Tagup.pro - Logo Tagup Pro
Start for free

Privacy Notice

Last Updated: September 28, 2026

This Privacy Notice outlines how Tagup Pro (“we,” “us,” or “our”), a North Carolina limited liability company, collects, uses, maintains, and discloses information collected from users (each, a “User”) of the Tagup Pro professional relationship management platform (the “Service”). This notice applies to the Service and all products and services offered by Tagup Pro.

We are committed to protecting your privacy and ensuring the security of your relationship data. We have implemented robust technical and organizational measures to safeguard your information, including encryption of data in transit and at rest. We do not sell, rent, or share your personal relationship data with third parties for any purpose outside of providing you with the Tagup Pro service.

Definitions

For the purposes of this Privacy Notice:

  • Account means a unique account created for you to access our Service
  • Device means any device that can access the Service such as a computer, cellphone, or digital tablet
  • Personal Data is any information that relates to an identified or identifiable individual
  • Relationship Data refers to the professional contact information, interaction records, and relationship management content you store in Tagup Pro
  • Service refers to the Tagup Pro professional relationship management platform
  • Service Provider means any natural or legal person who processes data on behalf of Tagup Pro to facilitate the Service
  • TagUps refers to interaction records and meeting documentation you create within the Service
  • Usage Data refers to data collected automatically when using the Service
  • Third-Party Social Media Service refers to any website or social network through which a User can connect or share information

1. Information We Collect

Account Information

When you register for Tagup Pro, we collect basic account information including your name, email address, and authentication credentials necessary to secure your account.

Third-Party Authentication:
If you choose to create an account or sign in using third-party authentication services like Google Sign-In, we collect:

  • Email address from your third-party account (required)
  • Display name from your third-party account (if available)
  • Profile picture URL from your third-party account (optional)
  • Authentication tokens to maintain your login session

This information is used solely for account creation, authentication, and providing you with access to the Tagup Pro Service.

Relationship Data

Tagup Pro is designed to help you manage professional relationships. The data you choose to store in Tagup Pro may include:

  • Contact Information: Names, email addresses, phone numbers, professional details, and messaging app handles (such as WhatsApp, Telegram, WeChat, Signal, and others) of people in your network
  • Profile Photos: Avatar images and photos you upload for your contacts
  • Interaction Records: Meeting notes, conversation summaries, communication history, and “TagUp” interaction logs you choose to document
  • Personal Context: Professional details, relationship categories, communication preferences, personal notes, and custom tags about your contacts
  • Tasks and Reminders: Action items, follow-up tasks, scheduled reminders, and recurring follow-ups related to your professional relationships
  • Location Data: City, country, timezone, and UTC offset information for contacts to facilitate better communication timing
  • Social Media Profiles: Social media account links and handles you choose to connect
  • Notes: Personal notes and observations you record about your relationships

Recordings and TagUps are created only at your initiative — Tagup Pro begins recording when you choose to start it. We do not announce recordings to other participants, show them a recording indicator, or collect their consent on your behalf. Unless you change the approval setting described below, Tagup Pro does not begin recording a contact until one of two things is true: that contact has given permission through the tools described below, or you have stated that you already have their permission. Obtaining any consent and giving any notice required by law before you record is your responsibility (see “Recording & Transcription Consent” below for the tools we provide to help).

Conversation audio is ephemeral. When you record a conversation, we capture audio only long enough to produce a written transcript. The audio is sent to our transcription provider (AssemblyAI), converted to text, and then permanently deleted from our systems and from AssemblyAI — typically within minutes of transcription and, at the latest, within one day. We do not retain conversation audio, store it in backups, or make it available for download. Only the resulting transcript is retained and made available to you (in the conversation timeline and, for Conversation Hub voice notes, the Hub thread). You can delete a transcript at any time.

Voice and Biometric Data

We do not create, derive, or store voiceprints, voice templates, or other biometric identifiers or profiles. When transcribing a conversation, the Service may perform speaker identification (also called diarization) to label which speaker said which line — for example, “Myself” and your contact’s name. This labeling exists only within that conversation’s transcript. It is not stored as a biometric template, not used to identify or profile a person across conversations, and not used to train any AI model. We recognize that some jurisdictions may treat voice analysis as biometric processing; our design deliberately avoids storing or profiling biometric data. You remain responsible for obtaining any consent your jurisdiction requires before recording.

