Privacy Policy

Tech Easy IT LLC ("we," "us," or "our"), an Ohio limited liability company, operates the TagWise AI platform ("Service"), an NFC/RFID-based asset tracking software-as-a-service application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By accessing or using TagWise AI, you agree to the terms of this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you sign in via Google OAuth, we receive and store your name, email address, and profile photo as provided by Google. We do not collect or store passwords.

1.2 Asset and Tag Data

You may create, manage, and store information about NFC/RFID tags and the assets linked to them. This includes tag identifiers (UIDs), asset names, descriptions, categories, custom fields, notes, and any images or files you upload.

1.3 Location Data

If you choose to enable location-based features, we may collect location data associated with tag scans (e.g., the GPS coordinates at the time of a scan). Location data collection is optional and only occurs when you explicitly use location-enabled features.

1.4 Usage and Analytics Data

We automatically collect certain information when you use the Service, including your browser type, device information, pages visited, and interaction patterns. This data helps us improve the Service and diagnose technical issues.

1.5 Payment Information

Payment processing is handled entirely by Stripe. We do not directly collect, store, or process your credit card numbers or bank account details. Stripe may share limited information with us (such as the last four digits of your card, billing address, and subscription status) to manage your account.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the TagWise AI platform
• Authenticate your identity and manage your account
• Process subscription payments and manage billing
• Power AI-driven features such as smart tag suggestions, asset categorization, and inventory insights
• Send transactional emails (e.g., subscription confirmations, security alerts)
• Analyze usage patterns to improve performance and user experience
• Respond to support requests and communicate with you about the Service
• Comply with legal obligations and enforce our Terms of Service

3. AI Features and Data Processing

TagWise AI uses artificial intelligence powered by Google GenAI (via the Genkit framework) to provide smart features including asset categorization, tag recommendations, and inventory insights. When you use these features, relevant data (such as asset descriptions and tag metadata) may be sent to Google's AI services for processing.

AI-generated outputs are provided for informational and convenience purposes only. We do not guarantee the accuracy, completeness, or suitability of AI-generated content. You are responsible for reviewing and verifying any AI-generated suggestions before acting on them.

4. Data Security

We take the security of your data seriously. TagWise AI employs the following security measures:

• Encryption at rest: Sensitive tag and asset data is encrypted using AES-256 encryption before being stored in our database.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
• Authentication: We use Firebase Authentication with Google OAuth to provide secure, industry-standard identity verification.
• Access controls: Multi-tenant data isolation ensures that your data is accessible only to authorized users within your organization.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

TagWise AI integrates with the following third-party services, each of which has its own privacy policy governing the use of your information:

• Google Firebase (Authentication, Firestore Database, Hosting) — Firebase Privacy Policy
• Google GenAI / Genkit (AI-powered features) — Google Privacy Policy
• Stripe (Payment processing) — Stripe Privacy Policy

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

6. NFC/RFID Tag Data Handling

NFC and RFID tag identifiers (UIDs) are stored in our database and associated with your account. Tag data is encrypted at rest using AES-256 encryption. We do not read or write data directly to your physical NFC/RFID tags beyond what is necessary for the identification and linking process within the Service.

Tag scan history, including timestamps and optional location data, is retained as part of your account data and is subject to the same security and retention policies described in this Privacy Policy.

7. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide the Service. If you wish to delete your account and associated data, you may do so through the Settings page in the application, or by contacting us at nick@techeasyit.com.

Upon receiving a deletion request, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain data for legal, tax, or compliance purposes. Aggregated, anonymized data that cannot be used to identify you may be retained indefinitely for analytical purposes.

8. Your Rights

8.1 For Users in the European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request that we restrict processing of your data.
• Right to data portability: Request a machine-readable copy of your data.
• Right to object: Object to our processing of your data for certain purposes.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

Our legal basis for processing personal data includes: performance of a contract (providing the Service), legitimate interests (improving the Service and preventing fraud), and consent (where applicable, such as for optional location features).

8.2 For Users in California (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to delete: Request deletion of your personal information.
• Right to opt-out: Opt out of the sale of your personal information. We do not sell your personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at nick@techeasyit.com. We will respond to verified requests within 30 days (or within the timeframe required by applicable law).

9. Cookies and Tracking Technologies

TagWise AI uses cookies and similar technologies for authentication session management and to remember your preferences. Specific cookies and tracking technologies used by the Service include:

• Firebase Authentication cookies: Used to maintain your authenticated session across page loads.
• Firebase Analytics: We use Google Firebase Analytics to collect aggregated usage data such as page views, feature engagement, and session duration. This data helps us understand how the Service is used and identify areas for improvement.
• Stripe cookies: When you interact with payment features, Stripe may set cookies to facilitate secure payment processing, fraud prevention, and to remember your payment preferences.

You can control cookie preferences through your browser settings, although disabling cookies may limit certain features of the Service.

10. Children's Privacy

TagWise AI is not directed to individuals under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information promptly. If you believe we have inadvertently collected data from a child, please contact us at nick@techeasyit.com.

11. International Data Transfers

Your data may be processed and stored on servers located in the United States or other countries where our third-party service providers operate. By using the Service, you consent to the transfer of your data to jurisdictions that may have different data protection laws than your country of residence. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: