Privacy Policy

Last Updated: August 28, 2026

tagit, operated by bla ehf. (company registration no. 6410190890, Ölduslóð 48, 220 Hafnarfjörður, Iceland) (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our article management platform, including our website and browser extension.

Please read this Privacy Policy carefully. By using tagit, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

Quick Summary

What we collect: Email, saved articles, tags, usage data

Why we collect it: To provide our service, improve features, and (for freemium users) show relevant ads

Who we share with: Service providers (Supabase, Google AdSense), law enforcement if required

Your rights: Access, delete, export your data anytime

Our commitment: We never sell your personal data

1. Information We Collect

1.1 Information You Provide Directly

Account Information

  • Email address (required for registration)
  • Password (encrypted, never stored in plain text)
  • Display name (optional)
  • Profile picture (optional)
  • Subscription tier (freemium or premium)

Content You Save

  • Article URLs
  • Article titles
  • Article descriptions
  • Screenshots/images captured from web pages
  • Tags and categories you create
  • Notes and annotations (when feature is available)
  • Favorites and collections

Communication Data

  • Support emails and inquiries
  • Feedback and survey responses
  • Beta testing feedback

1.2 Information Collected Automatically

Usage Data

  • Pages visited within tagit
  • Features used (search, tagging, filtering)
  • Time spent on platform
  • Click patterns and interactions
  • Device type and browser version
  • Operating system
  • IP address
  • Referral source

Browser Extension Data

  • Websites where you use the “Save” button
  • Metadata extracted from web pages (title, images, meta tags)
  • Extension version and settings
  • Error logs and diagnostics

Technical Data

  • Cookies and similar tracking technologies
  • Session identifiers
  • Log files and server logs
  • Performance metrics

1.3 Information from Third Parties

Authentication Providers (if you use social login)

  • Google: Email, name, profile picture
  • GitHub: Email, username, profile picture
  • Twitter/X: Email, handle, profile picture

Payment Processors

  • Paddle: Payment method, billing address, transaction history
  • We do NOT store full credit card numbers

2. How We Use Your Information

2.1 Provide and Maintain the Service

  • Create and manage your account
  • Store and retrieve your saved articles
  • Sync data across devices
  • Process tags, searches, and filters
  • Display your content in organized views
  • Enable browser extension functionality
  • Process premium subscription payments

2.2 Improve and Personalize the Service

  • Analyze usage patterns to improve features
  • Develop new features based on user behavior
  • Personalize content recommendations (coming soon)
  • Provide AI-powered tag suggestions
  • Optimize search and discovery
  • Test new features with A/B testing

2.3 Communicate with You

  • Send account notifications (new features, updates)
  • Respond to support requests
  • Send billing and subscription emails
  • Request feedback and surveys
  • Send security alerts
  • Notify about policy changes

2.4 Advertising (Freemium Users Only)

  • Display Google AdSense ads in your content grid
  • Use cookies for ad personalization (with your consent)
  • Measure ad performance
  • Prevent ad fraud

2.5 Legal and Security

  • Comply with legal obligations
  • Enforce our Terms of Service
  • Detect and prevent fraud, spam, and abuse
  • Protect against security threats
  • Resolve disputes
  • Respond to law enforcement requests

3. How We Share Your Information

3.1 Service Providers

We share data with trusted third-party service providers who help us operate tagit:

Supabase (Database & Authentication): Core infrastructure for data storage and user authentication.

Google AdSense (Advertising - Freemium Users Only): Display relevant ads to freemium users.

Paddle (Payment Processing - Premium Users Only): Process subscription payments.

AI Services: Anthropic (Claude) for AI-powered tag suggestions and article summaries. Titles, URLs, and content excerpts of saved articles are processed to provide these features. Email privacy@tagit.io to have AI processing disabled for your account.

Analytics Providers: PostHog for product analytics and usage tracking. We use this to understand how users interact with the application and improve the product.

3.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. You'll be notified via email at least 30 days in advance and can delete your account before the transfer.

3.3 Legal Requirements

We may disclose your information if required by law: court orders, subpoenas, or legal process; to protect our rights, property, or safety; to prevent illegal activity or fraud; to enforce our Terms of Service; in response to government requests.

We will notify you unless legally prohibited from doing so.

