Privacy policy

1. Information we collect

• Account details - your name, email address and password (stored only as a secure hash), or your Google profile name and email if you sign in with Google.
• Workspace content - what you add to TargetGum: business and brand details, customer personas, campaigns, designs, images, logos, posts and reports.
• Connected accounts - when you choose to connect a service (for example social channels, Google Analytics, Search Console, Meta or Google Ads, or Canva), the access tokens it gives us and the data we read from it to show your results. Tokens are stored encrypted.
• Billing details - your plan, payment history, and any billing name, address and GSTIN you give us for invoices. Card, UPI and bank details are entered on Razorpay's secure checkout and are never seen or stored by TargetGum.
• Usage and technical data - actions you take in the app (kept as an activity and audit log), usage counts for your plan, and standard server logs such as IP address, browser type and error reports.

2. How we use it

• To provide the service: run your workspace, generate AI suggestions and designs, publish what you approve, and show your results.
• To process payments, issue invoices and apply your plan's limits.
• To send emails you need - sign-in, password reset, invitations, approvals and billing notices.
• To keep TargetGum secure, prevent misuse, fix problems and improve the product.
• To meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not use your workspace content to advertise to you.

3. AI features

When you use an AI feature, the content needed for that request (for example your brand details, a draft, or an image you chose) is sent to our AI providers - Anthropic (Claude) for text and analysis, and Google (Gemini) for images and video - to produce the result. They process it on our behalf under their API terms, and we send only what each request needs - never your password or payment details. AI output can be wrong; please review it before you use it.

4. Who we share it with

We share information only with service providers who help us run TargetGum, and only what each one needs:

• Hosting, database and file storage providers that store the service's data.
• Razorpay, to take payments and manage subscriptions.
• Our email provider, to deliver account and notification emails.
• AI providers, as described above.
• Services you connect yourself, to carry out what you ask (for example publishing a post you approved).

We may also disclose information when the law requires it, to protect our users or the service, or as part of a merger or sale of the business, in which case this policy will continue to apply.

5. Agencies and their clients

When an agency uses TargetGum for its clients, the agency decides what client information goes into its workspace and who can see it. Each client's data is kept separate from every other client and workspace. Client users invited to a portal see only their own business.

6. Cookies

We use only the cookies needed to run the service - to keep you signed in, remember which workspace you are using, and protect forms against misuse. We do not use advertising or third-party tracking cookies. Razorpay's checkout may set its own cookies while you pay.

7. How long we keep it

We keep your information while your account is open. When you ask us to delete your account, we delete or anonymise your personal information and workspace content within 30 days, except records we must keep by law - such as invoices and payment records, which are kept for at least 8 years under Indian tax law - and backups, which are overwritten on their normal cycle.

8. Security

Data is sent over HTTPS, passwords are hashed, connection tokens are encrypted, and every workspace is isolated from the others. Access is limited to what each role needs, and important actions are logged. No system is perfectly secure, so please use a strong password and keep it private.

9. Your rights and choices

• See and correct your account and workspace information in the app at any time.
• Disconnect any connected service from its settings page; we stop reading from it straight away. For Facebook, Instagram and Pinterest, see Data deletion.
• Ask for a copy of your information, or for your account to be deleted, by writing to us.
• Withdraw consent or raise a concern about how your information is handled.

Email info@tapashub.com from your account's email address and we will respond within 30 days.

10. Children

TargetGum is a business tool and is not meant for anyone under 18. We do not knowingly collect information from children.

11. Changes to this policy

If we make important changes, we will update the date above and tell account owners by email or in the app before the change takes effect.

12. Contact and grievance officer

For any privacy question or complaint, contact our grievance officer at info@tapashub.com. See also our Terms & conditions.