Recording & Transcription Consent

Tagup Pro provides tools that help you ask the people you record for their permission, and that let those people manage their choices. An approval setting lets you choose when Tagup Pro asks for permission: for every contact (the default); based on your listed location and the contact’s, with contacts you have marked Employee, Manager, or Teammate always asked; or never. When the setting calls for permission, recording a contact stays blocked until either that person has given permission or you have stated that you already have it. Here is how the information flows:

  • Requesting consent. If a contact has an email address, you can ask them for permission to record and transcribe your conversations, and you may include a purpose. When you do, we send that contact an email on your behalf describing who is asking, your organization, the stated purpose, and what is involved.
  • One choice the recorded person controls. The person you want to record can turn “Allow recording” on or off, separately for each person who has asked to record them. It defaults to off. There is no standing option to receive transcripts; see “Sharing a Conversation with a Contact” below for how a conversation can reach them.
  • If the recorded person is a Tagup user, the request appears in their Account settings, where they manage it after signing in.
  • If the recorded person is not a Tagup user, they receive a unique, sign-in-free link to a portal with two areas: the same recording controls as the in-app version, covering everyone who has asked to record them, and any conversations a Tagup user has chosen to share with them. The link expires 12 months after it was last used.
  • Linked by email. These choices are tied to the recorded person’s email address. If a non-user later creates a Tagup account with that email, their existing choices appear in their account automatically.
  • What the choices do. Turning “Allow recording” on lets that requester record conversations with the person. A permission stays valid for 12 months; after that, the requester must ask again. Turning it off, declining, or withdrawing blocks recording for that requester when the requester’s approval setting calls for permission — unless the requester states that they already have permission, which is described next. If the requester’s setting does not call for permission, the person’s choice does not block recording. We keep the two apart in every record and on every screen: a statement by a requester is never presented as the recorded person’s consent.
  • The requester’s own statement. A Tagup user can state that they already have a person’s permission to record — for example, permission given in person or in writing outside Tagup Pro. This is the requester’s own statement, not the recorded person’s consent. It lets that requester record even if the person has declined or has not answered. We record the date, and the statement stays valid for 12 months. We do not show the statement to the recorded person.
  • What we record about consent. We keep an audit record of consent requests and changes — for example, the time, the disclosure shown, and the choice made — so both parties have a reliable history. The record also holds the requester’s recording-approval setting at the time, the version of our location rules, whether a location rule matched, the date of any statement described above, and which of the two — the person’s permission or the requester’s statement — allowed the recording. At the point of consent we disclose what is captured (a transcript; the audio is not saved), how long an answer stays valid, and that nothing is sent to the person automatically, and we link to this Privacy Notice, which names our transcription provider (AssemblyAI) and describes the recorded person’s data rights.
  • What a permission proves. We send each request to an email address the requester supplied. A response tells us that someone with access to that address answered, at a particular time, after seeing our disclosure. It does not tell us who that person was. For that reason we never describe a permission as verified, confirmed, or authenticated identity.

Sharing a Conversation with a Contact

Nothing leaves your account on its own. Tagup Pro does not send a transcript, a summary, or any part of a conversation to anyone automatically, on a schedule, or because of a standing setting. There is no option a contact can turn on to receive your conversations.

A Tagup user can choose to share one conversation at a time with the person it involves. When they do:

  • They see the exact contents before sending. Tagup Pro shows a preview of what will be sent.
  • A shared copy can contain the conversation’s title, its date, and its transcript. It contains the user’s own written notes only if the user turns that option on for that share. The option starts off every time and is never remembered.
  • We store a separate copy of what was shared, so the recipient can open it. We delete that copy 30 days after the share.
  • The email carries a link, not the conversation. The recipient opens the shared conversation through the same sign-in-free portal described above.
  • Replies reach a person. The reply-to address on a share email is the Tagup user who shared it, not an unmonitored address.
  • Sharing the same conversation again replaces the stored copy and tells the recipient that it was updated.

Sharing is the sender’s decision and the sender’s responsibility. A person’s permission to be recorded does not authorize a share, and a person’s recording choice does not block one.

If you record a person, that person can ask us to remove the related transcription data. A recorded person — including someone who is not a Tagup user — may revoke consent through the portal and may request access to, correction of, or deletion of consent data, transcription data, and any conversation shared with them, by contacting us at privacy@tagup.pro. We confirm identity before acting on these requests and may need to coordinate with the Tagup user who created the recording. As the account holder, you can also delete any transcript yourself at any time.

User Preferences

We collect and store your application preferences to personalize your experience:

  • Display Settings: Theme preferences (light/dark mode), layout choices
  • UI State: Section expansion states, sort preferences, filter selections
  • Notification Preferences: Task and follow-up reminder settings
  • Timeline Settings: Event timeline period preferences (6, 12, 24 months, or all time)

These preferences are stored locally on your device and in your account to maintain consistency across devices.

Usage Information

The Tagup Pro application does not use an analytics tool. It does not track which pages or features you open, how long you stay, or what you click. Our servers keep technical logs, such as errors and the time of each request, to run and secure the Service.

