Dupeless — Provided by DTEC IO LLC
Effective Date: April 1, 2026DTEC IO LLC ("Company," "we," "us," or "our"), a California limited liability company, operates Dupeless, a cloud storage duplicate file scanning and management service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Service.
By accessing or using Dupeless, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Service.
This Privacy Policy is incorporated by reference into the Dupeless End User Agreement. Capitalized terms not defined herein have the meanings assigned to them in the End User Agreement.
When you sign in to Dupeless using Google, Microsoft, or Dropbox OAuth, we receive basic profile information from the authenticating provider, which may include:
When you connect a Cloud Storage Provider account and use the Service, we access and may store:
File Metadata: File names, file sizes, file hashes, folder structures, and file modification dates. We do not access, read, download, or store the contents of your files.
Scan History: Records of scans performed, including dates, results, and actions taken (such as deletions).
Account Preferences: Settings and preferences you configure within the Service.
When you interact with the Service, we may automatically collect:
Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
Device Information: Browser type, operating system, device type, screen resolution, and language preferences.
Log Data: IP address, referring URLs, and error logs.
Analytics Data: Aggregated and anonymized usage statistics collected through Google Analytics or similar tools.
Error Reports: Crash logs and diagnostic data collected through Sentry or similar error-tracking services.
If you subscribe to a Paid Plan, payment information (such as credit card numbers and billing addresses) is collected and processed directly by our third-party payment processor, Stripe. We do not store your full payment card details on our servers. We may receive limited transaction information from Stripe, such as the last four digits of your card, card type, and billing country.
We use the information we collect for the following purposes:
We do not sell your personal information. We may share your information only in the following circumstances:
4.1 Service Providers. We share information with third-party service providers who perform services on our behalf, including:
These providers are contractually obligated to use your information only for the purposes of providing their services to us and in accordance with applicable data protection laws.
4.2 Cloud Storage Providers. When you authorize a Connected Account, we interact with Google Drive, Microsoft OneDrive, and/or Dropbox APIs to provide the Service. We transmit only the minimum data necessary to perform scans and deletions through those APIs.
4.3 Legal Requirements. We may disclose your information if required to do so by law or in response to a valid legal request, such as a court order, subpoena, or government investigation.
4.4 Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice within the Service before any such transfer.
4.5 With Your Consent. We may share your information for other purposes with your explicit consent.
As of the effective date of this Policy, Dupeless does not use cookies or similar tracking technologies beyond what is strictly necessary for the Service to function (such as session management). If this changes in the future, we will update this Privacy Policy and, where required by law, obtain your consent before deploying non-essential cookies or tracking technologies.
Our third-party analytics provider (Google Analytics) may use cookies or similar technologies to collect anonymized usage data. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.
We retain your information for as long as your account is active or as needed to provide you the Service. Specifically:
Account Information: Retained for the duration of your account.
Scan History and File Metadata: Retained for the duration of your account unless you request earlier deletion.
Usage and Log Data: Retained for up to twelve (12) months, then aggregated or deleted.
Payment Records: Retained as required by applicable tax and financial record-keeping laws.
Upon account termination, you may request deletion of your data by contacting privacy@dtecio.llc. We will process such requests within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or legal compliance).
We implement commercially reasonable administrative, technical, and organizational security measures to protect your personal information, including:
Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information and are not responsible for unauthorized access resulting from circumstances beyond our reasonable control.
Depending on your location, you may have certain rights regarding your personal information. We honor the following rights for all users, regardless of location:
Access: You may request a copy of the personal information we hold about you.
Correction: You may request that we correct inaccurate or incomplete personal information.
Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
Opt-Out of Marketing: You may opt out of marketing communications at any time by following the unsubscribe link in any marketing email or by contacting privacy@dtecio.llc.
To exercise any of these rights, contact us at privacy@dtecio.llc. We will respond to verified requests within thirty (30) days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"):
Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: You have the right to request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under the CCPA/CPRA. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link on our website.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.
To submit a CCPA/CPRA request, contact us at privacy@dtecio.llc. We will verify your identity before processing your request and respond within forty-five (45) days.
If you are located in the European Economic Area ("EEA"), United Kingdom, or Switzerland, the following additional provisions apply:
We process your personal data under the following legal bases:
Performance of a Contract: Processing necessary to provide the Service under the End User Agreement.
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and preventing fraud, where those interests are not overridden by your rights.
Consent: Where you have given explicit consent, such as opting in to marketing communications. You may withdraw consent at any time.
Legal Obligation: Processing necessary to comply with applicable law.
In addition to the rights in Section 8, you have the right to:
Restriction of Processing: Request that we restrict the processing of your personal data in certain circumstances.
Object to Processing: Object to processing based on our legitimate interests.
Lodge a Complaint: File a complaint with your local data protection supervisory authority.
Your personal data may be transferred to and processed in the United States, where DTEC IO LLC is based. When we transfer data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure your data receives an adequate level of protection.
The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to promptly delete that information. If you believe a child has provided us with personal information, please contact us at privacy@dtecio.llc.
The Service may contain links to third-party websites or services, including Google Drive, Microsoft OneDrive, Dropbox, and our payment processor. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with Dupeless.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated via email or prominent notice within the Service at least thirty (30) days before they take effect. Your continued use of the Service after the effective date of any revised Privacy Policy constitutes your acceptance of the changes.
We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
DTEC IO LLC
Privacy Inquiries
Email: privacy@dtecio.llc
For general support inquiries, you may also reach us at support@dtecio.llc.