Rate limits
Repeated messages, calls and emergency attempts are restricted per connection and tag.
TagVomo is designed around controlled communication: limited public data, contextual actions, temporary access, abuse limits and owner-controlled preferences.
The public tag endpoint returns only the information needed to confirm the vehicle and choose an action. Stored mobile numbers are not returned on the public page.
Repeated messages, calls and emergency attempts are restricted per connection and tag.
Owners can block call requests while continuing to receive useful text alerts.
The scanner’s reply token works for the current incident, not as a permanent owner contact.
IP address and user-agent signals are hashed for abuse analysis instead of shown to owners.
Temporary abuse telemetry is removed after the configured retention period.
Activation, emergency profile and incident-location sharing require explicit consent.
The scanner gets only the action page. Stored phone numbers and sensitive owner details stay behind controlled relay workflows.
Emergency data is separated from normal contact and shown only when the owner enables the profile.
The emergency profile is disabled by default and can be switched on or off.
Blood group and owner name appear only when the owner has chosen to share them.
The stored emergency phone is not returned by the public API.
TagVomo is a notification aid, not a replacement for police, ambulance or roadside authorities.
| Data | Purpose | Visible to scanner? | Control |
|---|---|---|---|
| Vehicle registration | Confirm the intended object or vehicle | Limited display | Owner/operator |
| Owner mobile | Receive alerts or relay calls | No | Private system data |
| Scanner mobile | Verify a requested masked call | No | Hashed/session use |
| Message content | Explain the incident | Shared with owner | Temporary thread |
| IP/user-agent hash | Rate limiting and abuse review | No | Retention-limited |
| Incident location | Towing or accident context | Owner only | Explicit scanner consent |
Owner phone is excluded from public responses.
Applied to contact and call-request routes.
Requires production voice provider credentials.
Requires verified regional delivery providers.
No. The public scan page and public tag API do not return the stored owner number.
A scanner must provide a valid international number for verification, requests are rate-limited, and owner DND can block the action. Actual masked connection also requires a configured voice provider.
The current system stores a salted hash of network and user-agent signals for temporary abuse control, not a permanent hardware identifier.
Yes. The owner controls whether the emergency profile is enabled and which limited fields can appear.