1. Introduction

Welcome to Tagless ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of the data you process through our platform.

This Privacy Policy explains how we collect, use, and share information when you access our website or use our software-as-a-service (SaaS) platform (the "Service"). By using Tagless, you agree to the collection and use of information in accordance with this policy.

2. Roles and Responsibilities

To ensure clarity regarding how your data is handled, we distinguish between three roles:

• You (The Client): The user of the Tagless service.
• Us (The Provider): ChatVector Ltd, trading as Tagless, a company registered in Scotland, United Kingdom.
• Merchant of Record (Reseller): Lemon Squeezy, our authorized reseller who handles all payments and tax compliance.

3. Information We Collect

3.1. Information You Provide (Account Data)

When you register for Tagless, we collect personal information required to manage your account:

• Identity Data: Name and email address.
• Business Data: Your Google Ads Account IDs and any credentials required to connect your lead sources (such as WhatsApp Business API, web forms, email, or SMS).
• Billing Data (Important): We use Lemon Squeezy as our Merchant of Record. When you make a purchase, your billing information (address, credit card details, and tax ID) is collected and processed directly by Lemon Squeezy. Tagless does not view, store, or process your credit card information.

3.2. Information We Process on Your Behalf (End User Data)

To provide our lead attribution service, we process data regarding the individuals who interact with your tracked channels ("End Users"). Regarding this data, you are the Data Controller and we are the Data Processor. This includes:

• Identifiers: Google Click IDs (GCLID), IP addresses, and unique browser identifiers.
• Communication Data: Phone numbers, email addresses, message timestamps, delivery status, and form submission data across tracked channels (WhatsApp, web forms, email links, and SMS).
• Message Content (Optional): If you enable AI Lead Qualification, we securely process the text of inbound messages to determine lead quality and intent.

3.3. Google Ads Data

When you connect your Google Ads account to Tagless via OAuth, we access the following data:

• OAuth Tokens: We store encrypted OAuth refresh tokens to maintain your Google Ads connection. Tokens are encrypted at rest using industry-standard encryption.
• Account Information: Google Ads account names, IDs, and conversion action configurations.
• Campaign Data: Campaign, ad group, and ad performance metrics used for attribution reporting.

We upload offline conversion data (including GCLID, conversion value, and timestamp) to your linked Google Ads account at your explicit instruction.

3.4. Usage Data

We automatically collect information on how the Service is accessed and used, such as your computer's Internet Protocol address, browser type, browser version, and the time and date of your visit.

4. How We Use Your Information

We use the collected data for the following purposes:

• Service Delivery: To link lead interactions across WhatsApp, web forms, email, and SMS to specific Google Ads clicks and attribute conversions.
• Automation: To verify valid leads and upload offline conversion events to your linked Google Ads account.
• AI & Improvement: To train our algorithms to better detect bots, spam, and non-sales engagements (e.g., support tickets).
• Communication: To contact you with service updates, newsletters, or promotional materials. You may opt out of these communications at any time.

5. Google API Services User Data Policy

Tagless's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access Google Ads data necessary to provide and improve the Tagless service for you.
• We do not use Google Ads data for serving advertisements.
• We do not sell, rent, or share Google Ads data with third parties, except as necessary to provide the service (e.g., uploading conversions back to your own Google Ads account).
• We do not use Google Ads data for any purpose other than providing and improving the Tagless attribution service.
• Human access to Google Ads data is limited to what is necessary for debugging, security, legal compliance, or providing support at your request.

6. Sharing of Data

We do not sell your data. We share your information only in the following circumstances:

• With Our Merchant of Record (Lemon Squeezy): We share your email and order details with Lemon Squeezy to facilitate your subscription, invoicing, and tax calculation.
• With Service Providers: We employ third-party companies to facilitate our Service, including cloud hosting providers for secure data storage and processing.
• With Google Ads: At your explicit instruction, we transmit conversion data (including GCLID, conversion value, and timestamp) directly to your linked Google Ads account.
• Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

We do not share, sell, or transfer Google Ads data to any third party for advertising, data brokering, or any other purpose unrelated to the Tagless service.

7. Data Retention

• Account Data: Retained for as long as your account is active.
• Attribution Logs: Retained only for as long as necessary to provide historical reporting or to comply with legal obligations.
• Google Ads Data: OAuth tokens and Google Ads data are deleted within 30 days of account disconnection or account deletion.
• Payment Data: We do not retain payment data. Lemon Squeezy retains billing records in accordance with their own data retention policies and tax regulations.

8. Revoking Access and Data Deletion

You can disconnect your Google Ads account at any time from your Tagless dashboard. Doing so will:

• Delete your stored OAuth credentials (refresh tokens).
• Stop all further data access to your Google Ads account.
• Remove synced Google Ads data from your Tagless account within 30 days.

You can also revoke access directly at any time via Google's security settings.

To request full account deletion, contact us at admin@tagless.ai. We will delete all account data and associated records within 30 days, except where retention is required by law.

9. Security of Data

The security of your data is important to us. We implement the following measures:

• All data is encrypted in transit (TLS) and at rest.
• OAuth refresh tokens are stored using industry-standard encryption.
• Access to production systems and user data is restricted to authorized personnel only.
• We conduct regular security reviews of our infrastructure.

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA) or the UK, you have certain data protection rights. Tagless aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Tagless (a trading name of ChatVector Ltd)‍

272 Bath Street, Glasgow, G2 4JR, Scotland, United Kingdom

Email: admin@tagless.ai

‍

‍