Tupll Privacy Policy.
Draft of September 26, 2026. Not yet in effect.