Skip to content

Privacy policy

Effective

This policy explains what Beautiful Champions, Inc. (“Tarz”, “we”) collects when you use tarz.computer, the Tarz assistant, and the Tarz API (together, the “Service”), why we collect it, and the choices you have. It applies alongside our Terms of use.

What we collect

  • Account details. The phone number you sign up with, the email address you add for signing in, the display name you choose, your plan, and the settings of your account.
  • What you send the assistant. The messages you write to Tarz on the website or from a chat app, the assistant’s replies, the steps it took to answer, and the products, files, and models it makes with you.
  • Orders. When you buy something, the name and shipping address you give at checkout, what you ordered, and where its making and shipping stand.
  • Your public page. If you claim a page, its handle, the name and bio you give it, and the picture, links, socials, and products you put on it are public: anyone with its address sees them. Once it has been up a week, search engines and AI services may show it, unless you hide it from search, which takes it out of both. We check the links and pictures you add, and keep a record of each check.
  • Reports. When someone reports a page, what they wrote and which page and part of it they reported. Reports are kept for a year.
  • Buying from someone’s page. Anyone can buy from a Tarz page without an account. At checkout, Stripe, our payment provider, collects your email address and shipping address, and Tarz keeps them on your order to make it, ship it, and send you its receipt and tracking. The page’s owner sees only your name and city, never your email address or full address.
  • Chat app and phone identifiers. If you message Tarz from a chat app (iMessage, SMS, RCS, or WhatsApp), the identifier that app gives us for you, such as your phone number or email address, so replies reach you.
  • Group chats. When someone adds Tarz’s number to a group chat, Tarz keeps the group’s messages, each member’s phone number or Apple ID email, and the photos and files they send, with the account of the person who first wrote to Tarz there, for as long as that account is kept. A member who has a Tarz account is linked to it. A member’s messages in someone else’s group stay with that group’s owner, even after the member deletes their own account.
  • Sign-in and security records. Sessions, the apps you connected to your account, personal access tokens, and a history of changes to your account.
  • Accounts you connect. If you connect an account at another service, such as Dropbox, its account ID and email address and the access it granted Tarz, kept encrypted, until you disconnect it or delete your Tarz account.
  • Usage data. Which pages are viewed and which API requests and tools run, with their outcome, tied to your account ID once you sign in. On our public pages this includes how you use the line that starts a text to us (opening the list of things to make, choosing one, starting to type, and tapping Text TARZ to start, but never what you type), your device type, operating system and browser, the app you browsed in (such as Instagram), the site you came from (its name, not its address), and an ad’s campaign tags. We do not record the contents of requests in analytics.
  • Session recordings. On the pages our ads link to, we record how the page is used (scrolling, taps, and what the page shows) to improve it. What you type is never recorded: the words field is hidden from the recording and the text you would send us is removed. We do not record sessions anywhere else, including the signed-in Service.
  • Advertising measurement. On our public pages (the home page, the pages our ads link to, and our privacy, terms, SMS terms, and support pages), we use the Meta Pixel to measure how our ads on Facebook and Instagram perform. When you visit one of those pages, your browser sends Meta the page’s address, including any ad or campaign tags in it, the address of the page you came from, identifiers Meta stores in cookies, and technical information such as your IP address and browser type. When you tap Text TARZ to start, it also tells Meta that you started a text, and the kind of thing you chose to make (for example, nameplates); Google’s tag (below) tells Google that you started one. We do not use the Meta Pixel inside the signed-in Service or on sign-in pages, and we do not send Meta your name, email address, phone number, messages, or photos. On the same pages we also use Google’s tag to measure how our Google ads perform: your browser sends Google the page’s address, including any ad or campaign tags in it, the address of the page you came from, identifiers Google stores in cookies, and technical information such as your IP address and browser type. We do not send Google your name, email address, phone number, messages, or photos.
  • Technical data. Our hosting provider processes your IP address, browser type, and request times to deliver the Service and keep it secure.

Early access

When you sign up for early access on tarz.computer, we keep the invite code you used, your name, the email address your TestFlight invite goes to, what you make, the link to your work if you give one, and what you would make first. We use them to send you the TestFlight invite, and keep them until Tarz opens to everyone or you ask us to remove them by writing to privacy@tarz.computer. We never sell them.

