1.Who is responsible for your data
The data controller is TAGGLE S.R.L., registered in Romania at STR TURDA, NR.48, ET.2, Bucuresti, Romania, company number 51775311 / J2025033609004. For anything to do with your personal data, write to contact@taggle.pro.
This policy explains what we collect, why, how long we keep it, and what you can ask us to do about it. It covers taggle.pro and the Taggle app.
2.What we collect
Information you give us
- Account — email address, password (stored hashed, never in readable form), username, display name, avatar, and anything else you add to your profile.
- If you sign in with Google — your name, email address and profile picture, as supplied by Google. We don't receive your Google password.
- Content — references you upload or save, tags, notes, titles, descriptions, categories, boards, and files you upload to the frame and GIF tool.
- Messages — the content of messages you send to other users through Taggle.
- Payment details — handled by our payment provider. We receive confirmation of payment, the plan, and the last four digits of the card. We never see or store the full card number.
- Correspondence — what you write to us by email or through the feedback form.
Information collected automatically
- Usage — pages you open, references you view, searches you run, what you like and follow.
- Technical — IP address, browser and device type, operating system, language, and timestamps.
- Cookies and local storage — see section 7.
3.Why we use it, and our legal basis
Under the GDPR we need a legal basis for every use. Ours are:
- To run your account and provide the service — creating your account, storing your references, showing your boards, delivering messages. Basis: performance of a contract with you.
- To take payment — processing subscriptions, invoicing, refunds. Basis: performance of a contract, and legal obligation for keeping accounting records.
- To keep the platform working and safe — diagnosing faults, preventing abuse, fraud and spam, enforcing our Terms. Basis: legitimate interests in a service that functions and isn't abused.
- To improve search, tagging and recommendations — analysing usage patterns and content in aggregate. Basis: legitimate interests in improving the product. You can object — see section 9.
- To send service emails — password resets, billing notices, changes to these terms. Basis: contract and legal obligation. These aren't marketing and you can't opt out while you have an account.
- To send product news — only if you ask for it. Basis: consent, which you can withdraw at any time.
- To handle legal claims and takedown notices. Basis: legal obligation and legitimate interests in defending ourselves.
4.What other people can see
Some things on Taggle are public by design. Before you upload, know which:
- Public — your username, display name, avatar, profile description, and any reference you mark as public, along with its tags and categories. Your follower and following counts are visible too.
- Visible to people you share with — boards you invite others to, and anything you put on them.
- Private — your email address, password, payment details, private references, and your messages.
A short link to a reference opens for anyone who has it. Treat those links as public.
5.Who we share it with
We don't sell your personal data and we don't share it with third parties for their own marketing. We do use service providers who process data on our instructions:
- Supabase — database, authentication and file storage. Holds your account, references and uploads.
- Vercel — hosting and delivery of the website. Processes request data including IP addresses.
- Railway — runs the video analysis service used by the automatic frame and GIF tool. Receives the clip you upload, processes it, and deletes it as soon as processing finishes. The clip is not kept.
- Google — only if you choose to sign in with Google.
- Stripe — subscription payments.
- Google / Brevo — sending service and account emails.
We may also disclose data where the law requires it, to enforce our Terms, or to protect the rights and safety of users. If the business is sold or reorganised, data may transfer to the new owner — we'll tell you before that happens.
6.Transfers outside the EU
Some of our providers operate outside the European Economic Area, including in the United States. Where data leaves the EEA we rely on the European Commission's Standard Contractual Clauses, or on an adequacy decision where one applies. You can ask us for a copy of the safeguards in place by writing to contact@taggle.pro.
8.How long we keep things
- Account and content — while your account is open. If you delete your account, we remove or anonymise your personal data within 30 days.
- Backups — deleted data can persist in encrypted backups for up to 90 days before being overwritten.
- Uploaded video clips — deleted immediately after the frames are generated. They are never stored.
- Billing and accounting records — kept for as long as Romanian tax law requires, currently 10 years.
- Technical logs — up to 12 months.
- Records of abuse, bans and takedowns — up to 3 years, so we can enforce repeat-infringer rules.
9.Your rights
Under the GDPR you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct anything that's wrong or incomplete.
- Delete your data, where we don't have an overriding reason to keep it.
- Restrict how we use it while a dispute is resolved.
- Send it elsewhere — receive your data in a portable, machine-readable format.
- Object to processing based on legitimate interests, including the analysis we do to improve recommendations.
- Withdraw consent at any time, where consent is the basis. This doesn't affect what we did before you withdrew it.
Write to contact@taggle.pro. We reply within one month. It's free unless a request is clearly excessive or repetitive. We may ask you to confirm your identity first.
Complaints
If you think we've handled your data badly, please tell us so we can put it right. You can also complain to the Romanian supervisory authority, ANSPDCP — dataprotection.ro — or to the authority in the EU country where you live.
10.How we protect it
Data is encrypted in transit with TLS and at rest by our infrastructure providers. Passwords are hashed. Access to production data is limited to people who need it. Two-factor authentication is available on your account and we recommend turning it on.
No system is perfectly secure. If a breach happens that puts your rights at risk, we'll notify the supervisory authority within 72 hours and tell you without undue delay.
11.Children
Taggle isn't for people under 16. We don't knowingly collect data from them. If you believe a child has given us personal data, write to contact@taggle.pro and we'll delete it.
12.Automated decisions
We use automated processing to rank search results, suggest tags, and pick frames from the clips you upload. None of it produces legal effects or similarly significant consequences for you, and none of it decides anything about your account. You can always override a suggestion.
13.Changes to this policy
We'll update this page when what we do changes. The date at the top always shows the current version. For material changes we'll tell you by email or in the app before they take effect. Read it alongside our Terms of Use.