PayTag Privacy Policy

Version 2026-09-18 · beta.

What we collect

Account: your email, a password (stored hashed by our sign-in provider), the name you give your space, and the version of the terms you agreed to, with the time and the network address it came from.
What you put in: rows, tools, stories, menus, messages, files, and the names and phone numbers of people you add. People who join a tool by QR or link give a name, and a phone number only if they text PayTag.
Usage: what the app and your AI did (a receipt for every change, kept so you can undo), AI request counts, text counts, and error reports (with the request that failed, never your password).

Where it lives

Data is stored with Supabase (Postgres, hosted in the United States) and served from Render. Both encrypt data in transit and at rest and are bound by their own privacy terms.
Error reports go to Sentry. Texts go through Twilio. Payments go through the processor you connect.
AI requests go to the AI provider behind Tag, and to whichever AI you connect yourself. They receive your request and the data needed to answer it, and no more.

What we do with it

Run PayTag for you. Nothing else. We do not sell data, we do not run ads, and we do not use your data to train AI models.
We look at usage in aggregate to see what works and what breaks.
We may look at an individual account to fix a problem you reported or to investigate abuse.

Who can see your data

You, and the crew or co-owners you invite.
People who join a tool see only that tool's join pages, as themselves.
Anyone with the link to a tool you shared by link, or to your public menu or order form.
An AI you connected, acting as you, until you revoke it.
Us, only as described above.

How long we keep it

For as long as your account exists. Receipts and AI usage counts are kept for the life of the account so undo and the allowance work. When you ask us to delete your account, we delete it and its backups age out within the backup retention period.

Cookies

Only what sign-in needs: a session token in your browser. No tracking cookies, no third-party analytics.

Your choices

Revoke any connected AI, phone or display under Connect.
Unlist a template, or stop sharing a tool, from the tool's Manage section.
Anyone who texts STOP is never texted again unless they text START.
Ask us to export or delete your data: support@pay-tag.com.

Changes

A change in substance gets a new version date and a note in the app.