PayTag Privacy Policy

Version 2026-09-25 · beta.

What we collect

Account: your email, a password (stored hashed by our sign-in provider), the name you give your space, and the version of the terms you agreed to, with the time and the network address it came from.
What you put in: rows, tools, stories, menus, messages, files, and the names and phone numbers of people you add. People who join a tool by QR or link give a name, and a phone number only if they text PayTag.
Usage: what the app and your AI did (a receipt for every change, kept so you can undo), AI request counts, text counts, and error reports (with the request that failed, never your password).

Where it lives

Data is stored with Supabase (Postgres, hosted in the United States) and served from Render. Both encrypt data in transit and at rest and are bound by their own privacy terms.
Error reports go to Sentry. Texts go through Twilio. Payments go through the processor you connect. Mail from PayTag to you (a welcome, a digest, a copy of what you wrote) goes through Postmark. Your PayTag subscription is billed by Stripe, which holds your card; we hold only a customer id.
Banks: if you link a bank, the link is made by Plaid on Plaid's own page; PayTag never sees your bank sign-in. Plaid gives PayTag read-only transactions and balances, which are stored in a table in your account until you unlink, when the link is removed at Plaid and the rows are deleted. Plaid's privacy policy (plaid.com/legal) covers Plaid's side.
AI requests go to the AI provider behind Tag, and to whichever AI you connect yourself. They receive your request and the data needed to answer it, and no more.

What we do with it

Run PayTag for you. Nothing else. We do not sell data, we do not run ads, and we do not use your data to train AI models.
We look at usage in aggregate to see what works and what breaks.
We may look at an individual account to fix a problem you reported or to investigate abuse.

Who can see your data

You, and the crew or co-owners you invite.
People who join a tool see only that tool's join pages, as themselves.
Anyone with the link to a tool you shared by link, or to your public menu or order form.
An AI you connected, acting as you, until you revoke it.
Us, only as described above.

How long we keep it

For as long as your account exists. Receipts and AI usage counts are kept for the life of the account so undo and the allowance work. When you ask us to delete your account, we delete it and its backups age out within the backup retention period.

Cookies

Only what sign-in needs: a session token in your browser. No tracking cookies, no third-party analytics.

Your choices

Revoke any connected AI, phone or display under Connect.
Unlist a template, or stop sharing a tool, from the tool's Manage section.
Anyone who texts STOP is never texted again unless they text START.
Ask us to export or delete your data: support@pay-tag.com.

If something goes wrong

If we learn that your data was reached by someone who should not have reached it, we tell you by email in plain words, promptly and within the time the law allows: what happened, what was taken, what we did and what you should do. We keep a written breach plan and we review it each quarter.

Reporting

To report a public page or content that breaks our terms, write to abuse@pay-tag.com. A person reads it within one business day.

Changes

A change in substance gets a new version date and a note in the app.