3.4 With Your Consent

We may share information with third parties when you explicitly consent, such as sharing collections with collaborators, exporting data, or participating in integrations.

3.5 Tag Discovery

Your saved articles are private by default and are not shown to other users. tagit lets users follow tags and see what others have chosen to share under them. An article of yours reaches other users only if you mark it public, or you publish the tag it is under. Shared articles appear on your profile with your name, and in tag feeds without it: the page title, link, and its own preview image are shown, never your account, workspace, or any screenshot you took.

Even when shared, saves from sites that are private by nature (AI chats, email, messaging apps, social networks, online documents, local or internal addresses, and links containing access tokens) are not shown to other users.

3.6 Aggregated and Anonymized Data

We may share aggregated, non-personally identifiable data for usage statistics, industry reports, and marketing materials. This data cannot identify you personally.

4. Cookies and Tracking Technologies

Essential Cookies (Required): Authentication, security, and preferences. You cannot opt-out of these.

Analytics Cookies (Optional): Track page views and usage patterns. You can opt-out in cookie settings.

Advertising Cookies (Freemium Users Only): Google AdSense uses cookies to show relevant ads. You can opt-out via Google Ad Settings or upgrade to Premium.

Browser Extension Storage: Our Chrome extension uses Local Storage, Chrome Storage API, and cookies to maintain authentication. No third-party tracking is performed by the extension.

5. Data Security

  • Data in transit: TLS/SSL encryption (HTTPS)
  • Data at rest: AES-256 encryption (database)
  • Passwords: Bcrypt hashing with salt
  • Role-based access control (RBAC)
  • Hosted on secure cloud infrastructure (Vercel, Supabase)
  • Regular backups (daily, encrypted)

In the event of a data breach, we will investigate within 24 hours, notify affected users within 72 hours, and notify relevant authorities as required by law.

6. Data Retention

  • Account information: Until you delete your account
  • Saved articles and tags: Until you delete them or close your account
  • Usage logs: 90 days
  • Support emails: 2 years

When you delete your account, data is permanently deleted within 30 days. Some data may persist in backups for up to 90 days.

7. Your Privacy Rights

7.1 Rights for All Users

  • Access: View all personal data we hold about you
  • Correct: Update account information in Settings
  • Delete: Remove individual articles or your entire account
  • Export: Download your data in JSON format
  • Object: Opt-out of analytics, marketing emails, and AI features

7.2 Additional Rights for EU Users (GDPR)

Right to Rectification, Erasure, Restrict Processing, Data Portability, Object, Withdraw Consent, and Lodge a Complaint. Contact privacy@tagit.io or dpo@tagit.io.

7.3 Additional Rights for California Users (CCPA/CPRA)

Right to Know, Delete, Opt-Out (we don't sell data), Correct, Limit, and Non-Discrimination. Submit request at privacy@tagit.io.

7.4 Other Jurisdictions

We comply with UK GDPR, PIPEDA (Canada), LGPD (Brazil), and PDPA (Singapore). Contact privacy@tagit.io for jurisdiction-specific rights.

8. Children's Privacy

tagit is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, contact us immediately at privacy@tagit.io. For users 13-17, we recommend parental consent.

9. International Data Transfers

Your data may be transferred to and stored in the United States. For EU to US transfers, we comply with Standard Contractual Clauses (SCCs) and implement additional safeguards.

10. Third-Party Links

tagit allows you to save links to external websites. We are not responsible for privacy practices or content of external sites. We recommend reviewing their privacy policies.

11. Google AdSense (Freemium Users)

Freemium users see Google AdSense ads in their content grid. Google collects cookies, device identifiers, page content, ad interactions, and general location. You can opt out by upgrading to Premium or using Google Ad Settings.

12. Changes to This Privacy Policy

Minor changes are effective immediately upon posting. Material changes take effect 30 days after notice via email, in-app notification, and website banner. Continued use after changes constitutes acceptance of the new policy.

13. Contact Us

Privacy Questions: privacy@tagit.io

Data Protection Officer (EU): dpo@tagit.io

Security Issues: security@tagit.io

General Support: support@tagit.io


© 2025 tagit. All rights reserved.
By using tagit, you acknowledge that you have read, understood, and agree to this Privacy Policy.

Back to tagit