Privacy Policy
Tagioo ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using Tagioo, you agree to this policy.
1. Data We Collect
Account data: Name, email address, company name, website URL, and billing information provided during signup.
Tracking and ecommerce data: Events that a merchant configures Tagioo to process, such as page views, product activity, checkout activity, purchases, order identifiers, products, value, currency, timestamps, browser information, IP address, and customer contact or delivery fields supplied by the connected store. This data belongs to the merchant.
Usage data: Dashboard activity, container configuration, API requests, and system logs for security and performance monitoring.
Payment data: Subscription status, plan, transaction identifiers, and billing-provider references. Shopify, Paddle, or a local payment provider processes payment credentials; Tagioo does not store full card numbers.
2. How We Use Your Data
- Provisioning and operating your sGTM container.
- Displaying event analytics in your dashboard.
- Processing billing and verifying payments.
- Sending ecommerce events to the analytics and advertising destinations that you configure.
- Providing customer support via email and WhatsApp.
- Monitoring infrastructure health and detecting abuse.
- Sending service notifications (plan changes, downtime, updates).
We do not sell your data. We do not use your tracking event data for advertising purposes.
3. Data Isolation
Each Tagioo customer operates an isolated container or workspace. Access controls and tenant identifiers separate your tracking events from other customers. Data may be processed on infrastructure in the region used to provide your service and by the providers listed below.
4. Third-Party Services
Depending on the services you connect, Tagioo relies on:
- Shopify — app installation, store events, orders, privacy requests, and Shopify-managed subscriptions.
- Google, Meta, TikTok, and other destinations you select — receipt and measurement of events you configure.
- Paddle and local payment providers — payment processing for eligible non-Shopify purchases.
- Cloudflare, hosting, container, certificate, and email providers — delivery, security, infrastructure, and service communications.
These providers process data under their own terms and privacy policies. Tagioo does not sell merchant or customer personal data.
5. Cookies
Tagioo uses essential cookies to keep you signed in and protect authenticated sessions. Our public website may also use analytics configured by Tagioo to measure visits. Connected merchants remain responsible for obtaining any consent required for tracking on their storefronts.
6. Data Retention
Account and subscription records are retained while the account is active and as needed for legal, security, and billing purposes. Event-log retention varies by plan and configuration and is shown in the Service. Shopify order payloads queued by the app are deleted after successful delivery. When Shopify sends a valid customer or shop redaction request, Tagioo removes the matching Shopify data. Following account termination, remaining service data is scheduled for deletion after a 14-day recovery period unless longer retention is legally required.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Export your event data.
- Object to processing of your data.
To exercise any of these rights, contact us at [email protected].
8. Shopify Merchant and Customer Requests
The Tagioo Tracking app receives Shopify's mandatory customer-data request, customer-redaction, and shop-redaction webhooks. We use those authenticated requests to locate, provide, or delete matching Shopify data. Merchants and customers may also contact us directly using the address below.
9. Security
All data in transit is encrypted using TLS 1.3. Container access is restricted to authenticated sessions. We use HMAC-signed session cookies and scrypt password hashing. We do not store plaintext passwords.
10. International Data Transfers
If you use Tagioo outside the country where our infrastructure or providers operate, your data may be transferred internationally. We apply reasonable safeguards and limit processing to providing and securing the Service.
11. Children's Privacy
Tagioo is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately.
12. Changes to This Policy
We may update this policy periodically. Material changes will be notified via dashboard or email at least 14 days before taking effect. The date at the top of this page reflects the most recent update.
13. Contact
Privacy questions or data requests: [email protected] or WhatsApp.