Our website, tagup.pro, uses analytics. Section 2 describes what the website collects and the choices you have.

Billing Information

When you subscribe to a paid plan, payment processing is handled entirely by Stripe, Inc., our third-party payment processor. We receive from Stripe:

  • Subscription status and plan type
  • Payment event confirmations (successful payments, refunds, disputes)
  • A customer identifier to link your Stripe account to your Tagup Pro account

We do NOT receive or store your credit card number, CVV, or full payment card details. This information is collected and stored exclusively by Stripe in accordance with PCI DSS Level 1 standards.

Information from Third-Party Social Media Services

If you choose to connect social media accounts or import contact information from social platforms, we may collect information that is already associated with your accounts, such as profile information and contact lists. You maintain control over what information is shared through these connections.

Information Collected While Using the Application

With your permission, we may collect:

  • Location information to help with timezone settings and contact organization
  • Device information to optimize the Service for your specific device

You can enable or disable access to this information at any time through your device settings.

Third-Party Authentication Services

Google Sign-In:
Tagup Pro offers the option to create an account and sign in using your Google account. When you choose to sign in with Google, we access limited information from your Google account to authenticate you and create your Tagup Pro account.

What We Collect from Google:

  • Your email address (required for account creation and authentication)
  • Your name (if provided by your Google account)
  • Your Google account profile picture (optional, used only if you choose to display it in your profile)

How We Use Google Information:

  • Authentication: To verify your identity and provide secure access to your Tagup Pro account
  • Account Creation: To create and maintain your Tagup Pro account using your email as your unique identifier
  • Communication: To send you service-related emails, notifications, and account updates
  • Profile Display: Your name and profile picture (if provided) may be used in your Tagup Pro profile, which you can modify at any time

What We Do NOT Do with Google Data:

  • We do NOT access your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google services beyond basic sign-in information
  • We do NOT share your Google account information with third parties for marketing purposes
  • We do NOT use your Google data for serving advertisements
  • We do NOT sell your Google account information to anyone
  • We do NOT use your Google data for purposes beyond providing Tagup Pro services

Limited Use Disclosure:
Tagup Pro’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This means:

  • We only use data from your Google account for providing and improving Tagup Pro relationship management services
  • We do not transfer your Google account data to others except as necessary to provide our services, comply with applicable law, or as part of a merger or acquisition (with notice to users)
  • We do not use or transfer Google user data for serving advertisements, including retargeting, personalized ads, or interest-based advertising
  • We do not allow humans to read your Google data unless we have your explicit consent, it’s necessary for security purposes (such as investigating abuse), or it’s required to comply with applicable law

Your Control Over Google Sign-In:

  • You can revoke Tagup Pro’s access to your Google account at any time by visiting your Google Account Permissions page and removing Tagup Pro
  • Revoking access will prevent you from signing in with Google, but your Tagup Pro account will remain active
  • If you delete your Tagup Pro account, we will immediately delete all Google authentication data

Google’s Privacy Policy:
Your use of Google Sign-In is also subject to Google’s Privacy Policy. We encourage you to review Google’s privacy practices at https://policies.google.com/privacy and their Terms of Service at https://policies.google.com/terms.

Data Retention:

  • If you revoke Google Sign-In access, we retain your email address for account identification purposes
  • Google authentication tokens are immediately deleted when you disconnect Google Sign-In or delete your account
  • Your profile picture from Google (if used) remains in your Tagup Pro profile until you change or remove it

2. Cookies and Tracking Technologies

Website Analytics

Our website, tagup.pro, uses PostHog to measure how visitors use it. The Tagup Pro application does not use an analytics tool. The rules depend on where you are when you visit:

  • In the United States: website analytics is on by default. A notice at the bottom of the page tells you so, and you can opt out at any time.
  • Outside the United States, or if we cannot tell where you are: website analytics is off until you click “Accept”. Before that, your browser does not load the analytics code and sends nothing to PostHog. We ask again 12 months after your last choice.
  • Do Not Track and Global Privacy Control: if your browser sends either signal, website analytics stays off, and we do not show the notice or the banner. This applies in every region.

What website analytics collects. When website analytics is on, it collects:

  • The pages you visit, their titles, and how long you stay on each page
  • How far you scroll on a page
  • The links and buttons you click, including the text on them
  • The page that sent you to our website, and any campaign tags in the link, such as UTM tags or an advertising click ID
  • Your browser, operating system, device type, screen and window size, language, and time zone
  • Page speed measurements
  • Your country and your region, such as a state or province

PostHog uses your IP address to find your country and region, and then discards it. We do not store your IP address, city, postal code, or precise location. Website analytics gives your browser a random ID, so that repeat visits can be counted. This ID does not contain your name or email address, and we do not link it to your Tagup Pro account.

