Privacy Notice

1. Who looks after your data

Immersion, owned by Khandoker Ashraful Alam, 15/2 Tolarbag 2nd Gate, Darus Salam Road, Mirpur, Dhaka-1216, Bangladesh, is the controller of the personal data described here. For any privacy question, email info@tarogrid.com.

2. What we collect and why

• Account details (name, email, password or Google sign-in): to create and secure your account. Basis: our contract with you.
• Your business data (boards, orders, customers, documents, files): to run TaroGrid for you. Basis: contract. Your customers' details in your workspace are controlled by you; we process them on your behalf.
• Billing details (plan, payment history): to bill you, through Paddle. We never see your full card number. Basis: contract and our legal duty to keep records.
• Usage and device data (sign-ins, devices, error reports): to keep your account secure and fix problems. Basis: our legitimate interest in a safe, working service.
• Emails you send and receive through TaroGrid: to deliver them and show replies. Basis: contract.

3. Who we share it with

• Paddle, our Merchant of Record, to take payments and handle tax.
• Service providers that run TaroGrid for us: hosting (Railway), network and file storage (Cloudflare), email delivery (Resend), and Google if you sign in with Google.
• Services you connect yourself, such as an AI assistant, an SMS or courier account, or your own payment provider. Data goes to them only when you turn them on.
• Professional advisers and authorities where the law requires it.

We do not sell your data and we do not use it for advertising.

4. How long we keep it

We keep your data while your account is open. After you delete your account, we delete your data within 30 days, except billing records we must keep by law and a security log of sign-ins and payment checks (with email addresses masked), which we keep for six months to investigate abuse.

5. Your rights

Depending on where you live, you can ask to see, correct, delete or export your data, object to or limit how we use it, and withdraw consent. You can also complain to your local data protection authority. Email us and we will answer within one month.

6. International transfers

Our providers may process data outside your country. Where the law requires, we rely on safeguards such as Standard Contractual Clauses.

7. Security

Data is encrypted in transit, stored credentials are encrypted at rest, and access to production systems is restricted.

8. Cookies

TaroGrid uses only the cookies and browser storage it needs to keep you signed in and remember your settings. We do not use advertising cookies.