Privacy Policy

This policy explains how CabbyGo, LLC dba tagitbagit.com ("we"), 49 Sample Bridge Rd, Mechanicsburg, PA 17050, collects and uses information through TagItBagIt (tagitbagit.com).

What we collect

• Account information: your name, email address and a hashed password.
• Your Metrc API key: stored encrypted, and used only to call Metrc on your behalf.
• Metrc data: the facility, plant, batch, harvest, package, location and transfer records we read from Metrc so we can show your rundown and carry out approved plans.
• Assistant conversations and the history of every change made through the Service. We keep these so you can review and undo changes.
• Billing information: payment is handled by Stripe. We receive your subscription status and the last digits and brand of your card, never the full card number.
• Technical data: a session cookie that keeps you logged in, and standard server logs (IP address, pages requested, errors).

We do not use advertising or tracking cookies.

How we use it

We use this information to provide and secure the Service, carry out the Metrc actions you approve, bill your subscription, provide support, and meet legal obligations. We do not sell your information.

Service providers we share with

• Metrc LLC: the state track-and-trace system. We send your requests there using your key.
• Stripe: payment processing.
• AI model providers (OpenAI and/or Anthropic): the text of your assistant conversations, plus the Metrc records needed to answer you, is sent to the model provider to generate replies.
• ElevenLabs: if you turn on spoken replies, the assistant's reply text is sent to ElevenLabs to produce audio.
• Your browser's speech service: if you use the microphone, your browser (for example Chrome or Edge) converts your speech to text using its own provider, such as Google or Microsoft. We receive only the resulting text, never the audio.
• Amazon Web Services and Cloudflare: hosting and network services.

We may also disclose information if required by law or to protect our rights and users.

Retention

We keep your account data, conversations and change history while your account is open. After you close your account, we delete them within 90 days, except records we must keep for legal, tax or accounting reasons.

Security

Metrc keys are encrypted at rest (AES-256-GCM). Passwords are hashed. All traffic uses HTTPS, and access to production systems is restricted. No system is perfectly secure. We will notify you as required by law if a breach affects your information.

Your choices

• Disconnect your Metrc key any time in Settings.
• Cancel your subscription from Billing.
• Ask us to access, correct, export or delete your information by emailing support@tagitbagit.com.
• California residents have rights under the CCPA/CPRA, including to know, delete and correct. We honor those requests at the same address.

Children

The Service is for licensed businesses and is not directed to anyone under 18.

Changes

If we change this policy materially, we will notify you by email or in the Service.

Contact

CabbyGo, LLC dba tagitbagit.com
49 Sample Bridge Rd, Mechanicsburg, PA 17050
support@tagitbagit.com