Privacy

What happens to your documents

This audience reads the privacy policy and checks the claims with a proxy. So this page is specific rather than reassuring.

Checking, signed out

The file is uploaded over TLS, written to a temporary directory, analysed, and the directory is deleted when the request finishes. Nothing is stored. No copy is kept. The only record is an aggregate count that a check ran.

Checking, signed in

The same, unless you tick Save this check to my history. If you do, the file and its report are stored in your own private area and deleted after seven days. You can delete either sooner.

Remediation

The source and the remediated output are stored so you can download the result and reopen the report. Uploads expire after seven days; outputs are kept until you delete them.

Alt text

Taggart does not generate alt text, and has no model of any kind. You type each description in the review queue and Taggart writes it to the structure element. No image is sent anywhere, because nothing here looks at images.

If generation is ever added it will be opt-in, the modes will be stated here before it ships, and the local-only mode will be enforced at the network layer rather than promised.

Telemetry

Off by default and opt-in. If you turn it on it reports which checks ran and how long they took. It never includes document content, filenames, extracted text or findings.

Payments

Handled by Stripe. Card details are never sent to or stored by Taggart. We hold a customer identifier, a subscription status and a plan.

Where things are

Processing runs on European infrastructure. Storage and authentication are hosted in Frankfurt (Supabase, EU region).

Who is responsible

Taggart is operated by Codama Advanced Engineering, Inc., a Delaware C-Corporation with its registered office at 8 The Green, Ste A, Dover, DE 19901, USA. For the purposes of the GDPR and the UK GDPR we are the controller of the personal data described on this page, and hello@codama.dev reaches us.

Rights and contact

Access, correction and export on request: hello@codama.dev.

Deletion does not need a request. Account → Delete this account in the app erases your documents, every check and remediation report, every recorded decision, and the account itself, immediately and without anyone at Taggart being involved. There is no undo: reports are append-only so that nobody can rewrite one, which means nobody can restore one either.

If you are in the EU, the UK or Israel and you think we have handled your data badly, you can complain to your national data-protection authority. We would rather you told us first, but that right does not depend on doing so.

Last updated 8 September 2026. Material changes will be noted in the changelog.