Privacy
What happens to your documents
This audience reads the privacy policy and checks the claims with a proxy. So this page is specific rather than reassuring.
Checking, signed out
The file is uploaded over TLS, written to a temporary directory, analysed, and the directory is deleted when the request finishes. Nothing is stored. No copy is kept. The only record is an aggregate count that a check ran.
Checking, signed in
A check of your own file is kept. The file and its report are stored in your own private area — History in the app — so you can reopen the report later, and both are deleted after seven days, together with any repaired file made from it. You can delete a check sooner from History. The sample files the app offers are never kept.
Remediation
The source and the repaired file are stored so you can download the result and reopen the report. Both are deleted after seven days: the repaired file goes with its source.
Alt text
Taggart does not generate alt text, and has no model of any kind. You type each description in the review queue and Taggart writes it to the structure element. No image is sent anywhere, because nothing here looks at images.
If generation is ever added it will be opt-in, the modes will be stated here before it ships, and the local-only mode will be enforced at the network layer rather than promised.
Your email address is used to send you sign-in links and codes — there are no passwords — and, only if you subscribed on this site, the update list: no more than monthly, with a one-click unsubscribe in every message. Creating an account does not add you to the list. Messages are delivered by an email delivery service acting on our behalf; it receives your address and the message, and nothing else.
If you tick the box when you sign in, you also get a short series of getting-started emails, in English: a welcome, then at most eight more over your first month — after the welcome, never more than one every two days — with tips and a question or two about how it went. While you get them, we keep a count of how many checks, repair previews and repairs your account has run and when it last ran each — never the file or its name — so that each email fits what you have done, along with any answer you give. One click in any of them, or the switch on your account page, stops them; deleting your account deletes all of it.
Payments
Handled by Stripe. Card details are never sent to or stored by Taggart. We hold a customer identifier, a subscription status and a plan.
Where things are
Processing runs on European infrastructure. Storage and authentication are hosted in Frankfurt (Supabase, EU region).
Who is responsible
Taggart is operated by Codama Advanced Engineering, Inc., a Delaware C-Corporation with its registered office at 8 The Green, Ste A, Dover, DE 19901, USA. For the purposes of the GDPR and the UK GDPR we are the controller of the personal data described on this page, and info@codama.dev reaches us.
Rights and contact
Access, correction and export on request: info@codama.dev.
Deletion does not need a request. Account → Delete this account in the app erases your documents, every check and remediation report, every recorded decision, and the account itself, immediately and without anyone at Taggart being involved. There is no undo: reports are append-only so that nobody can rewrite one, which means nobody can restore one either.
If you are in the EU, the UK or Israel and you think we have handled your data badly, you can complain to your national data-protection authority. We would rather you told us first, but that right does not depend on doing so.
Last updated 10 October 2026. Material changes will be noted in the changelog.