Your choices. You can turn website analytics on or off in these ways:

  • The notice or banner at the bottom of the page
  • The settings icon, or the “Cookie settings” link in the page footer
  • The Do Not Track or Global Privacy Control setting of your browser
  • Your browser settings, which can block or delete cookies and site data

When you opt out or reject, website analytics stops and sends nothing more. If website analytics was running in your browser at that moment, we also remove its ID and related data from your browser.

Cookies in the Tagup Pro Application

The Tagup Pro application uses cookies and similar technologies to provide its functionality:

Essential Cookies (Required):

  • Authentication Cookies: Maintain your login session securely
    • Duration: Session or selected “Remember Me” duration
    • Purpose: Keep you logged in and maintain secure access to your account

Functional Cookies (Optional):

  • Preference Cookies: Store your theme, layout, and UI preferences
    • Duration: Up to 1 year
    • Purpose: Remember your customized settings across sessions

The application sets no analytics or advertising cookies.

You can control cookies and similar storage in these ways:

  • Browser Settings: Configure your browser to block or delete cookies and site data
  • Website Analytics: Use the controls listed under “Your choices” above
  • Do Not Track and Global Privacy Control: Our website treats either signal as a choice to turn website analytics off

Important: Disabling essential cookies may prevent you from logging in or using certain features. Turning off website analytics does not affect your ability to use Tagup Pro.

3. Progressive Web App Storage

Tagup Pro is a Progressive Web App (PWA) that can work offline and be installed on your device. To provide this functionality, we store data locally on your device:

Service Worker & Caching

  • Service Worker: We install a background service in your browser to enable offline functionality and improve performance
  • App Shell Caching: Core application files (HTML, CSS, JavaScript) are cached on your device for instant loading
  • Font Caching: Typography assets are cached locally and expire after 1 year
  • Asset Caching: Images, icons, and other static resources are cached for faster performance
  • API Response Caching: Your relationship data is cached locally for offline access using optimized caching strategies

Local Storage Technologies

We use browser storage mechanisms to enhance your experience:

  • Local Storage: Stores authentication tokens, user preferences, and UI settings
  • Indexed Database: Stores cached relationship data for offline access
  • Cache Storage API: Stores application assets and API responses
  • Session Storage: Temporary storage for active session data

What We Store Locally:

  • Authentication tokens for maintaining your session
  • User preferences (theme, layout, filter settings)
  • Cached relationship data for offline access
  • Pending changes made while offline
  • Service worker registration data

Offline Functionality

When you use Tagup Pro offline:

  • Previously loaded relationship data remains accessible
  • Changes you make are stored locally and automatically synchronized when connectivity returns
  • New data cannot be loaded until you reconnect to the internet
  • Your data remains encrypted in local storage using browser security mechanisms

Data Management

  • Synchronization: Local data automatically syncs with our servers when you go online
  • Storage Limits: We manage cache size to prevent excessive device storage usage
  • Data Removal: All locally stored data is deleted when you:
    • Clear your browser cache and data
    • Uninstall the Tagup Pro PWA
    • Sign out and clear local data
    • Delete your account

You can disable PWA features by using Tagup Pro only in standard browser mode, though this will limit offline capabilities and may reduce performance.

4. Third-Party Services and Tools

We use carefully selected third-party service providers to operate Tagup Pro. These providers help us deliver, improve, and secure our service:

Website Analytics (PostHog)

  • PostHog, Inc.: We use PostHog to measure visits to tagup.pro. The Tagup Pro application does not use PostHog or any other analytics tool
    • Data collected: The website data listed in Section 2, under “Website Analytics”
    • Purpose: Learn which pages and campaigns bring visitors and trial sign-ups, and improve the website
    • Location: PostHog processes the data in the United States
    • Privacy: PostHog discards your IP address after it finds your country and region. We do not store your city, postal code, or precise location
    • Contract: PostHog processes this data on our behalf under a data processing agreement, and may use it only to provide its service to us
    • Your control: See “Your choices” in Section 2
    • PostHog’s Privacy Policy: https://posthog.com/privacy

Content Delivery Networks

  • Font Services: We use content delivery networks to serve typography assets efficiently
    • Purpose: Fast, reliable font loading with local caching via our PWA
    • Privacy: Minimal or no personal data transmitted; fonts cached locally on your device
    • Performance: Optimized delivery with offline support

Infrastructure and Hosting

  • Cloud Service Providers: Secure cloud infrastructure for application hosting and data storage
    • Purpose: Application hosting, database management, data storage, and backup services
    • Data security: AES-256 encryption at rest, TLS 1.3 encryption in transit
    • Data location: United States with redundant backups in secure facilities
    • Compliance: SOC 2 Type II certified infrastructure with regular security audits

Authentication and Security

  • Authentication Services: Secure user authentication and session management
    • Purpose: Protect your account and manage secure access
    • Data: Email address, encrypted authentication tokens, session information
    • Security: Industry-standard encryption and security protocols

Google Sign-In:

  • Purpose: Third-party authentication service for secure account creation and login
  • Data collected: Email address (required), name (optional), profile picture URL (optional)
  • How we use it: Account authentication, user identification, profile display
  • Your control: Can be revoked through Google Account Permissions or by removing your Tagup Pro account
  • Google’s Privacy Policy: https://policies.google.com/privacy
  • Limited Use Compliance: We comply with Google API Services User Data Policy, including Limited Use requirements

We use Google Sign-In to provide you with a convenient and secure way to access Tagup Pro without creating a separate password. Google Sign-In is optional; you can also create an account using email and password authentication.

Transcription (AssemblyAI)

  • AssemblyAI: We use AssemblyAI to convert your recorded conversation audio into a written transcript
    • Purpose: Speech-to-text transcription and speaker labeling (diarization) of recordings you create
    • Data shared: The conversation audio you record, transmitted only to produce the transcript
    • Retention: The audio (and AssemblyAI’s copy of the transcript) is deleted after transcription — neither we nor AssemblyAI retains the audio
    • AI training: AssemblyAI does not use your audio or transcripts to train AI models
    • Scope: AssemblyAI is used only for transcription; it has no role in sign-in or payments and no access to your account credentials or payment data
    • AssemblyAI’s processing of your audio is also subject to its own terms and privacy policy

Payment Processing

  • Stripe, Inc.: We use Stripe as our payment processor for subscription billing and payment management
    • Purpose: Process subscription payments, manage billing cycles, handle refunds and disputes
    • Data collected by Stripe: Payment card details (card number, expiration date, CVV), billing address, and transaction history
    • Important: Tagup Pro does NOT collect, store, or have access to your full credit card number or payment card details. All payment information is entered directly into Stripe’s secure payment forms and processed entirely by Stripe
    • Security: Stripe is PCI DSS Level 1 certified, the highest level of payment security certification
    • Data we receive from Stripe: Subscription status, plan type, payment confirmations, customer identifier, and last four digits of your card (for display purposes only)
    • Stripe’s Privacy Policy: https://stripe.com/privacy
    • Your control: Manage payment methods and billing through the Stripe Customer Portal accessible from your Tagup Pro account settings

All third-party service providers are carefully vetted for security and privacy compliance. Service providers are contractually bound to:

  • Protect your data with appropriate security measures
  • Use your data only for providing services to Tagup Pro
  • Comply with applicable privacy regulations
  • Maintain confidentiality and data protection standards

We conduct regular security assessments of our service providers and require them to maintain appropriate security certifications.

5. How We Use Your Information

Tagup Pro uses your information solely to provide and improve our relationship management service:

  • Authentication and Access: To verify your identity when you sign in, whether using password authentication, Google Sign-In, or other authentication methods, and to maintain secure access to your account
  • Service Delivery: To provide you with access to Tagup Pro features, sync your data across devices, and maintain your relationship database
  • Website Improvement: To understand how visitors use our website, through the website analytics described in Section 2
  • Customer Support: To respond to your inquiries, troubleshoot technical issues, and provide assistance with your account
  • Service Communications: To send you important updates about your account, service changes, and new features that enhance your relationship management capabilities
  • Security and Fraud Prevention: To protect your account from unauthorized access and detect suspicious activity
  • Billing and Subscription Management: To process payments through our third-party payment processor (Stripe), manage your subscription status, enforce plan limits, and provide billing history
  • Product Development: To improve features and develop new capabilities, based on feedback, support requests, and the website analytics described in Section 2

We do not:

  • Analyze your relationship data for advertising purposes
  • Share your contact information or relationship details with third parties for marketing
  • Use your relationship data to contact people in your network
  • Sell or monetize your personal or professional relationship information
  • Use your conversation audio, transcripts, or relationship data to train, fine-tune, or improve AI or machine-learning models
  • Permit our transcription provider (AssemblyAI) or other providers that handle your conversation content to use it to train AI models
  • Share your data with data brokers or advertising networks

6. Data Security and Protection

Your relationship data is among your most sensitive professional information. We implement enterprise-grade security measures:

  • Encryption in Transit: All data transferred between your device and our servers is protected using TLS 1.3 encryption with perfect forward secrecy
  • Encryption at Rest: All relationship data stored on our servers is encrypted using AES-256 encryption with regularly rotated encryption keys
  • Access Controls: Strict role-based access controls ensure only authorized systems and personnel can access infrastructure, with comprehensive audit logging
  • Infrastructure Security: Our systems operate within secure cloud infrastructure with:
    • 24/7 automated security monitoring
    • Intrusion detection and prevention systems
    • Regular security assessments and penetration testing
    • Automated vulnerability scanning and patching
  • Data Isolation: Your relationship data is logically isolated from other users’ data through secure multi-tenant architecture
  • Backup Security: All backups are encrypted and stored in geographically separate locations
  • Secure Development: We follow secure coding practices and conduct regular security code reviews

7. Data Ownership and Control

Your relationship data belongs entirely to you. Tagup Pro provides you with complete control over your information:

  • Data Access: You can export all your relationship data at any time through your account settings
  • Data Correction: You maintain full control to modify, update, or correct any information in your Tagup Pro account
  • Data Deletion: You can permanently delete your account and all associated relationship data at any time. Upon deletion, we will completely remove your data from our systems within 30 days
  • Recordings and Transcripts: You can delete any transcript at any time. Conversation audio is not retained, so it is never part of an export. If you have shared a conversation with a contact, deleting your own transcript does not withdraw the copy they already have; that copy expires 30 days after the share. If you have recorded someone, that person can also ask us to remove transcription data that pertains to them (see “Recording & Transcription Consent” above)
  • Data Portability: Your relationship data is available for export in standard formats:
    • JSON format: Complete data export with all relationships, tasks, follow-ups, and notes
    • CSV format: Contact list export compatible with other CRM tools
    • vCard format: Standard contact file format for import into address books

Exports include all your User Content. They do not include website analytics data, because that data is not linked to your account. Billing and payment data managed by Stripe is not included in data exports; you can access your payment history and invoices through the Stripe Customer Portal available in your account settings.

8. Data Sharing and Third Parties

We do not share, sell, or rent your relationship data. Limited sharing occurs only in these specific circumstances:

  • Third-Party Authentication Providers: When you use Google Sign-In to access Tagup Pro, Google provides us with your email address and basic profile information (name, picture if available). We do not share your Google account information with any other third parties beyond what is necessary to provide Tagup Pro services. Your use of Google Sign-In is subject to Google’s own privacy policy and terms of service. We comply with the Google API Services User Data Policy, including Limited Use requirements. You can manage your authentication preferences and revoke access at any time.
  • Payment Processor (Stripe, Inc.): When you subscribe to a paid plan, we share a customer identifier and your email address with Stripe to process payments and manage your subscription. Stripe independently collects your payment card details directly through its secure payment forms. We do not have access to your full card information. Stripe’s use of your data is governed by their own privacy policy and they are PCI DSS Level 1 certified
  • Transcription Provider (AssemblyAI): When you record a conversation, the audio is shared with AssemblyAI solely to produce a transcript and is deleted afterward. AssemblyAI does not use your content to train AI models. See Section 4 for details
  • Recording-Consent Emails: When you request recording consent from a contact, we send that contact an email on your behalf — containing your name, organization, and stated purpose — so they can grant or decline. We do this only at your initiative
  • Shared Conversations: When you share a conversation with the person it involves, we email that person a link and store a copy of what you shared so they can open it. The copy holds the conversation’s title, its date, its transcript, and your own notes if you chose to include them. We do this only when you send it, one conversation at a time, and we delete the stored copy 30 days later. Nothing is shared automatically
  • Service Providers: We work with trusted service providers who help us operate Tagup Pro (such as cloud infrastructure providers and analytics tools). These providers are contractually bound to protect your data and cannot use it for any purpose other than providing services to Tagup Pro
  • Business Transfers: If Tagup Pro is involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will provide advance notice before your data is transferred and becomes subject to a different Privacy Policy
  • Legal Requirements: We may disclose information if required by law, legal process, subpoena, or court order, or to protect the rights, safety, and security of Tagup Pro, our users, or the public
  • With Your Consent: We may disclose your personal information for any other purpose with your explicit consent

We will never sell your relationship data to third parties for marketing or advertising purposes.

