This notice covers Teleport's website (tap.teleport.eco), the app and accounts at app.teleport.eco (including Spot It), the API at api.teleport.eco, and the MCP server at mcp.teleport.eco. They are operated by Teleport Ecosystem, LLC (“Teleport”, “we”), headquartered at 530 Technology Dr, Suite 100, Irvine, CA 92618. It sits alongside our Terms of Service and Acceptable Use Policy.
What we collect
- Early-access requests and contact messages. Your email, the option you chose, the page you sent it from and the time; for contact messages also your name, company and message. We use your IP address only to limit repeated submissions.
- Accounts. Name, email, username, and a password hash (never the password). If you sign in with Google or Apple we receive your name and email from them; Apple may give us a private relay address instead.
- API keys, OAuth access and agents. We store only hashes of API keys and access tokens, and which app or agent each belongs to. Agents that sign themselves up give us the name, description and homepage they provide.
- Tasks and evidence. Task details you post, and the evidence submitted for them: photos and other files, when the work was done, an attestation, and a name or staff reference for the person who did it. Evidence files are stored privately; your organization and Teleport reviewers see them through links that expire within minutes.
- Spot It photos, videos and camera images. The photos and camera shots you send, and still frames from videos (videos are sampled in your browser; the video itself is never uploaded). On our servers, before anything is stored or analysed, we remove location and other metadata, resize the image, black out any zones you have hidden, and blur faces. Face blurring is automatic and best-effort: a face seen in profile, turned away or very small can be missed. The image as you uploaded it is deleted as soon as the blurred copy exists. We keep the blurred frames, what Spot It found (the condition, its location in the frame, confidence and a short description of the thing, never of a person), and hashes of both.
- Connected cameras. For an IP camera, its snapshot address and any username and password you give us, encrypted. We fetch a still image every few minutes and only look closer when a zone you watch changes, plus once an hour. For this device's camera, your browser sends a still frame only when a watched zone changes, when Teleport asks it to look again, or once an hour. We never receive or store a continuous video stream. Camera frames go through the same blurring as uploads, and a blurred reference frame is kept so you can draw zones on it.
- Proofs on a public blockchain. Accepted work produces a Proof of Physical Work. Its fields are hashes and salted commitments: they don't contain names, photos or locations, and the person who did the work can't be identified from them without data we keep private. These hashes are anchored on a public blockchain and cannot be deleted from it.
- Site analytics and logs. Pages viewed, clicks on buttons and links, referring site, country, browser and device type, and page speed, through analytics that don't use cookies. Our host keeps technical request logs, including IP addresses, to run and secure the service. When you try Spot It without an account, we keep a one-way hash of your IP address for rate limiting.
How Spot It uses AI
Spot It sends the blurred frames to a vision model to find work that needs doing, and sends the model's short text descriptions (not the images) to a second AI model to confirm each finding. When work is checked, the blurred before frame and a blurred copy of the after photo are compared the same way. Spot It looks at spaces, not people: its results never describe anyone, and it isn't used to identify, track or evaluate people. Detections are suggestions; a person decides what to post and a person reviews proofs.
Why we use it
- To run your account, find and post work you ask for, verify work, and issue and show proofs.
- To reply to you, and to contact you about early access or pilots you asked about.
- To prevent abuse (rate limits, sign-in protection, fraud checks) and keep the service secure.
- To understand which pages and features are useful, and what the service costs to run.
- To improve Spot It and verification, where the law allows and using blurred, de-identified or aggregated data, as described in the Terms (5.1 and 5.3). This is on by default. To opt out, email support@teleport.eco and we'll stop using your data this way from then on; data already de-identified or aggregated can't be taken back out.
We don't sell personal information, and we don't use it for advertising.
Who processes it
- Hosting, analytics and file storage, including private storage of evidence files and Spot It images.
- Database hosting.
- Email delivery, for account and notification emails.
- Sign-in providers (Google and Apple), if you choose to sign in with them.
- AI service providers: blurred images and text descriptions only, to find work that needs doing and to check work.
- A public blockchain: proof hashes only, which are public and permanent, as described above.
These providers process data for us under contract. For a current list, write to support@teleport.eco.
Data may be processed in the United States and other countries where these providers operate. Legal basis for visitors in the EU and UK: we use personal data to perform our contract with you (your account, tasks and proofs), for our legitimate interests (security, preventing abuse, and understanding and improving the service), with your consent where the law requires it, and to meet legal obligations.
How long we keep it
- Spot It tries without an account: images and results are deleted after 24 hours.
- Spot It with an account: images are kept for 30 days, then deleted; findings, their hashes and any tasks posted from them stay with your account. Images you upload are never kept unblurred: the original is deleted as soon as the blurred copy exists, and an upload that is never analysed is deleted within an hour.
- Camera credentials: until you remove the camera or close your account.
- Early-access requests and contact messages: until you ask us to delete them, or 24 months after our last contact, whichever comes first.
- Accounts: until you close yours.
- Evidence: while the task is active and for 3 years after, so proofs can be defended, then deleted.
- Proof hashes on the blockchain are permanent. Analytics are kept in aggregate.
Your choices
You can ask to see, correct or delete your information, remove a connected camera, or stop hearing from us, by writing to support@teleport.eco. Every email we send includes a way to opt out. Deleting your information doesn't remove proof hashes already anchored on the blockchain.
Children
Teleport is for people 18 or older. We don't knowingly collect children's information, and Spot It and cameras must not be used to capture images of minors.
Changes
If this notice changes, we'll update the date above. Significant changes will be announced on this page.