Privacy Policy

Last updated: August 20, 2026

1. Who we are

Belim & Co, a Pennsylvania limited liability company
132 Veterans Ln Unit A #320, Doylestown, PA 18901, United States
Privacy questions and requests: support@untaggle.com

We operate Untaggle (app.untaggle.com), a routing service that connects to the third-party platforms our subscribers authorize and applies the actions they configure — turning purchases, form submissions, and unsubscribes on one platform into tags, enrollments, and workflow triggers on another.

2. Two kinds of data

Your account data — who you are as our customer — for which we are the controller. And your contacts’ data— the people in the events flowing between your connected platforms — which we process on your behalf and at your direction. For your contacts’ data, you are the controller and we are a processor: we apply the actions you configure and do not use that data for anything else.

3. Information we collect

3.1 Account information

• Name, email address, company name, and a password (stored as a salted hash by our authentication provider).
• Billing is processed by Stripe. We store your subscription status and billing interval; we never see or store full payment card numbers.
• Support correspondence you send us.

3.2 Platform credentials

The credentials you provide to connect platforms are held in access-restricted storage — API keys encrypted in a secrets vault, OAuth tokens in database fields readable only by our backend — and used solely to operate the Service on your behalf. Where a platform authorizes API access with your account email and password (Teachable), your browser combines them into the access credential that platform’s API requires. That credential embeds your login, so we treat it exactly like a password: encrypted in the secrets vault, never exposed to the browser after setup, and used only to call the platform on your behalf.

3.3 Event and action data (your contacts’ data)

When your connected platforms send events, we store the event payloads and the record of each action taken. These can include your contacts’ personal information — typically names, email addresses, and purchase or form details. We keep this so your event log is inspectable and replayable, which is a core feature of the Service.

4. How we use information

• To operate the Service: route events, apply your configured actions, and maintain your logs.
• To run your account: authentication, billing, and transactional email (welcome, billing notices, operational alerts).
• To support you and to secure and improve the Service.
• We do not sell personal information, use your contacts’ data for advertising, or use it to train AI models.

5. Sub-processors

Infrastructure providers that process data on our behalf:

• Supabase, Inc. — database, authentication, and credential storage (hosted on AWS, United States).
• Google LLC (Google Cloud) — application compute, secret management, and encrypted backups (United States).
• Vercel Inc. — application hosting (United States).
• Stripe, Inc. — subscription billing (United States).
• ActiveCampaign LLC (Postmark) — transactional email (United States).

The platforms you connect (HighLevel, Teachable, Kit, Flodesk, Klaviyo) are not our sub-processors: they are your own service providers, and we exchange data with them at your direction under your agreements with them.

6. International transfers

We are US-based and process data in the United States. If you use the Service from elsewhere, you understand your data is transferred to and processed in the US.

7. Retention and deletion

• Account data, credentials, configuration, and event/action logs are retained while your account is active — the replayable log is a feature, so we do not automatically expire it today.
• When your account is deleted (on request to support@untaggle.com, or following termination), we delete your data from our production systems within 30 days.
• Encrypted backups roll off automatically within 30 days of creation.
• Billing records are retained as required for tax and accounting purposes.

8. Cookies

app.untaggle.com uses only essential cookies: authentication session cookies and a cookie remembering which of your accounts you last selected. No advertising or cross-site tracking cookies.

9. Security

• Per-tenant isolation enforced in the database (row-level security).
• API keys encrypted in a secrets vault; OAuth tokens restricted to our backend — no platform credential is ever exposed to the browser.
• TLS on every connection; least-privilege service accounts internally.
• No system is perfectly secure. If we learn of a breach affecting your data, we will notify you without undue delay, consistent with applicable law.

10. Your rights

Depending on where you live (including the EU/UK under GDPR and California under CCPA/CPRA), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Write to support@untaggle.com and we will honor verified requests within the timelines applicable law requires. We do not discriminate against you for exercising privacy rights.

If you are a contact of one of our subscribers (for example, you bought a course from a business that uses Untaggle), that business is the controller of your data — please direct requests to them, and we will assist them in honoring your request.

11. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect children’s data for our own purposes.

12. Changes to this policy

We may update this policy. For material changes we will give notice by email or in the Service before the changes take effect.

13. Contact

Belim & Co · 132 Veterans Ln Unit A #320, Doylestown, PA 18901, United States · support@untaggle.com