Information handled
- URLs, page HTML, styles, observable text, rendered attributes and a temporary page capture when rendered or visual review is enabled.
- Request metadata needed for security and operations, such as time, endpoint, error information and network logs maintained by hosting providers.
- Account identity, workspace membership and support messages when accounts are introduced.
- Subscription status and payment identifiers from the payment provider when billing is introduced. tasteHQ will not store complete card details.
Why it is handled
Information is used to perform the requested analysis, secure the service, diagnose failures, enforce limits, provide support and meet legal obligations. Customer page captures and content will not be added to the public catalog or used to train a model without separate express permission.
Page content and personal information
A public webpage may contain names, photographs or other personal information. Submit only pages you are authorised to test. tasteHQ minimises what it extracts and does not support pages containing sensitive or regulated information in the public-preview workflow.
Storage and retention
During the current public beta, review results remain in your browser session and the last URL and contract may be saved in local storage. Temporary server processing data is discarded after the request, subject to short-lived infrastructure and security logs maintained by service providers.
When private workspaces are introduced, the intended default is 90 days for review captures and results, while explicitly approved baselines remain until replaced or deleted. The product must expose project deletion before this storage is enabled.
Service providers and overseas processing
| Provider | Purpose | When used |
|---|---|---|
| Vercel | Hosting, server functions and operational logs | Current service |
| Model provider configured by the operator | Optional visual interpretation of a temporary page capture | Only when visual review is enabled |
| Supabase | Authentication, workspace records and private object storage | When accounts launch |
| Stripe | Checkout, subscriptions and billing portal | When paid plans launch |
Providers may process information outside Australia. Contracts, security controls and provider locations must be reviewed before account storage or billing is enabled.
Security
tasteHQ restricts server-side page retrieval from private, local and link-local network addresses. Private workspace data will require row-level access controls, scoped credentials and tested deletion. No internet service can promise absolute security.
Your choices and requests
You may clear locally stored review data through your browser settings. For access, correction, deletion, privacy complaints or questions, contact Studio W230 through w230.net. We will verify the request and respond within a reasonable period.
Changes
This notice will be updated when accounts, persistent review storage, analytics or billing are enabled. The effective date above identifies the current version.