Privacy Policy

We collect the minimum data necessary to operate the Service:

• Account information — name, email address, and hashed password (we never store plaintext passwords).
• Uploaded documents — P&ID files you submit for instrument extraction.
• Extraction results — instrument data extracted from your documents, including any corrections you make during review.
• Usage data — pages processed, features used, extraction accuracy metrics, and review edits (used to improve service quality).
• Payment data — processed and stored by Stripe. We receive only transaction confirmation, customer ID, and purchase amount. We never see or store your card number.
• Technical data — IP address, browser type, and request logs for security and abuse prevention. Retained for 30 days.

• Uploaded PDF files — automatically deleted after 30 days. You can request immediate deletion.
• Extraction results — retained in your account until you delete the project or your account.
• Account data — retained until you delete your account. Upon deletion, all personal data is permanently removed.
• Aggregate accuracy data — de-identified correction statistics may be retained indefinitely for service improvement.
• Server logs — retained for 30 days, then automatically purged.

We share data only with services necessary to operate:

• Stripe (payments) — processes credit card transactions. Subject to Stripe's Privacy Policy.
• Cloudflare (CDN/DNS) — serves the website and provides DDoS protection. Subject to Cloudflare's Privacy Policy.
• Resend (email) — sends transactional emails (verification, notifications). Subject to Resend's Privacy Policy.
• Railway (hosting) — hosts our backend infrastructure. Subject to Railway's Privacy Policy.
• Document processing — your uploaded P&ID drawings are processed by our extraction system to identify instrument tags. Your files are not used to train any models.

We never sell your personal data to third parties.

We use only essential cookies and local storage:

• Authentication tokens — stored in localStorage to keep you signed in.
• Cookie consent preference — stored in localStorage to remember your choice.

We do not use tracking cookies, analytics cookies, or advertising cookies. We do not use Google Analytics or similar tracking services.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of all personal data we hold about you. Available via the data export feature in your account settings, or by contacting us.
• Right to rectification — request correction of inaccurate personal data.
• Right to erasure — request deletion of your account and all associated data. Available via the delete account feature, or by contacting us.
• Right to data portability — receive your data in a structured, machine-readable format (JSON). Available via GET /api/auth/export.
• Right to object — object to processing of your data for certain purposes.
• Right to restrict processing — request limitation of how we process your data.

Lawful basis for processing: We process your data based on: (a) contract performance (providing the Service you signed up for); (b) legitimate interests (improving service accuracy, security); and (c) consent (marketing communications, if any).

To exercise any of these rights, contact us at support@tagsight.net. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — you may request the categories and specific pieces of personal information we have collected about you.
• Right to delete — you may request deletion of your personal information.
• Right to opt-out of sale — we do not sell personal information. There is nothing to opt out of.
• Non-discrimination — we will not discriminate against you for exercising your privacy rights.

Categories of personal information collected:

• Identifiers (name, email, IP address)
• Commercial information (purchase history, credit balance)
• Internet activity (usage logs, feature interactions)
• Professional information (uploaded engineering documents)

To submit a CCPA request, email support@tagsight.netwith the subject "CCPA Request".

For privacy-related questions or to exercise your data rights:

Email: support@tagsight.net