Who we are
Tad is run by Matthew Scott (sole trader), trading as heytad, part of microventures, a sole trader based in the UK. We are the data controller for the personal data described here. Contact: hello@heytad.app.
What we collect and why
- Account details — email address, an account ID and, if you sign in with Google, your name and profile picture. Used to create and secure your account (contract).
- Your content — the Spaces, tasks, next actions and notes you write. Stored only so we can provide the service to you (contract). Other users cannot see it.
- AI suggestions — when you ask for a suggestion, the text of that task is sent to our AI provider to generate a reply. It is not stored by us for this purpose and is not used to train models (contract).
- Subscription status — plan, status, renewal dates and payment-provider reference IDs. We never see or store card details (contract, legal obligation).
- Technical data — IP address, device and browser information and basic logs, used for security and fixing problems (legitimate interests).
Who we share it with
- Hosting, database and AI service providers who process data on our behalf.
- Paddle.com, our Merchant of Record, for selling Tad, managing subscriptions, payments, tax and invoicing. Paddle handles payment data under its own privacy notice.
- Professional advisers (such as legal or accounting), and authorities where the law requires it.
Some providers may process data outside the UK. Where that happens, we rely on adequacy decisions or standard contractual clauses.
How long we keep it
We keep your account and content while your account is open. When you delete your account, we delete or anonymise your data within 30 days, except where we must keep records (for example tax records) by law.
Your rights
Under UK GDPR you can ask to access, correct, delete, restrict or move your data, object to processing, and withdraw consent. Email hello@heytad.app; we reply within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Security
Data is encrypted in transit, and access to your content is restricted to your account by database-level controls.
Cookies
We only use essential storage needed to keep you signed in. We don't use advertising cookies.