Last updated: 27 May 2026

1. Who We Are

TagFlux is operated by Clockwork Digital S.L. (“TagFlux”, “we”, “us”, “our”), Avenida de la Vía Láctea 4, San Fernando de Henares 28830, Spain — Tax ID ESB88346283.

Privacy contact: admin@tagflux.io.

2. Scope

This Privacy Policy applies to all TagFlux products and services, including:

(a) the TagFlux advertising/marketing SaaS platform; and
(b) the TagFlux WhatsApp Business messaging service, operated through the Meta WhatsApp Business Cloud API.

3. Information We Collect

  • Account data: name, email, and credentials needed to create and secure your account.
  • Advertising integration data: campaign, conversion and performance data from Google Ads, Google Analytics (GA4) and Meta Ads connected by you.
  • WhatsApp messaging data: when you message a business that uses TagFlux on WhatsApp, we process your WhatsApp phone number, your WhatsApp profile name, the content of the messages you exchange, and message metadata (timestamps, message IDs, delivery status).
  • Technical data: logs and security-related information.

4. How We Use Information

We use collected information to:

  • Provide, operate and maintain the TagFlux platform;
  • Generate campaign insights and recommendations;
  • Authenticate users and maintain account security;
  • Support integrations with Google Ads, Google Analytics and Meta Ads;
  • Receive, process and respond to WhatsApp messages, including through automated and AI-assisted replies, on behalf of the business you are contacting.

We do not sell user data.

5. Google User Data

If you connect a Google account to TagFlux, we may access Google user data through Google APIs. This data is used solely to retrieve advertising campaign data, display performance metrics, and help you configure and manage campaigns.

TagFlux’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except where necessary to operate the service, comply with law, or protect our legal rights. OAuth tokens are stored securely and used only to authenticate requests on your behalf. You can revoke access at any time from your Google account settings or by contacting us.

6. WhatsApp and Meta Data

WhatsApp messages are received and sent through the Meta WhatsApp Business Cloud API and are also subject to Meta’s terms and WhatsApp’s privacy policy. We process message content to provide automated assistance and customer support.

AI processing: message content may be processed by third-party AI providers (currently Anthropic — Claude API; and, where applicable, Google — Gemini API) for the sole purpose of generating responses. It is not used to train third-party models, in line with those providers’ terms.

Controller/processor: where TagFlux operates the WhatsApp service on behalf of a business client, that business is the data controller for its customers’ data and TagFlux acts as a data processor under a data processing agreement.

7. Third-Party Services and Sub-Processors

TagFlux integrates with third-party services, including: Google Ads, Google Analytics, Meta Ads, the Meta WhatsApp Business Cloud API, Anthropic (Claude — AI message processing), Google (Gemini — AI message processing, where applicable), and our hosting provider (Hetzner Online GmbH, located in the EU). These services operate under their own privacy policies and practices.

8. Data Storage and Security

Data is stored on servers located in the European Union. We use encryption in transit (TLS), access controls, and encrypted storage of credentials. No method of transmission or storage is 100% secure.

9. Data Retention

We retain data only for as long as necessary to operate the service, comply with legal obligations, resolve disputes, and enforce agreements. Advertising campaign data may be fetched on demand and not persistently stored beyond what is necessary. WhatsApp conversation data is retained for 6 months and then deleted or anonymised. You may request deletion at any time (see Section 11).

10. Your Rights (GDPR)

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict or object to processing, request portability, and withdraw consent. EU/EEA users may lodge a complaint with the Spanish Data Protection Agency (AEPD). To exercise any right, contact admin@tagflux.io.

11. Data Deletion

For instructions on how to request deletion of your data, see: https://tagflux.io/datadeletion/

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

13. Contact

If you have any questions regarding this Privacy Policy, you can contact us at:

Clockwork Digital S.L.
Website: https://tagflux.io
Email: admin@tagflux.io