Privacy.

Pupul Corp is a Delaware corporation headquartered in Marietta, Ohio. We operate the parent business behind Noctara, LUX, VEX, LoLa, and DryLies. This page explains how we handle information collected through pupulcorp.com and through enterprise engagements signed under Pupul Corp directly.

For the consumer products, see the product-specific notice: Noctara (LUX), VEX, LoLa, DryLies.

What we collect on pupulcorp.com

• Pages you visit, basic device and referrer information, IP at the edge for security.
• If you book a pilot conversation through our scheduler, the contact details you submit (name, email, company, role).
• If you sign in, your email and the records associated with your account.

What we do not do

• We do not sell your information.
• We run one analytics tool on pupulcorp.com: Google Analytics 4, property G-B7NPESE7QP, which sets the _ga and _ga_B7NPESE7QP cookies and records the pages you visit. We do not sell that data and we do not use it to build a profile of you. We also run the Meta pixel, ID 1037062819234839, to measure whether our ads work. It records page views and button clicks on this site, never anything from inside a file. If your browser sends Global Privacy Control or Do Not Track, the pixel disables itself completely: no cookie, no call to Meta.
• Meta is a subprocessor for ad measurement on the public site only.
• We do not share individual reading content from the consumer products with anyone, including pilot buyers. Pilots see the shape of a team, never an individual answer.

Subprocessors

We use a small set of vendors to operate the site and services. This list matches the one published on our product trust pages. As of the effective date above:

• Vercel hosting and edge functions.
• Supabase database, authentication, file storage.
• Stripe billing for pilots and any paid subscriptions originating on Pupul.
• Resend transactional email.
• Anthropic for model inference, governed by zero-retention agreements where available.
• Apple App Store billing, for readings taken inside our iOS apps.
• Calendly for scheduling pilot conversations, loaded only on the pilot page.
• Google. Analytics on the public site only. No reading content, no file content, ever.

An up-to-date list is available on request.

Pilots and enterprise data

If you engage Pupul Corp for a pilot, the engagement is governed by a Master Services Agreement and a Data Processing Addendum that names data flows specific to that pilot. Individual readings remain private to the participant. The organization receives shape-level outputs only.

The registry and identity claims

Pupul fronts a registry that answers a narrow question about a person to a party that person has granted: is a real, consenting human behind this record. It is a proof-of-human signal, not a consumer report, and Pupul is not a consumer reporting agency. It must never be used for an FCRA-covered decision (credit, employment or hiring, housing, insurance), for a background check, or for any purpose the person did not consent to. Every registry response carries this boundary in a permitted_use field, and the full clause is in our Terms. A person can see everything anyone can be told about them, and close any grant, at noctaracorp.com/consent; the moment they revoke, the registry stops answering. The behavioral data behind these claims is derived, never raw, and its retention and destruction schedule is published on the Noctara privacy notice.

Your rights

You may request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email hello@noctaracorp.com. We respond within 30 days.

Changes to this notice

We will update the date at the top of this page when this notice changes. Material changes will also appear in a short post on the site.

Contact

Pupul Corp, Marietta, Ohio, USA. hello@noctaracorp.com.

---

See also: Terms of Service.