1. Who we are
Tuggoo ("we", "us") is operated by Vertical Shifts, Texas, USA. Tuggoo provides tuggoo.com, a service for creating and running live quizzes, polls and interactive sessions. Questions about this policy or your information: office@tuggoo.com.
This policy explains what we collect, why, who helps us process it, how long we keep it and the choices you have.
2. Organizations and their players
Tuggoo is used by organizations: companies, schools, trainers and their members. An organization decides what content to create, who to invite and whom to invite to play. For player answers and the content an organization adds, we act on the organization's behalf, and questions about that information may be best directed to the organization first. We still honour the rights described below.
3. What we collect
Account holders:
- Your name and email address, and your password, which we store only as a secure hash.
- If you sign in with Google: the name, email address and profile photo your Google account shares with us.
- Your organization's name, its members and their roles, and its plan.
- What you create: Tuggoos, questions, uploaded images and files, templates, branding and session settings.
- Billing details: your plan, billing email and invoices. Card details are entered on Stripe's pages and handled by Stripe; we never see or store your full card number.
Players in a session:
- The nickname and avatar a player chooses, their team, answers, response times and scores.
- A random token stored on the player's device so they can rejoin the same session. Players don't need an account and we don't ask them for an email address.
Technical information:
- For signed-in users, the IP address and browser type of each sign-in session, and in our security audit log for important account actions.
- IP addresses are also used briefly to limit repeated sign-in attempts and other abuse.
Business contacts: for our own sales, we keep contact details of people at organizations that are, or may become, customers, and our correspondence with them.
4. How we use it
- To provide the service: accounts, organizations, live and self-paced sessions, results and reports.
- To send service emails: email confirmation, sign-in links, password resets, invitations, notifications, and notices when an organization nears a plan limit (organization managers can turn these off).
- To bill paid plans and keep financial records.
- To keep Tuggoo secure: preventing abuse, investigating problems and keeping an audit trail of important changes.
- To improve Tuggoo, using aggregated usage figures.
- To meet legal obligations.
We don't sell personal information, we don't use it for advertising, and we don't use third-party advertising or analytics trackers.
5. AI regeneration
Tuggoo's AI features (Create with AI and Improve with AI, together "AI regeneration") draft and rewrite questions for you. When you use them, the topic, your instructions and the text of any document you upload are sent to an external AI service provider, which may process them in other countries, including outside the European Union and the United States.
Players' answers and your sessions' results and analytics are guarded: they are never sent to an AI provider.
We suggest you don't use AI regeneration for sensitive questions, and don't include personal or confidential information in what you send to it. AI drafts can be wrong: review them before you use them.
6. Who helps us
We use these providers to run Tuggoo. Each receives only what it needs for its job:
- netcup GmbH (Germany): hosting of the application, database and uploaded files.
- Resend (USA): sending emails.
- Stripe (USA): payments and invoices.
- Google (USA): sign-in with Google, when you choose it.
- An external AI service provider: AI regeneration, when you use it (see AI regeneration above).
We may also disclose information when the law requires it, to protect people's safety or our rights, or as part of a sale or reorganization of our business, in which case this policy continues to apply.
7. International transfers
Our servers are in Germany and some of our providers are in the USA and other countries, so your information may be processed outside your country. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.
8. Cookies and device storage
We use only what the service needs to work:
- Sign-in cookies that keep you signed in.
- A cookie that remembers your language.
- On a player's device: the rejoin token for a session, and whether sound is on.
We don't use advertising or analytics cookies.
9. How long we keep it
- Account and organization information: for as long as the account or organization exists.
- Session results and player answers: for as long as the organization keeps them.
- Downloaded report files: 7 days. Read notifications: 90 days.
- Database backups: 14 days. Deleted information disappears from backups within that time.
- Billing records: as long as tax and accounting law requires.
To delete your account or your organization, email office@tuggoo.com from the address on the account. We'll confirm and complete it within 30 days.
10. Security
All traffic is encrypted (HTTPS). Passwords are hashed. Each organization's data is kept separate from every other organization's, access is limited by role, and important changes are recorded in an audit log. No system is perfectly secure; if we learn of a breach affecting your information, we'll tell you as the law requires.
11. Your rights
You can ask us to access, correct, export or delete your personal information, or to object to or restrict how we use it. Email office@tuggoo.com; we'll respond within 30 days and may need to confirm your identity. Account holders can also correct their name and sign out of devices from their account page.
If you're in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority. If you're a California resident, you have the rights the CCPA gives you, and we don't sell or share personal information for cross-context advertising.
12. Children
Tuggoo has no minimum age. A person under 18 may create an account only with the consent of a parent or guardian, or of a school or organization that has that consent. Players join sessions without an account; the organization running the session is responsible for any consent its players or their parents need to give. Hosts should ask players to use a nickname rather than their full name. If you think a child has given us personal information without the right consent, contact us and we'll delete it.
13. Changes
We'll update this page when our practices change and change the date below. If a change is significant, we'll tell account holders by email or in the app before it takes effect.