Privacy policy

Last updated: 22 October 2026

Tagwyse (the website, the Tagwyse app and the tags) is run by EventHub.lk, No. 20/1/2, Vijitharama Lane, Nugegoda. EventHub.lk is responsible for your personal data ("we", "us").

This policy explains what we collect and why, in line with Sri Lanka's Personal Data Protection Act No. 9 of 2022.

Tag owners

• Your email address or mobile number (to sign in and to reach you), and optionally your name. If you sign in with Google, we receive your name, email address and a Google account ID from Google; we don't get your Google password or contacts.
• Your tags: nickname, type, optional registration number, and settings.
• Orders: contact and delivery details, payment status. Card details go to PayHere, not us.
• App push-notification tokens, so we can alert your phone.
• Messages people send you, including photos and voice notes, and your chat replies.
• NFC business cards: the details you choose to put on your card page (for example name, job title, phone, email, website, address, social links and photo). Anyone with the card or its link can see them.

Your phone number is never shown to people who scan your tag, unless you turn on Public mode.

People who scan a tag

• The reason, message, photos and voice notes you choose to send.
• A one-way coded fingerprint of your IP address and browser, used only to limit and block abuse. We do not store your IP address or your location.
• Photos are re-encoded and all location and camera data (EXIF/GPS) is removed.
• If you chat with the owner, your messages are kept with the alert, under the same rules as the original message.

People who open a business card

We count each visit for the card owner: whether the card was tapped or scanned, the kind of device, and a one-way coded fingerprint so repeat visits are counted once. We do not store your IP address, and the owner never sees who you are.

Contact form and newsletter

• Contact form: your name, email address, optional phone number, topic and message, so we can answer you.
• Newsletter: your email address. We only send news after you confirm by clicking the link we email you, and every email has an unsubscribe link that removes you at once.

Cookies and analytics

• Sign-in cookies keep you logged in. A small cookie that holds no personal data tells our pages to show "My tags" instead of "Log in".
• On our public pages (the home page, product pages, About, Contact and these policies) we use Google Analytics to count visits and see which pages are useful. Google sets cookies for this and receives your IP address, browser details and the pages you view. We never load Google Analytics on scan pages, business card pages, your account or the admin console. You can block it with your browser settings or Google's opt-out add-on.
• Cloudflare protects the site, and its bot check (Turnstile) runs on the scan page and the contact form to stop spam.

How long we keep it

• Photos and voice notes: 30 days (free plan) or 90 days (paid plan).
• Account data: until you delete your account (in the app under Settings, or on the website under Settings → Delete account), which removes it straight away.
• Order and invoice records: as required for accounting.
• Newsletter: until you unsubscribe.
• Contact form messages: as long as we need them to answer you and follow up.

Who we share it with

Only what each service needs to work:

• SMS provider (login codes and alerts).
• Email provider (alerts, receipts, reminders).
• Expo / Google Firebase / Apple (app push notifications).
• PayHere (card payments) and our courier (delivery details).
• Google or Apple, if you choose to sign in with them.
• Our hosting and database providers, and Cloudflare (security and delivery).
• Google Analytics (visits to our public pages, as described above).

Your rights

You can ask to access, correct, export or delete your data by emailing hello@tagwyse.com or calling +94 71 577 0488. We acknowledge requests within 7 days and complete them within 30 days.