Privacy Policy

We store organization accounts, employee profiles, tap events (including hashed IP), private feedback, connected Google reviews, KPI aggregates, and audit logs.

Feedback comments, contact info, and reviewer names are personal data. Default retention is 24 months. Organization owners can request redaction; guests can email privacy@taggy.co.

When AI agents are enabled, review and feedback text is sent to the configured LLM provider. Disable agents per organization to stop that. Google refresh tokens are encrypted at rest. We do not sell guest data.

Tenant isolation uses Postgres row-level security. See also Terms of Service.