Privacy Policy

Last updated 20 October 2026

This policy explains what personal data Tadaro Technologies (“we”) handles when you use Tadaro, why, and your choices.

1. Two kinds of data

Your account: your name, email address, password (stored only as a secure hash by our sign-in provider), the companies you belong to and your role. We are responsible for this data.
Your company’s records: what you and your colleagues enter, such as customers, suppliers, products, invoices and staff check-in locations. Your company controls this data; we process it only on its instructions, to provide the service.

2. What we use it for

To run the service: sign-in, keeping your records, printing documents, sending the emails and reports you set up.
To keep it secure: an audit log of important changes, and technical logs to find faults and abuse.
To bill your company, through Paddle.
To tell you about changes to the service or these policies.
To see how the service is used and keep it working well. While you are signed in and a page of the app is open and on screen, the app tells our server about once a minute that you are active. For each visit we keep: who you are, when the visit started and when you were last active, the time you actively spent, the country, region and city worked out from your network connection, and whether you used a phone, tablet or computer. We don’t keep your IP address or the pages you view, and we don’t use cookies for this. Only Tadaro’s owner can see this information. We use it only to run and improve Tadaro, never for advertising.

We don’t sell personal data and don’t use it for advertising.

3. Who else handles it

We use these providers to run the service, each only for its part:

Supabase: database, sign-in and file storage.
Vercel: hosting the application.
Resend: sending sign-in and notification emails.
Paddle: payments, invoices and tax, as our reseller and Merchant of Record. Card details go to Paddle, never to us.
Meta (WhatsApp Business): only if your company turns on the daily WhatsApp report.
Anthropic: only if your company turns on the AI assistant with its own API key; questions and the records needed to answer them are then sent under your company’s own account with Anthropic.
OpenAI: for Tadaro Intelligence when your company uses Tadaro’s AI credits or its own OpenAI key. This covers questions, reading documents, speech-to-text and reading aloud. The question, document or recording, and the records needed to answer it, are sent to OpenAI.
Sentry: error reports, so we can find and fix faults. A report contains technical details of the error and the page where it happened.

Some of these providers process data outside your country. We rely on their contractual safeguards for those transfers.

4. How long we keep it

We keep data while your company’s account is open. After an account is closed we delete its records within 30 days of the end of the export period in our terms, except where the law requires us to keep something longer (for example billing records).

5. Security

Each company’s data is walled off from every other company’s by the database itself. Connections are encrypted, access is limited by role, and important changes are logged.

6. Your rights

You can see and correct your account details in the app. To get a copy of your data, have it deleted, or object to how we use it, email support@tadaro.app. If your data was entered by a company you work with, we may refer your request to that company. You can also complain to your local data protection authority.

7. Cookies

We use only the cookies needed to keep you signed in and the service working. We don’t use advertising or tracking cookies.

Contact

Tadaro Technologies · support@tadaro.app