Privacy Policy

Account information: When you subscribe, Stripe collects your email address and payment details. We receive your email address and subscription status from Stripe — we never see your card number, CVV, or full payment details.

Beta invite codes: If you access the Service via an invite code, we store the code and usage count to enforce usage limits.

Form input data: When you generate a listing, we temporarily process the product details you enter (name, material, features, etc.) to generate content. This data is sent to Anthropic's Claude API for AI processing.

Generation logs: We store a log of each generation — including your input, the generated output, and any feedback you provide — to monitor service quality and diagnose issues. Logs are stored in our Redis database.

Feedback: If you submit a thumbs up/down rating or text feedback, we store this linked to the generation log.

• To provide and improve the Service
• To manage your subscription and billing via Stripe
• To enforce usage limits on beta and paid plans
• To monitor service quality and generation accuracy
• To diagnose and fix bugs
• To contact you about your subscription (payment issues, policy changes)

We do not sell your data. We do not use your listing inputs to train AI models. Your product details are processed transiently by Anthropic's API to generate your listing and are not retained by Anthropic for training purposes (per their API data usage policy).

Stripe — Handles all payment processing. Your payment information is subject to Stripe's Privacy Policy. We receive only your email and subscription status.

Anthropic (Claude API) — Processes your listing input to generate content. Anthropic does not retain API inputs for model training. See Anthropic's privacy policy for details.

Upstash Redis — Stores session data, beta tokens, subscription records, and generation logs. Data is stored in encrypted form in Upstash's infrastructure.

Vercel — Hosts the Service. Server request logs may be retained by Vercel for up to 30 days.

We use a single session cookie (tr_session) to keep you logged in. This cookie contains a time-limited token that identifies your session type (beta or subscriber). It does not contain personal information and expires after 30 days.

We do not use tracking cookies, advertising cookies, or third-party analytics.

Generation logs are retained for up to 12 months for quality monitoring purposes. Beta token data is retained until the beta programme concludes. Subscription records are retained for 7 years for financial compliance purposes.

You may request deletion of your generation logs by contacting us at support@tagrocket.io.

We use HTTPS for all data transmission. Session cookies are set as httpOnly and Secure. Database credentials and API keys are stored as environment variables and never exposed client-side.

No security system is perfect. In the event of a breach that affects your personal data, we will notify you within 72 hours of discovery.

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, email us at support@tagrocket.io with your request. We will respond within 30 days.

The Service is not directed at children under 18. We do not knowingly collect data from anyone under 18.

We may update this Privacy Policy. We will notify active subscribers by email before material changes take effect. The "Last updated" date at the top reflects the most recent revision.

For privacy questions or data requests: support@tagrocket.io