Privacy Policy
Last updated October 23, 2026
Summary
We collect what we need to run your account, bill you and keep the service safe. We do not sell your information or use it for advertising.
What we collect
- Account: your email address and sign-in details. Sign-in is handled by Amazon Cognito; we never see your password.
- Billing: your plan, its status and your Stripe customer ID. Card details go straight to Stripe and never reach our servers.
- Usage: for every call, the time, the tool, the data product, the outcome, run time and credits used. This drives your usage page, credits and safety limits.
- Requests: the parameters an assistant sends us (for example a filter or an analysis to run). We do not receive your conversation with the assistant, only these requests.
- API keys: stored only as one-way hashes.
- Messages you send to support.
How we use it
- to provide the service and show you your usage;
- to bill you and apply credits and limits;
- to prevent abuse and keep the service secure;
- to send service emails: welcome, free month ending, low credits, receipts;
- to fix problems and improve the service, using aggregated usage.
We do not send marketing emails without your consent.
Who we share it with
Only service providers that run parts of the service for us, under contracts that limit their use of your information:
- Stripe (payments);
- Amazon Web Services (sign-in and email);
- Microsoft Azure (hosting of the service);
- Google Cloud (hosting of this website).
We may disclose information if the law requires it. The AI assistant you connect receives our answers to its requests; its own privacy policy applies to them.
Cookies
We use only the cookies needed to keep you signed in. We do not use advertising or tracking cookies.
Where and how long
Your information is stored in the United States. We keep account and usage records while your account is open. Files produced for an analysis expire within hours. When you delete your account we delete your sign-in, API keys and usage history within 30 days; invoices and payment records are kept as long as tax law requires.
Security
Traffic is encrypted, API keys are hashed, payment secrets are kept in a dedicated vault and access to production systems is limited to staff who need it.
Your choices and rights
You can see your usage on your account page at any time. To get a copy of your information, correct it or delete your account, email support@tag.bio or use Request deletion on the Account tab. Depending on where you live (for example the EU, UK or California) you may have further rights, such as objecting to processing or complaining to a regulator; we will help you use them.
Children
The service is not meant for anyone under 16, and we do not knowingly collect their information.
Changes and contact
We will post changes here and email you about important ones. Questions: support@tag.bio.