Privacy Policy

TagBack operates TagBack and decides how personal information is used. Contact: support@tagback.example. This policy works together with our Terms of Service.

Owners

• Email address, used to sign you in with one-time codes and to send alerts and account emails.
• Tag details you enter: the tag name, the note finders see, tag type, reply language, and your tag codes.
• Messages you receive and replies you send, plus how each was sorted (urgency, category, summary, translation, suggested replies).
• Sign-in records: hashed one-time codes, hashed session tokens, and the time you last used them.

Finders

• The message you write, and optional details you choose to add: where you are, a phone or email to reach you, and your location if you tap the share button.
• The language of your message and the time it was sent.

Everyone

• A short, one-way hash of your network address, kept in rate-limit records to stop abuse. We do not store your raw address for this purpose, and the records expire.
• Standard server logs kept by our hosting provider, such as time, page and error details.
• Two cookies for owners: a sign-in session cookie and a short-lived cookie while a code is pending. We do not use advertising or cross-site tracking cookies.

We do not collect your name, phone number or payment card through TagBack. Payments for physical tags are handled by the marketplace or payment service where you buy them, under their policies.

• Finders see the tag name and note you chose, and the type of item. They do not see your email, phone number or account.
• Owners see what a finder wrote, including any optional contact details or location the finder chose to share.
• If you include personal details in a tag name or note, any finder can read them. Keep those fields general.

• To run TagBack: deliver messages and replies, send sign-in codes and alerts, and show your inbox.
• To screen messages: block abuse and spam, rate urgency, translate and draft replies.
• To keep the service safe: rate limits, abuse investigation, enforcing our terms, and meeting legal obligations.
• To improve reliability and fix bugs. We do not use your messages for advertising and we do not sell them.

Each message a finder sends is analyzed by an AI model, with a simpler rules-based checker as backup. The message text (and the owner's reply language and tag type, so replies fit) is sent to our AI provider, Anthropic, to produce a safety decision, urgency, summary, translation and suggested replies. We ask the provider to process this data only to return a result for us, and we send only what is needed. No decision about an owner is made by AI that has legal or similarly significant effects: it only sorts and drafts.

Screening is not perfect. Some spam or abusive messages can reach you and some harmless ones can be blocked. See section 3 of the Terms. A blocked message is not shown to the owner. We may keep blocked messages briefly for abuse prevention and review.

We share data only with service providers who help us run TagBack, and when the law requires it:

• Hosting and database providers, to store and serve the app.
• An email delivery provider, to send sign-in codes and alerts to your email address.
• An AI provider, to screen and translate messages, as described above.
• Authorities or other parties when we believe disclosure is required by law or needed to protect people, our users or our service from harm or fraud.
• A buyer or successor if TagBack is sold or reorganized, under terms that protect your data.

These providers may be located outside your country, including in the United States.

• Sign-in codes expire after 10 minutes. Sessions last up to 30 days or until you sign out.
• Messages and replies are kept until you delete the account or the tag's data is removed, or we delete them under our retention practices.
• Deleting your account erases your messages and deactivates your tags. A retired tag code is kept (without personal details) so it can never be reused.
• Rate-limit records are short-lived. Logs and backups kept by providers are deleted on their normal schedules, which can take some weeks.
• We may keep limited records longer where needed for safety, abuse prevention, disputes or legal duties.

• Edit what finders see, or delete a tag, at any time from your dashboard.
• Delete your account in Settings to erase your messages and deactivate your tags.
• Ask us for a copy of your data, a correction, or deletion by emailing support@tagback.example. We may need to confirm it is you by replying from your account email.
• Depending on where you live (for example California, other US states, the EU or UK), you may have extra rights such as access, portability, objection or complaint to a regulator. We will honor these as the law requires. We do not sell or share personal information for cross-context behavioral advertising.
• Finders can use TagBack without an account, and do not have to share location or contact details.

Your device location is requested only when a finder taps the share-location button. If shared, the coordinates are stored with that message and shown to the owner as a map link. Choosing not to share does not stop you from sending a message.

TagBack is not directed to children under 13, and owners must be at least 18 (or use it with a parent or guardian). We do not knowingly collect personal information from children under 13. If you think a child has sent us information, email support@tagback.example and we will delete it.

We protect data with measures such as hashed codes and sessions, signed links, access checks on every account page, encryption in transit, and rate limits. No system is completely secure, and email can be intercepted or misdelivered, so we cannot guarantee absolute security. Anyone with access to your email inbox can sign in to your TagBack account, and alert emails contain a link that opens your tag's inbox, so keep your email account secure and do not forward those emails.

Because anyone can scan a tag, some unwanted messages may reach you despite our screening. If you receive abuse or a message that worries you, do not reply, mark it handled or delete the tag, and report it to us. We may keep and review reported messages to improve protection and, where the law requires or safety demands, share them with authorities. In an emergency contact your local emergency services.

We may update this policy as the service changes. We will post the new version here with a new date and, for material changes, notify you in the app or by email.

Privacy questions or requests: support@tagback.example.