tagga.ai ("us", "we", or "our") cares about the privacy of the people who visit our website and use
our Service. This Privacy Policy explains how we collect, use, process, disclose, and safeguard
information we obtain from and about our customers and visitors ("you"). It also tells you about
your rights and choices with respect to your information, and how you can contact us if you have
any questions or concerns.
Information you provide
- Account information — your name, email address, and password (or Google account identifier if you sign in with Google) when you register.
- Content — the photos, videos, and documents you upload, along with the tags, collections, ratings, and comments you create.
- Communications — information you send us when you contact support or complete a form on our site.
- Billing information — payment details are collected and processed directly by Stripe; we never store your full card number.
Information collected automatically
- Device information — IP address, browser type, operating system, and language.
- Usage information — how you interact with the Service, such as searches performed and features used, to improve the product.
- Cookies — we use session cookies that are strictly necessary to keep you signed in. If you disable cookies, parts of the Service will not work.
- Providing the Service — storing your archive, generating AI descriptions, keywords, detected text, and search indexes for your content, and making it searchable by you and your workspace members.
- Face recognition — detecting and grouping faces in your photos so people are easy to find (see section 3).
- Communications — responding to your inquiries and sending transactional emails such as sign-in codes, invitations, and billing notices.
- Security and improvement — analyzing usage to protect, debug, and improve the Service.
Where European or similar data-protection law applies, we process your personal information only on
a valid legal basis: your consent, the necessity to provide you the Service, compliance with a legal
obligation, or our legitimate interest in operating and improving a safe and secure Service.
- Uploaded media is automatically analyzed by AI to generate descriptions, keywords, text extraction, colors, and similarity embeddings. This may involve trusted third-party AI providers acting as our processors; your content is never used to train their generalized models.
- Our face recognition generates a numerical signature of each detected face so photos of the same person can be grouped. These signatures are stored securely and are only used within your workspace.
- Face signatures are deleted when you delete the related photos or people, and all stored face data is deleted when you delete your account.
- Our permission model is designed so workspace users are only exposed to photos, and people in photos, they have been given access to.
We do not sell your personal information. We share information only with:
- Service providers — infrastructure vendors that host our servers and store your files, our payment processor (Stripe), our email delivery provider, and AI providers that process media on our behalf. Each is bound to use your data only to provide their service to us.
- People you choose — workspace members you invite, and anyone you give a gallery, upload, or "find my photos" link to, within the limits you configure.
- Legal requirements — if required to do so by law, regulation, or legal process, or when we believe disclosure is necessary to protect against harm or investigate suspected unlawful activity.
We keep your information for as long as your account is active. When you delete content, it is removed
from the Service; when you delete your account, all of your content — including files, AI metadata,
and face signatures — is deleted. We may retain limited information where required by law or as
necessary to resolve disputes and enforce our agreements.
We employ a variety of security technologies and procedures designed to help prevent unauthorized
access to or disclosure of the information we collect — including encryption in transit, hashed
passwords, and isolated per-workspace access controls. However, no method of transmission or storage
is 100% secure, and we cannot guarantee absolute security.
Your information may be transferred to and processed in countries other than the one in which you
reside, which may have different data-protection laws. Where required, we rely on appropriate
safeguards such as standard contractual clauses for such transfers.
We do not knowingly collect personal information from children under 16, and no part of the Service
is directed at children under 16. If you learn that a child has provided us with personal information
without consent, please alert us at [email protected]
and we will promptly delete it.
- You can access and update your account information at any time from your settings.
- You can request a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing [email protected].
- You can delete your content or your entire account at any time; deletion is permanent.
- You can opt out of non-essential emails via the unsubscribe link in those emails.
- Depending on where you live (for example under the GDPR or the Brazilian LGPD), you may have additional rights such as data portability and the right to lodge a complaint with a supervisory authority.
We will post any adjustments to this Privacy Policy on this page, and the revised version will be
effective when posted. If we materially change the way we use or share personal information we have
previously collected, we will notify you through the Service or by email.
If you have any questions or concerns about this Privacy Policy or wish to exercise your rights,
contact us at [email protected].