Privacy Policy

1. Who we are (Data Controller)

tagor.ai is an AI-powered price comparison service operated by Vaveti Inc. (https://vaveti.com/). Vaveti Inc. is the Data Controller responsible for your personal data. For privacy-related enquiries, contact us at tagorai@vaveti.com. Our service is available as a web app at tagor.ai and as a companion feature for AI smart glasses.

2. Data we collect

• Account data: email address, name, and profile picture when you sign up or log in via OAuth.
• Search and scan history: products you search for or scan, timestamps, and the country/currency you selected.
• Device and usage data: IP address, browser type, device type, operating system, pages visited, and session duration.
• Location data: country-level location inferred from your IP address to show relevant local prices. We do not collect precise GPS location.
• Barcode data: product barcodes scanned via your camera or AI glasses. Barcodes are processed to identify products and are not stored permanently as personal data.
• Community scan data: if you submit an in-store price scan to our community dataset, we record the product identifier, the price you observed, the store name or location (if provided), and a timestamp. See Section 6 for how this data is used and published.
• Push notification tokens: if you opt in to price drop alerts, we store a device push token to deliver notifications. You can withdraw consent at any time in your device settings.
• Communications: if you contact us by email, we retain that correspondence.

3. Legal basis for processing (GDPR)

• Contract performance (Article 6(1)(b)): processing your account data, search history, and preferences is necessary to provide the price comparison service you have requested.
• Legitimate interests (Article 6(1)(f)): we process device and usage data to improve the service, detect fraud, and maintain security. Our legitimate interests do not override your rights.
• Consent (Article 6(1)(a)): we rely on your consent to send push notifications and to use non-essential analytics cookies. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): we may process data where required to comply with applicable law, including responding to lawful requests from authorities.
• If you are located in the EU or UK, you may contact us at tagorai@vaveti.com to request more information about the specific legal basis applied to any processing activity.

4. How we use your data

• To provide the price comparison service and personalise results to your selected country and currency.
• To maintain your account and search history across sessions.
• To power the community price dataset by aggregating and anonymising in-store scan submissions.
• To improve our product, fix bugs, and develop new features.
• To send you price drop alerts and service-related notifications (only where you have opted in).
• To comply with legal obligations and protect against fraud.

5. Product images and how we source them

Product images displayed on tagor.ai are retrieved exclusively through the authorised APIs of our retail partners (such as eBay, Amazon, and AliExpress). We do not scrape or store images from retailer websites independently. We do not display official brand marketing imagery without authorisation. Community-submitted scans may include photos taken by users; such photos are reviewed before publication and must not contain personal information or copyrighted material beyond what is necessary to identify the product.

6. Community scan data and public publication

When you submit an in-store price scan, the price, product identifier, and store information you provide may be published in aggregated, anonymised form as part of the tagor.ai community price dataset. This dataset is used to power in-store vs. online price comparisons for all users. We do not publish your name, account details, or any other personally identifying information alongside community scan data. You may request removal of your submitted scan data by contacting us at tagorai@vaveti.com.

7. Affiliate links and third-party retailers

When you click through to a retailer, you leave our service and are subject to that retailer's own privacy policy. We may share a session identifier with affiliate networks to track commissions. We do not share your personal information (name, email) with retailers.

8. Third-party service providers and OAuth

We use the following categories of third-party service providers who act as data processors on our behalf: (a) hosting and infrastructure providers, who store your data on secure servers; (b) analytics providers, who help us understand how the service is used using anonymised data; (c) error tracking providers, who help us identify and fix technical issues. When you log in using a third-party OAuth provider (such as Google or Facebook/Meta), that provider authenticates your identity and shares your name, email address, and profile picture with us. Your use of those login providers is governed by their own privacy policies. We do not receive your OAuth provider password. All third-party processors are bound by data processing agreements that restrict their use of your data.

9. Data sharing

We do not sell your personal data. We do not share your personal data with advertisers. We may share data with: (a) service providers described in Section 8 under strict data processing agreements; (b) law enforcement or regulators when required by applicable law; (c) a successor entity in the event of a merger, acquisition, or sale of assets, in which case we will notify you before your data is transferred and becomes subject to a different privacy policy.

10. Cookies and tracking

We use the following types of cookies: (a) Essential cookies — required for the service to function, including session management and country/currency preference storage. These cannot be disabled. (b) Analytics cookies — we use privacy-friendly, anonymised analytics (such as Umami or equivalent) to understand aggregate usage patterns. No personally identifiable information is shared with analytics providers. You can opt out of analytics cookies in your browser settings or via our cookie preference centre. We do not use advertising or cross-site tracking cookies.

11. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include: encryption of data in transit using TLS; encryption of sensitive data at rest; access controls limiting data access to authorised personnel only; regular security reviews of our infrastructure. No method of transmission over the internet or electronic storage is 100% secure. If you believe your account has been compromised, please contact us immediately at tagorai@vaveti.com.

12. Data retention

We retain your account data for as long as your account is active. Search and scan history is retained for up to 12 months. Push notification tokens are retained until you withdraw consent or uninstall the app. Anonymised community scan data may be retained indefinitely as part of the aggregated price dataset. You can request deletion of your personal data at any time — see Section 14.

13. International transfers

Vaveti Inc. operates globally. If you access the service from the European Economic Area (EEA) or United Kingdom, your data may be transferred to and processed in countries outside the EEA or UK. Where such transfers occur, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), or we transfer to countries with an adequacy decision. You may request a copy of the applicable transfer mechanism by contacting us at tagorai@vaveti.com.

14. Your rights

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: request deletion of your account and associated data. See our Data Deletion page for instructions.
• Portability: receive your data in a machine-readable format.
• Restriction: ask us to restrict processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent (e.g. push notifications, analytics cookies), you may withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a complaint: if you are in the EU or UK, you have the right to lodge a complaint with your local data protection authority.
• To exercise any of these rights, email us at tagorai@vaveti.com. We will respond within 30 days.

15. California residents — CCPA rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). We do not sell your personal information. We do not share your personal information for cross-context behavioural advertising. You have the right to know what personal information we collect, to request deletion, and to opt out of any future sale (which we do not conduct). To exercise your CCPA rights, contact us at tagorai@vaveti.com. We will not discriminate against you for exercising these rights.

16. Children's privacy

tagor.ai is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

17. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

18. Contact

For privacy-related questions or requests, contact Vaveti Inc. at tagorai@vaveti.com or visit https://vaveti.com/.