In short
- The website sets no cookies and uses no analytics, advertising or tracking tools.
- Your company owns the data it records in TagOrbit. We process that data only to provide TagOrbit, on your company's instructions.
- TagOrbit's database and files are stored on servers in Nuremberg, Germany.
- Features that use artificial intelligence send only what they need to Anthropic, and they never change your data by themselves.
- You can ask us at any time to see, correct or delete your personal data.
This policy explains what personal data TagOrbit handles, why, and what rights you have. It covers the public website tagorbit.ai and the TagOrbit application. The website sets no cookies and keeps only a technical log of requests. In the application, your company decides what it records, and we process that data only on its instructions.
1. Who we are
TagOrbit is made by ΑΦΟΙ ΚΑΛΟΦΟΡΙΔΗ ΟΕ (AFOI KALOFORIDI OE), a general partnership established in Greece. In this policy, "we" and "us" mean this company. We also make TagPulse, and we use one e-mail address for both products.
- Registered address: Chr. Smirnis 67, 151 21 Athens, Greece
- Company registration (Γ.Ε.ΜΗ.): 069222103000
- VAT number (Α.Φ.Μ.): 999267630
- E-mail: info@tagpulse.ai
The legal notice has all our company details.
2. Who is responsible for your data?
That depends on the data.
- We are the controller for the website, for TagOrbit accounts and for messages you send us. The controller is the one who decides why and how personal data is used.
- Your company is the controller for the data it records in TagOrbit, such as its items, contacts, notes and documents. For that data, we are your company's processor. We store and process it only to provide TagOrbit, and only on your company's instructions. Our data processing agreement sets out these duties.
Has a company recorded data about you in TagOrbit, for example as its employee, customer or supplier? Then please contact that company first. If you contact us instead, we will tell the company and help it answer you.
3. What data does the website collect?
The public website, tagorbit.ai, collects as little as possible.
- No cookies. The website itself sets no cookies.
- No analytics, advertising or tracking. The website uses none of these tools.
- Your accessibility settings stay with you. If you change the text size, colours or spacing, your browser keeps these settings in its local storage. They are never sent to us.
- A technical log of requests. Our web server records each request: the time, the page, the page that linked to it (if your browser shares this), your browser type and your IP address, which Cloudflare passes on to us. The log has a size limit and is overwritten automatically.
- A possible security cookie from Cloudflare. Cloudflare carries the traffic to our servers. When it needs to tell people from automated traffic, it may set a short-lived security cookie. The page on cookies and local storage explains this.
4. What data does the application handle?
Your account
To give you an account, we use your name, your e-mail address and your password, the company you belong to and your role (Admin, Editor or Viewer). Each person belongs to one company. A company's administrators invite people by e-mail.
Your sign-in session and settings
When you sign in, your browser keeps your sign-in session in its local storage, so that you stay signed in. The application also keeps some of your settings there, such as the colour theme and the language. The page on cookies and local storage lists them.
Account e-mails
We send account e-mails, such as confirmations, invitations and password resets, through Resend. Resend receives the address each e-mail goes to and the content of the e-mail.
The data your company records
Your company decides what it records in TagOrbit. This can include personal data, such as the names, e-mail addresses and phone numbers of staff, customers and suppliers, who holds which item, notes and documents. TagOrbit also keeps a history of every change, with who made it and when. We process this data for your company, under our data processing agreement.
Features that use artificial intelligence
Some features use AI. They propose a setup for your business from one sentence, propose fields, read receipts and invoices, match the columns of an import file, turn a question into a report and draft translations of the application's texts.
These features run on our server. To produce an answer, they send only what the feature needs to Anthropic's Claude: for example your sentence, the receipt, the column names or your question. AI never changes your data by itself. You see what it proposes, and you decide.
AI requests and error reports
We keep AI requests and error reports for 30 days, so that we can find and fix problems.
- AI requests. For each request, we keep what the user typed or sent, a short summary of the context we added and what the AI answered. For a receipt or an import file, we keep only details about the file, such as its name, type and size, never the file itself.
- Error reports. When something goes wrong on your screen, the application sends us a report. It contains the error message, the page, the version of the application, your browser type, the language and the last steps before the error, such as which page you opened or which button you used. It does not include the values you typed.
Both are linked to your account. Only we can read them; they are not shown in the application. After 30 days, they are deleted automatically. They are also deleted when your company's data is deleted.
Technical logs
Our servers also keep technical logs of the application's requests. These logs help us find faults. Like the website's log, they have a size limit and are overwritten automatically.
Payments
Paid subscriptions have not opened yet, so we hold no payment details. We will update this policy before that changes.
