Skip to content

Demo site. Fictional data; nothing is sent to anyone. Open the guided demo

UltoPulto
Try the scan

Privacy policy

This is a plain description of what the product does with personal data today. It is a pre-launch draft and will be replaced by a lawyer-reviewed policy, including the formal biometric information policy, before UltoPulto handles real requests.

Last updated · Pre-launch draft · Maintained by UltoPulto

01This site is a demo

The public site runs on fictional data and simulated requests. Please do not enter real personal details. Anything entered is stored in a demo database that is reset whenever the service is redeployed.

02What we collect

For a scan
First and last name, city and region, country, and up to three email addresses you provide.
Face signature
Only if you choose the selfie step and tick the consent box: a list of numbers derived from your face in your browser. Never the photo.
For an account
Your email address.
For removals
Your signed authorization (name, date, version, network address, browser) and the cases, letters, replies and status history created for you.
For payment
Stripe handles card details. We store your Stripe customer reference and plan status.
Technical
Hashed rate-limit records. On public pages only, our hosting provider (Vercel) counts page views and loading speed in aggregate, without cookies and without identifying you. Nothing is measured on signed-in screens. No advertising trackers.

03What we use it for

  • To run the scan and show you the results.
  • To write and send requests on your behalf, track replies and deadlines, and re-check sources.
  • To sign you in and take payment.
  • To prevent abuse of the scan.
  • We do not sell personal data, do not use it for advertising and do not use it to train AI models.

04Who it is shared with

With the organisations a request is addressed to, limited to what they need to find and delete your records; and with the service providers listed on the security page, acting on our instructions. Email addresses you ask us to check are sent to Have I Been Pwned for the breach lookup.

05How long we keep it

See data retention. Face signatures are deleted after 30 days unless you are an active subscriber using monitoring.

06Your choices

  • Delete a scan and its face signature from the results page.
  • Delete your account and its scans.
  • Revoke your agent authorization at any time; no further requests are sent.
  • Ask what we hold about you, or object to something, once a contact address is published on the contact page.

07Children

UltoPulto is for adults. We do not knowingly process a child’s face or accept accounts from children.