9. Data Retention

We retain your relationship data only as long as your account is active or as needed to provide you with the Tagup Pro service:

  • Account Data: Retained until account deletion plus 30 days for complete removal
  • Relationship Data: Retained until you delete specific data or your entire account
  • Conversation Audio: Not retained — deleted from our systems and from our transcription provider (AssemblyAI) after transcription completes, within one day at the latest
  • Transcripts: Retained until you delete the transcript or your account; audio is never retained, so transcripts are the only record of a recording
  • Consent Records: Recording-consent requests, choices, the related audit history, and the dates of any statement of permission are kept for as long as your account exists, and are deleted when your account is deleted. We keep them for that period so both you and the people you record have a reliable history of what was asked and what was answered
  • Shared Conversation Copies: The copy we store so a contact can open a conversation you shared is deleted 30 days after the share. Deleting the original transcript in your account does not remove a copy you have already shared; that copy expires on its own schedule
  • Portal Links: A sign-in-free link to the consent and sharing portal expires 12 months after it was last used
  • Website Analytics: PostHog keeps website analytics events for 1 year. PostHog does not let us set a shorter period. The data holds no IP address and is not linked to your account
  • Support Communications: Retained for up to 3 years for customer service quality and training purposes
  • Billing Records: Transaction records, subscription history, and payment event logs are retained for up to 7 years as required by tax and financial reporting regulations, even after account deletion. These records do not contain payment card details, which are stored exclusively by Stripe
  • Backup Data: Encrypted backups are retained for 90 days and then permanently deleted
  • Legal Compliance: Some data may be retained longer if required by applicable law

When you delete your account, we permanently remove all your data from our production systems within 30 days. Backup copies are automatically purged according to our retention schedule. Website analytics data is not linked to your account, so deleting your account does not change it.

10. International Data Handling

Tagup Pro operates with a global user base. Your relationship data may be processed in data centers located in different regions to provide optimal performance and reliability. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

Data Transfer Safeguards

  • Encryption: All international data transfers use TLS 1.3 encryption
  • Contractual Protections: Service providers sign data processing agreements with appropriate safeguards
  • Security Standards: All data centers meet or exceed industry security standards
  • Compliance: We comply with applicable cross-border data transfer regulations

Your consent to this Privacy Policy followed by your submission of information represents your agreement to such transfers. No transfer of your personal data will take place unless there are adequate controls in place including the security of your data.

11. Children’s Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us at privacy@tagup.pro.

If we become aware that we have collected personal data from anyone under the age of 18 without verification of parental consent, we take immediate steps to remove that information from our servers.

Tagup Pro allows you to store website URLs and social media links for your contacts. If you click on these third-party links, you will be directed to those external sites. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Third-Party Privacy Policies

When you use third-party services to create an account or sign in to Tagup Pro, your information is also subject to those services’ privacy policies and terms:

Google Services:

Stripe (Payment Processing):

We encourage you to review these policies to understand how third-party services collect, use, and protect your information. Tagup Pro is not responsible for the privacy practices of third-party services.

14. Changes to This Privacy Notice

We may update this privacy notice as Tagup Pro evolves from beta to full release and as we add new features. When we make changes:

  • We will update the “Last Updated” date at the top of this page
  • We will notify you through the Tagup Pro platform for material changes
  • We will send email notifications for significant privacy changes
  • We will provide a summary of changes when appropriate

Your continued use of Tagup Pro following any changes constitutes acceptance of the updated privacy notice. If you do not agree with the changes, you may delete your account and stop using the Service.

15. Beta Program Privacy

During our beta period, we may collect additional feedback about your Tagup Pro experience to improve the platform:

  • Voluntary Feedback: You may be invited to provide feedback through surveys, interviews, or in-app prompts
  • Feature Testing: We may ask you to test new features and provide input
  • Usage Analysis: We analyze feature usage patterns to guide product development
  • Privacy Protection: Beta feedback is treated with the same privacy protections as your relationship data

Beta participation is voluntary, and you can decline to provide feedback at any time without affecting your ability to use Tagup Pro.

16. California Privacy Rights (CalOPPA & CCPA/CPRA)

California Online Privacy Protection Act (CalOPPA) Compliance

California residents have the right to know how their personal information is being used. This Privacy Notice describes our practices regarding the collection, use, and disclosure of personal information.

Do Not Track and Global Privacy Control: If your browser sends a Do Not Track (DNT) or Global Privacy Control (GPC) signal, our website does not load the website analytics code, so no analytics data is collected from your visit. The Tagup Pro application has no analytics.

Tracking Across Websites: No other company collects personal information about your activity across different websites through our website.

California Consumer Privacy Act (CCPA/CPRA) Rights

If you are a California resident, you have the following rights under the CCPA/CPRA:

Right to Know: You have the right to request information about the categories and specific pieces of personal information we collect, use, disclose, and sell about you, as well as information about our data practices over the past 12 months.

Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.

Right to Correct: You have the right to request that we correct inaccurate personal information about you.

Right to Opt-Out: You have the right to opt-out of the sale or sharing of your personal information. Tagup Pro does not sell or share personal information for monetary consideration or cross-context behavioral advertising. We also treat a Global Privacy Control signal from your browser as a request to opt out, and our website turns website analytics off when it receives it.

Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of your sensitive personal information to what is necessary to perform our services.

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

If You Are Not a Tagup Pro Account Holder: these rights also cover consent records, transcription data, and shared conversation copies that pertain to you, even if you have never held a Tagup Pro account. You do not need an account to exercise them. Use the sign-in-free portal link we sent you, or email privacy@tagup.pro.

Exercising Your Rights

To exercise these rights:

  • Contact us at privacy@tagup.pro with “California Privacy Rights” in the subject line
  • Use the data export and deletion tools in your account settings
  • Use the sign-in-free portal link if you are a recorded person without a Tagup Pro account
  • Contact our support team at support@tagup.pro

We will verify your identity before processing requests and respond within the timeframes required by law (typically 45 days, with possible 45-day extension for complex requests).

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers (name, email address, and the random ID that our website analytics gives your browser)
  • Commercial information (account activity, service usage)
  • Internet activity (pages visited and clicks on our website, when website analytics is on)
  • Geolocation data (time zone, and the country and region of website visitors)
  • Professional information (contacts, relationship data you provide)
  • Audio/electronic information (conversation audio is captured transiently and deleted after transcription; transcripts you create are retained)
  • Consent records (recording-consent requests, choices, audit history, and the dates of any statement of permission)
  • Shared conversation copies (what a Tagup user chose to send you, held for 30 days)
  • Financial information (subscription status, billing events — note: payment card details are collected and stored by Stripe, not by Tagup Pro)

17. European Union Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

We process your personal data based on:

  • Consent: When you voluntarily provide information and agree to our processing. Website analytics outside the United States runs only on your consent, which you give with “Accept” in the banner
  • Contract Performance: To provide the Tagup Pro service you’ve requested
  • Legitimate Interests: To improve our service, prevent fraud, ensure security, and analyze usage patterns (where not overridden by your rights)
  • Legal Obligations: To comply with applicable laws and regulations

Your GDPR Rights

  • Right of Access: Request copies of your personal data and information about how we process it
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format (JSON, CSV, vCard)
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, including consent to website analytics
  • Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority

If You Have Been Recorded but Have No Tagup Pro Account

You can be a data subject without being our customer. If a Tagup user has asked to record you, recorded you, or shared a conversation with you, these rights cover the consent record, the transcription data, and the shared copy that pertain to you. You do not need an account to exercise them. Use the sign-in-free portal link we sent you to withdraw permission, or email dpo@tagup.pro. Because your relationship to that data runs through a Tagup user, we may need to coordinate with them before we act.

Exercising Your GDPR Rights

To exercise these rights:

  • Email our Data Protection Officer at dpo@tagup.pro with “GDPR Request” in the subject line
  • Use the data export and account deletion tools in your account settings
  • Use the sign-in-free portal link if you are a recorded person without a Tagup Pro account
  • Change your website analytics choice with the banner, the settings icon, or the “Cookie settings” link in the page footer
  • We will respond within one month (extendable by two months for complex requests)

Data from Third-Party Services:
If you signed in using Google Sign-In, you also have the right to manage your data through Google’s privacy controls at https://myaccount.google.com. This includes:

  • Viewing what information Google has shared with Tagup Pro
  • Revoking Tagup Pro’s access to your Google account
  • Managing your Google account privacy settings

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer:

Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with GDPR requirements. We encourage you to contact us first so we can address your concerns.

18. International Data Transfers

For users in the EEA, UK, or Switzerland, we ensure adequate protection for international data transfers through:

  • Standard Contractual Clauses: We use Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to countries without adequacy decisions
  • Adequacy Decisions: We rely on adequacy decisions where applicable
  • Additional Safeguards: Technical measures including encryption, access controls, and security assessments
  • Data Processing Agreements: Contractual commitments from all data processors

We conduct transfer impact assessments to ensure appropriate safeguards are in place for all international data transfers.

19. Contact Us

If you have questions about this Privacy Notice or how Tagup Pro handles your relationship data, please contact us:

Tagup Pro
General Privacy Inquiries: privacy@tagup.pro
Customer Support: support@tagup.pro
Data Protection Officer (GDPR): dpo@tagup.pro
Website: https://tagup.pro

For California Residents: To exercise your CCPA/CPRA rights, email privacy@tagup.pro with “California Privacy Rights” in the subject line.

For EU/UK Residents: To exercise your GDPR rights, email dpo@tagup.pro with “GDPR Request” in the subject line.

We are committed to addressing any privacy concerns promptly and helping you understand how Tagup Pro protects your professional relationship data. We typically respond to privacy inquiries within 2-3 business days.

Last Updated: September 28, 2026
Effective Date: August 22, 2026
Version: 2.5