5. Why do we use your data, and on what legal basis?
The GDPR lets us use personal data only on a legal basis from its Article 6. Where we rely on a legitimate interest, this means a real need of ours or of others, which we weigh against your rights and interests.
| What we do | Which data | Legal basis |
|---|---|---|
| Show you the website and keep it secure | The request log and Cloudflare's security cookie | Our legitimate interest in running a secure website (Article 6(1)(f)) |
| Create and run your account, sign you in and send account e-mails | Your account data | The contract with you or with your company (Article 6(1)(b)). If your company invited you and you have no contract with us yourself, our and your company's legitimate interest in giving you access (Article 6(1)(f)) |
| Find and fix problems | AI requests, error reports and technical logs | Our legitimate interest in a working and secure service (Article 6(1)(f)) |
| Answer your messages | Your e-mail address and your message | Our legitimate interest in answering you (Article 6(1)(f)), or steps you ask for before a contract (Article 6(1)(b)) |
| Meet legal duties | The data a law requires us to keep or hand over | A legal obligation (Article 6(1)(c)) |
For the data your company records, your company decides the purposes and the legal basis. Where an AI request contains such data, we keep it on your company's behalf, under the data processing agreement.
6. Who receives your data?
We use a few service providers. Each one receives only what it needs for its task.
| Provider | Based in | What it does | What it receives |
|---|---|---|---|
| Hetzner Online GmbH | Germany | Hosts the website and the application, with the database, files and backups, in Nuremberg | All the data we store |
| Cloudflare, Inc. | United States | Domain name service, and the encrypted tunnel that carries traffic to our servers | The data in transit, including IP addresses |
| Resend | United States | Sends account e-mails | The address each e-mail goes to and its content |
| Anthropic | United States | Runs the features that use AI | Only what a feature needs to produce its answer |
Inside your company, the people who use TagOrbit can see your company's data, including who made each change. Roles decide who can change what.
We give data to authorities only when the law requires it. We do not sell personal data.
7. Does your data leave the European Union?
TagOrbit's database and files are stored in Germany, in the European Union. Cloudflare, Resend and Anthropic are based in the United States.
When a provider outside the European Economic Area receives personal data, the transfer is made under the European Commission's Standard Contractual Clauses (contract terms the Commission has approved for this purpose) and, where the provider is certified, under the EU-US Data Privacy Framework.
8. How long do we keep your data?
- Website and server logs: they have a size limit and are overwritten automatically.
- Accessibility settings on the website: they stay in your browser until you clear them. We never receive them.
- Account data: as long as your account exists.
- The data your company records: as long as your company keeps it in TagOrbit. When your company's account is closed, we delete it.
- AI requests and error reports: 30 days. Then they are deleted automatically.
- Messages you send us: as long as we need them to answer you and to deal with any follow-up.
- Backups: we back up all data every day. Daily backups are kept 14 days, weekly backups 90 days. We also keep one backup from the first day of each month; these monthly backups do not have a set end date yet.
9. How do we protect your data?
- All connections use HTTPS.
- Every company's data is kept apart from every other company's by rules inside the database itself, not only by the application.
- Roles limit who can change what, and every change is logged with its author.
- We back up all data every day.
Our page on how we keep your data safe gives more detail.
10. What are your rights?
Under the GDPR, you have the right to:
- Access: get a copy of the personal data we hold about you.
- Rectification: have wrong or incomplete data corrected.
- Erasure: have your data deleted, unless the law requires us to keep it.
- Restriction: have us limit how we use your data.
- Portability: receive your data in a structured, machine-readable format. Your company can also export its data at any time as CSV or Excel files.
- Objection: object to processing that is based on our legitimate interest.
- Withdrawal of consent: where we process data based on your consent, withdraw it at any time. This does not affect processing that happened before.
11. How can you use your rights?
Write to us at info@tagpulse.ai. We answer within one month. We may first ask you to confirm who you are.
To delete an account and its data, write to the same address. TagOrbit has no delete button for accounts.
If your request is about data that a company recorded in TagOrbit, we pass it on to that company and help it answer you.
12. Can you complain to an authority?
Yes. You can complain to the Hellenic Data Protection Authority:
- Address: Kifisias 1-3, 115 23 Athens, Greece
- Telephone: +30 210 6475600
- Website: www.dpa.gr
You can also complain to the data protection authority of the country where you live or work.
13. Is TagOrbit meant for children?
No. TagOrbit is a service for businesses and is not meant for children.
14. Will this policy change?
When we change this policy, we update the date at the top of this page. For important changes, we tell account holders by e-mail, or with a clear notice on the website, at least 14 days before the change takes effect.
15. Questions?
Write to us at info@tagpulse.ai. We are glad to explain anything in this policy.