WhozTag
This policy is a working draft that describes how the service is designed. It will be reviewed by a lawyer before launch.
The short version
- We pass messages and calls between you and the people who scan your code. Neither side gets the other's contact details.
- We never record calls and never store visitors' IP addresses.
- Messages are deleted automatically after 90 days of inactivity.
- We don't sell data, show ads or use tracking cookies.
If you have an account
To run your account we keep:
- Your email address, to sign you in and send you notifications.
- Your Telegram chat ID, if you link Telegram, so our bot can message you.
- Push notification endpoints for devices where you enable notifications.
- Your touchpoints: titles, descriptions and settings you enter.
- License records: what you bought and when. Card details are handled by our payment partner Paddle and never reach us.
None of this is ever shown to the people who contact you.
If you scanned someone's code
- Your messages are stored so the owner can read them and you can see the conversation.
- Your email, if you choose to give it, is encrypted and used only to tell you about replies. The owner never sees it.
- Your IP address is not stored. To prevent abuse we keep a short-lived, scrambled fingerprint in memory only. It is discarded within a day.
- Calls are relayed live and never recorded. We keep only the time, the duration and whether the call was answered.
How long we keep things
| Data | Kept for |
|---|---|
| Messages and conversations | 90 days after the last activity, or 30 days after the touchpoint is removed, whichever is sooner |
| Call history (no audio or video) | 90 days |
| Sign-in links | 15 minutes, or until used |
| Payment records | As long as accounting law requires, up to 7 years |
| Server logs | 14 days, with no IP addresses, emails or message content |
Who else is involved
We use a small number of providers to run the service:
- Paddle processes payments as merchant of record.
- An email delivery provider sends sign-in links and notifications.
- Telegram delivers bot messages, if you link it.
- Your browser's push service (Apple, Google or Mozilla) delivers push notifications. The content is encrypted end-to-end.
We share only what each provider needs to do its job, and nothing for advertising.
Cookies
We use one cookie to keep you signed in, one to protect forms against cross-site attacks, and one that lets a visitor return to their own conversation. We use no analytics or advertising cookies. Your light/dark theme choice is stored only in your browser.
Your rights
You can see and edit your data in the app at any time, and you can delete your account from Settings. Deleting it removes your conversations, call history, Telegram link and devices immediately and retires your codes. Payment records are kept only where the law requires.
Depending on where you live, you may have more rights, such as access, correction, portability or objection, under laws like the GDPR. You can exercise them by contacting us.