Privacy Policy
Last updated 21 September 2026.
TagQuiet is a service of Kyvera LLC ("Kyvera," "we," "us"). This policy describes what information we collect when you use TagQuiet, and how we handle it.
What we collect
- Prospect and client contact information: name, email, practice name, and website domain, collected when you request a free scan, sign up, or contact support.
- Website scan data: publicly reachable pages of the practice website you submit or that we scan with permission, the third-party trackers we find on them, and screenshots taken during scanning for verification purposes.
- Account credentials, where you provide them so we can apply a fix on your behalf (e.g., a CMS or ad-tag-manager login). These are encrypted at rest and are not accessible to our support staff in plain text.
- Billing information, handled by our payment processor (Stripe); we do not store full card numbers.
What we do not collect
We do not scrape, store, or process the patient-facing content of the practice's own patients (e.g., patient portal contents, appointment records). Our scans look at the practice's public marketing website, not systems that hold patient records.
How we use it
- To perform the scan, produce the technical inventory, and apply and verify requested fixes.
- To send you the results (audit memos, outreach about our service) and respond to support requests.
- To improve detection accuracy across the fleet of practices we monitor, in aggregated or de-identified form only.
Data handling with automated tools
Some of our internal tooling uses third-party AI models to help draft outreach emails and reports. Those models only ever receive anonymised, structured summaries (tracker names, categories, counts) — never your raw website HTML, screenshots, credentials, or form contents. Those stay within systems we control directly.
Who else handles your data (sub-processors)
We use the following outside services to run TagQuiet. Each one receives only what it needs for the function listed:
- Amazon Web Services (Lightsail, United States) — hosting for our application and database.
- Anthropic — anonymised, structured scan findings used to draft emails and reports; never raw site content, credentials, or form data.
- Stripe — payment card details and billing records; we never see or store your full card number.
- Amazon Simple Email Service — delivery of the email we send you.
- Cloudflare — hosting and delivery of our public website.
The local model that reads raw site content runs on hardware we control and is not a sub-processor. Nothing in the list above ever receives raw client HTML, screenshots, form fields, or credentials.
This list is provisional while the product is still being built. It will be finalised before launch, and we will update this page if it changes.
Retention
- Scan findings are retained for the life of your account plus three years.
- Stored credentials are deleted no later than 30 days after a cleanup is completed, unless ongoing monitoring requires them, per our internal retention policy.
Your choices
- You can unsubscribe from outreach or marketing email at any time via the link in every email we send.
- You can request a copy of, or deletion of, the data we hold about your practice by writing to [email protected].
How to reach us
Kyvera LLC
100 N Howard St. #7744
Spokane, WA 99201
Written requests about the data we hold, including the access and deletion requests described above, can be sent to that address or to [email protected].