Privacy
Last updated 1 October 2026
Self-hosted software
Tagvico runs on your own server. This website does not process your documents, OCR text, Paperless data or provider credentials.
What the app connects to
The app connects to your Paperless-ngx instance and to the AI provider you choose. When a question or filing run needs it, the document text and metadata it requires are sent to that provider under its own terms. A local endpoint such as Ollama keeps that step on your network.
Sign in with ChatGPT
The ChatGPT plan provider uses OpenAI’s Sign in with ChatGPT flow. Document text is sent to OpenAI with store set to false. Tagvico keeps the sign-in tokens on your server with owner-only file permissions and never sends them to the browser. Signing out revokes the session at OpenAI.
Telegram and Discord
If you enable the optional bots, questions, uploads and returned documents pass through Telegram or Discord under their terms, and they are not end-to-end encrypted. Only users you allowlist can use them, each with their own Paperless token.
Usage statistics in the app
Anonymous installation statistics are off by default. If an administrator turns them on, the app sends a small counter without document text, titles, names, addresses, keys or exact counts, and the exact payload can be previewed first. The full description is in the project privacy notice.
This website
The landing page uses self-hosted Umami for page views and coarse interactions such as link clicks, section views, scroll depth and standard campaign labels. Tracking stays off when Global Privacy Control or Do Not Track is enabled. It does not use cookies, local storage, persistent visitor identifiers or fingerprinting, and it does not collect arbitrary query parameters or free-form input. This page and the terms page are not tracked.