When you leave your email on the list because you don’t have an invite code yet, we keep that address to send you a code when there is room, until Tarz opens to everyone or you ask us to remove it. We never sell it.

How we use it

  • To provide the Service: sign you in, answer your messages, and keep your products.
  • To send you sign-in codes and messages about your account.
  • To understand how the Service is used, fix problems, and improve it.
  • To measure how our ads perform.
  • To prevent abuse, keep accounts secure, and meet our legal obligations.

We do not sell your personal information. The Meta Pixel and Google’s tag on our public pages may count as sharing for cross-context behavioral advertising under some US state laws; you can opt out as described under Your choices and rights.

The assistant and AI models

Tarz’s assistant is powered by AI models run by third-party providers. When you send a message, the message and the context needed to answer it are sent to a provider to generate the reply. We do not use your messages to train our own models.

Who we share it with

We share personal information only with:

  • Service providers that process it for us: cloud hosting and storage, our database, email and text message delivery, product analytics, AI model providers, and speech-to-text, which turns the voice memos you send into text.
  • Makers that make and ship your order, such as Printify for printed goods, which receive your name, your shipping address, and the artwork or model they make it from, and use them to make and deliver it under their own terms and privacy policies.
  • Sellers, when you buy from their Tarz page: your name and city, what you bought, and where your order stands, and nothing else about you.
  • Meta, which receives what is described under Advertising measurement when you visit our public pages, to measure our ads, and uses it under its own terms and privacy policy.
  • Google, which receives what is described under Advertising measurement when you visit our public pages, to measure our ads, and uses it under its own terms and privacy policy.
  • Chat apps you choose to use. Messages you exchange with Tarz through iMessage, SMS, RCS, or WhatsApp pass through those services and the messaging providers that connect us to them, under their own terms and privacy policies.
  • Apps you connect. When you authorize an app or issue an access token, that app can reach your account within the permissions you grant. You can revoke it from your Account page.
  • Services you connect. When you connect an account at another service, such as Dropbox, Tarz sends it what you ask Tarz to send there, under that service’s own terms and privacy policy. Disconnecting it ends Tarz’s access.
  • Authorities and successors. When the law requires it, to protect the rights and safety of Tarz and its users, or as part of a merger, acquisition, or sale of assets, in which case this policy continues to apply to your information.

Cookies

We use cookies that the Service needs to work: one that keeps you signed in, and ones that remember preferences such as your theme. Our analytics may store an identifier in your browser to count visits. On our public pages, the Meta Pixel and Google’s tag may set advertising cookies to measure our ads. You can block or delete cookies in your browser’s settings.

How long we keep it

We keep your information while your account is open. You can delete your account from the Account page at any time. A deleted account can be restored for 7 days; after that your account details and products are erased. Message history and chat app links are kept until they are deleted, so if you want them removed when you close your account, write to privacy@tarz.computer and we will delete them. Security and operational records are kept for a limited time and then deleted, and we keep what the law requires us to keep. When you buy from someone’s page without an account, your email address and shipping address are cleared 18 months after nothing of your order is still being made; the order, what was in it, and its amounts are kept for the page’s owner and our records.

Your choices and rights

You can see and change your name on the Account page, disconnect apps, unlink chat apps, and delete your account. Depending on where you live, you may also have the right to ask for a copy of your personal information, to have it corrected or deleted, and to object to or restrict how we use it. To make a request, write to privacy@tarz.computer. We will not treat you differently for exercising these rights, and you may complain to your local data protection authority.

If your browser sends a Global Privacy Control signal, our public pages do not load the Meta Pixel or Google’s tag. You can also choose how Meta uses your activity for ads in your Facebook or Instagram ad settings, and how Google does in your Google ad settings.

Security

We protect your information with encryption in transit, access controls, and hashed credentials. No service can promise perfect security, so please keep your email account secure and tell us if you believe your Tarz account has been compromised.

Where it is processed

Tarz is operated from the United States, and our providers process information in the United States and other countries. By using the Service you understand that your information is processed in countries whose data protection laws may differ from yours.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, write to us and we will delete it.

Changes to this policy

We may update this policy as the Service changes. We will post the new version here with a new effective date, and if a change is significant we will tell you by email or in the Service before it takes effect.

Contact

Questions about this policy or your information: Beautiful Champions, Inc., privacy@tarz.computer. For help with your account or an order, write to support@tarz.computer.