Privacy

The short version: nothing you write leaves your PC, and the website keeps only what delivering your order requires.

The app: privacy by architecture

TPEE stores everything locally: no telemetry, no analytics, no crash reporter, no account system and no activation server. Prompts, templates, projects and preferences all live in local files on your Windows PC. There is exactly one outbound path, and it is yours to switch off: Help → Check for Updates contacts tpee.app to compare your build against the latest release — when you click it, and once at start-up while 'Check for Updates at Start up' is left on. It sends the check itself and nothing else; one untick turns the start-up check off. The only other message that can ever leave the program is a feedback note you type and press Send on yourself (at most three per day). You can verify all of this with your own firewall; we encourage it.

The website: what we store, and why

When you buy TPEE or apply for the beta programme, this site stores:

  1. Your email address — to deliver your download link and answer support requests.
  2. Your plan and order reference (e.g. TPEE-2026-00042) — so a human can match your order when you contact support.
  3. Stripe reference IDs (customer/session identifiers) — so refunds and receipts line up.
  4. Messages you send us (name, email, your background note) — only when you write to us or join the beta programme; read by a human.
  5. Download tokens, stored as hashes — the plaintext exists only in the link we send you.

RESEARCH ON AI

We never see your card number — checkout is hosted entirely by Stripe. This site measures visits with Google Analytics and a Google Ads conversion tag, so we can see which pages bring buyers — and nothing is loaded or stored until you press Accept on the bar at the bottom of the page. Before that choice there is no cookie, no request to Google and no measurement of any kind; decline and the tag is never requested, and the shop works exactly the same. Consent Mode is set to denied by default, so the tag is told only what you allowed. Your choice is kept in your own browser for 180 days, after which we ask again. The other third-party script is Cloudflare Turnstile, a privacy-friendly spam check on the application and reissue forms.

Who processes what

  1. Stripe — payment processing and receipts.
  2. Cloudflare — hosting, delivery, and the Turnstile spam check.
  3. Resend — delivery of transactional email (your download links and application answers).

Data is exported one way only: into Toptronic®'s offline back-office console for reconciliation. It is never sold, shared, or used for marketing.

Retention & deletion

We keep order records for accounting and support. Messages you send us are kept while your licence is active. Email support@tpee.app from your order address and we'll delete what we hold about you, apart from records we're required to keep for tax purposes. Toptronic® operates from Hong Kong and handles personal data in line with the Hong Kong PDPO.

Questions? support@tpee.app.