Information we handle

LFMG Pty Ltd operates Tadpond. We handle information you provide when you create an account, build or use an app, use your computer, connect services or contact support. This includes your email and sign-in details, app names and icons, app source and saved data, chats and files, provider credentials or tokens, task context, support messages and subscription records.

We also receive service diagnostics such as IP addresses, request times, browser information and errors. Stripe handles payment details; Tadpond receives customer, invoice and subscription information needed to manage access. For purchases sold through Link, Stripe also provides transaction support and sends payment emails through Link.

Why we use it

We use this information to sign you in, host your computer and apps, help you build, improve and run them, carry out your instructions, manage payments and access, diagnose problems, answer support requests and protect the service. We may also need records to meet legal obligations or resolve disputes.

The information you choose to put in a chat, file or connected service affects what Tadpond and the selected AI provider need to process. Only share information you are authorised to use.

Your apps and AI access

Your apps, their saved data and their associated conversations live on your Tadpond cloud computer. The apps share that computer, including its files, software and visible browser. An app’s own identity and conversation do not create a separate computer or a separate security boundary.

When you ask AI to build, change or use an app, relevant app content can be included in the context sent to your selected provider. The AI can use signed-in browser sessions and connected services to carry out your instructions. Scheduled Loops can also use that access and send task context to the selected AI provider.

If you ask Tadpond to add sharing or publish information through an app, access depends on the app and connected service. Review who can see the information and what they can do. Give the computer and AI only the access you intend, and review important actions.

Service providers and AI

We use Vercel for the website, Supabase for accounts and service records, DigitalOcean for cloud computers, Resend for account emails, Namecheap Private Email for support, and Stripe for payments. These providers process information needed for their part of the service.

If you use Google to sign in, Google supplies account identity information to our sign-in service. Your sign-in method is separate from Tadpond AI. Tadpond selects the model for the managed service, which currently uses OpenAI.

OpenAI receives the context needed for Tadpond AI requests. For accounts with an existing or administrator-enabled direct AI connection, the connected provider, such as OpenAI or xAI, receives that context. This can include prompts, chat context, screenshots, files and tool results. Services you open or connect can receive information through your instructions and browser activity.

Your provider’s account settings, retention and data-use terms apply. Tadpond does not promise that all processing stays on your computer or that every provider uses the same training or retention rules.

Location and access

Customer computers are currently hosted in Australia. We use international service providers, so some information is processed outside Australia, including in the United States. Locations depend on the provider and the services you connect. Hosting a computer in Australia does not keep all account, email, payment or AI processing in Australia.

Authorised operators can access infrastructure and information, including computer content, where needed to run the service or investigate a support or security issue. The support dashboard shows account, billing and computer status.

Cookies and local storage

Tadpond uses cookies for account sign-in and access to your computer. Local storage saves preferences such as appearance and activity details. Services used for sign-in, payment and your cloud browser may use their own cookies. Their policies also apply.

Optional analytics

What we measure

With analytics enabled, we save the hosting provider’s approximate country and subdivision for the first observed account visit and show them with referral categories in the founder admin view. We do not save an IP address or precise location for this reporting. Network location can be affected by VPNs or travel and is not verified residence. This collection follows your analytics preference and browser privacy signals.

When analytics are enabled, we use PostHog Cloud to measure public visits, referral categories and approved campaign tags, completed sign-ups, paid subscriptions, computer sessions, counts of messages sent and successful AI runs. We join visits to your opaque account ID across devices. We record plan, provider and whether you use a phone or desktop; we do not send your name or email.

What stays out of analytics

We do not collect chat text, prompts, responses, app content, files, credentials, clipboard content, screenshots or browsing inside your computer for analytics. Session replay and automatic click and form capture are not used. Public page addresses and titles come from an approved list; authentication callbacks, handoffs, URL fragments and other query parameters are excluded.

Your choice

In Europe, including the EU/EEA, UK and Switzerland, we ask before enabling analytics cookies. We also ask if we cannot determine your region. Elsewhere analytics are enabled by default unless you have opted out. We use the hosting provider’s country classification to select this default; we do not send your IP address or country to PostHog. You can switch analytics off or on in Settings → Account or through Analytics preferences in the website footer. Declining after sign-in also stops future account-level analytics on your computers. We honour browser Do Not Track and Global Privacy Control signals. Sign-in, payments and AI work do not depend on analytics. Analytics reports cover users with analytics enabled, not necessarily all customers; Stripe remains the financial record.

The analytics browser ID expires after 90 days and is cleared on logout. Account attribution and delivery receipts are separate from chat content. PostHog processes the approved metadata in the configured Cloud region; ask support to delete analytics associated with your account. Previously collected data is not erased simply by declining future collection.

Retention and deletion

When paid access ends, your computer stops, including the apps and Loops running on it, and is retained for seven days. It can then be permanently deleted following notice. We do not provide automatic backups or guaranteed recovery. Keep independent copies of important apps and files.

Account records remain while your account is open and needed to provide access. Support records are kept as needed to handle your request and related follow-up. Billing records may need to remain for accounting, legal obligations and payment disputes. Diagnostics and security records are kept as needed to investigate faults, prevent abuse and protect the service, subject to the relevant provider’s retention settings.

Computer deletion does not automatically remove these separate records or provider backups. Account and data-deletion requests are handled through support. We review what can be removed and explain any records we need to retain and why. The seven-day computer retention period is not a promise that every record is erased after seven days.

Information already sent to an AI provider or another connected service is subject to that service’s retention and deletion process. You may need to make a separate request to that provider.

Access, correction and complaints

Email help@tadpond.com to ask about your information, request access, correction or deletion, or make a privacy complaint. We may need to confirm your identity. Do not send passwords, API keys or recovery codes.

We will review your request, investigate any complaint and respond with the outcome or next steps. If you remain dissatisfied, you may contact the relevant privacy regulator, including the Office of the Australian Information Commissioner where it has jurisdiction.

For subscription cancellation and the service’s experimental limits, read the Terms.

Questions?

Contact help@tadpond.com. Tadpond is operated by LFMG Pty Ltd (ABN 60 670 846 992).

Customer correspondence: 888 Brunswick Street, New Farm QLD 4005, Australia.