Draft

Privacy Policy

Last updated 2026-09-05 · Alpha draft, to be finalized by counsel before public beta · 简体中文版

Agents Butler is a Windows application made by TOPPING INC. LIMITED (“TPOAD”, “we”). This policy explains what the app processes on your computer, what — if anything — leaves it, and the choices you have. The short version: your files stay on your PC.

1. What stays on your PC

  • Everything the scanner reads: file names, paths, sizes, timestamps and any file contents needed to judge an item (for example the working-directory field inside a session log). All of it is processed locally and never uploaded.
  • Quarantine folders, compress-archives and their manifests, which live on the same drive as the original files.
  • Your settings, including the retention period for quarantine.

2. What the app sends

2.1 Version check

At most once a day the app requests https://agents-butler.tpoad.com/latest.json to learn whether a newer version or rules bundle exists. The request carries no identifier beyond what any HTTP request carries (your IP address, which our server logs keep for 30 days for security and aggregate download counts).

2.2 Optional: anonymised fingerprints (off by default)

If you enable model-assisted classification, the app sends an anonymised fingerprint of directories that no rule recognises: a path pattern with your user name and project names replaced by placeholders, size, file count, a histogram of file extensions, dates, naming features and a few file names with digits removed. It never sends file contents, your user name, your machine name or full paths. Fingerprints are processed by our server and, for classification, by a third-party language model provider under contract with us. Verdicts are cached on our server so the same fingerprint is classified once for everyone.

2.3 Community account (only if you sign in)

To use the community you sign in with an e-mail address (one-time code) or a Google, GitHub or Apple account. We store your e-mail, display name, the messages you post, friend relationships and reports you file or that are filed about you.

2.4 No analytics, no trackers

The app and this website contain no third-party analytics or advertising scripts. Download statistics come from our own web-server logs.

We process the version check and server logs to operate and secure the service (legitimate interest). Fingerprints and the community are processed on the basis of your consent and the service you asked for; you can withdraw consent by turning the feature off or deleting your account. Server logs are kept 30 days; community content until you delete it or your account; fingerprint verdicts are kept as long as the rules library needs them, without any link to you.

4. Your rights

You can export or delete your community account at any time from the app or by e-mailing contact@tpoad.com. Deleting your account removes your messages and relationships; reports keep an anonymised trace. Where the GDPR or a similar law applies, you also have the right to access, rectify, restrict and object, and to complain to your supervisory authority.

5. Children

The community is for people aged 13 and over. The app itself does not collect personal data.

6. Where data is processed

Our server is operated in Hong Kong. Model providers may process fingerprints in other regions under standard contractual safeguards. No file contents are ever involved.

7. Changes and contact

We will post changes here with a new “last updated” date. Questions: contact@tpoad.com.