Privacy Policy

This policy explains how Tap Tag LLC (“we”, “us”) handles personal information. It covers three groups of people:

• Account users: the business owners, staff and team members who sign in to the dashboard.
• Visitors: people who tap a tag, scan a code or open a profile or review page.
• People who share their details: anyone who exchanges contact details with a profile, fills in a lead form, or leaves feedback on a review page.

For visitors and shared details, the business that owns the profile or review page decides what to collect and how to use it; we store and process that information on the business's behalf. Questions about what a business does with your details should go to that business.

From account users

• Name, email address, password (stored only as a secure hash), and mobile number if you give one.
• Your company's name, logo, profiles, buttons, links, templates and settings.
• Billing details: your plan and payment history. Card numbers are handled by our payment processor; we never see or store them.
• How you use the dashboard, such as when you last signed in, so we can support you and keep accounts secure.

From visitors

• Basic visit information: time, page, whether it came from a tap, QR scan or link, device type, browser, approximate area from the network (city or region level), and the referring site.
• We don't use advertising cookies or track you across other sites. Visit counts use a one-way scrambled identifier so a single visitor isn't counted twice; it can't be turned back into an IP address.
• If a business adds its own analytics or pixel to a page, that provider's policy applies to that data.

From people who share their details

• Whatever the form asks for, typically name, email, phone, company and a message, plus which profile or page it came from.
• On review pages: the rating you choose and any feedback you write. Reviews you post on Google or another review site are governed by that site's policy.

If you give us your mobile number and choose to receive texts, we use it only to send the one-time codes you ask for (sign-up verification, sign-in and password reset codes) and, if you tick “Text” for an alert in your notification settings, those alerts. We never send marketing texts.

We do not sell, rent or share mobile numbers or text-messaging opt-in information with third parties or affiliates for marketing or promotional purposes. Opt-in data and consent are not shared with anyone except the text-message provider that delivers our messages (Twilio), solely to deliver them.

Reply STOP to any message to stop receiving texts, or HELP for help. Message and data rates may apply. Details are in our Terms & Conditions.

• To run Tap Tag: show profiles and review pages, deliver leads and feedback to the right business, send the notifications and emails you've chosen, and process payments.
• To show a business its orders from the Tap Tag store: the dashboard reads orders from our Shopify store that were placed with the email addresses of that account's admins, its backup contact, or addresses an admin has confirmed with a code. Order details stay in Shopify; the dashboard only displays them.
• To keep accounts secure: verification codes, bot protection, rate limits and spotting misuse.
• To support you when you contact us, and to send important account and billing notices.
• To understand how Tap Tag is used in aggregate so we can improve it.

We don't sell personal information. We share it only with:

• The business whose profile or review page you visited or shared your details with.
• Service providers that help us run Tap Tag, under contracts that limit their use to providing the service: Supabase (database and sign-in), Vercel (hosting), Resend (email), Twilio (text messages), Cloudflare (bot protection), Apple and Google (wallet passes, when a business offers them), and Anthropic (the in-app help assistant, which receives only the question asked and the account facts needed to answer it).
• Services a business connects, such as its CRM (HubSpot, Zoho, Salesforce, Pipedrive) or a webhook, which receive the leads the business chooses to send.
• Authorities when required by law, or to protect people's safety or our rights.
• A buyer or successor if Tap Tag LLC is involved in a merger or sale, with this policy continuing to apply.

• Account and profile data: while the account is open. After it's closed we keep only what we need for billing records, legal obligations or to restore the account if asked; email us to have the rest removed sooner.
• Leads and feedback: until the business removes them or closes its account.
• Visit analytics: kept so the business can see its numbers over time. They hold no names and no IP addresses.
• Verification codes expire after 10 minutes. Email delivery logs and help-assistant chats are cleared automatically after a set time.

We use encryption in transit, access controls so each business only sees its own data, row-level database permissions, hashed passwords, and encrypted storage of service keys. No system is perfectly secure; if we learn of a breach affecting your information, we'll tell you as the law requires.

• Account users can see and change their details in the dashboard, turn notifications and texts on or off, and ask us to export or remove their data.
• If you shared your details with a business, contact that business to see, change or remove them; we'll help the business do so.
• Depending on where you live (for example California, or the EU and UK), you may have rights to access, correct, remove or export your information, or to object to some uses. We don't sell or “share” personal information for targeted advertising.

To make a request, email support@taptag.shop. We'll respond within 30 days and may need to confirm who you are first.

Tap Tag accounts are for adults. Profiles are public and may be visited by anyone, but we don't knowingly collect personal information from children under 13. If a child under 13 has sent us information, contact support@taptag.shop and we'll remove it.

Tap Tag is run in the United States, and information is stored and processed there by us and our service providers.

We may update this policy. If a change is significant we'll tell account owners by email or in the dashboard before it takes effect. The date at the top shows when it last changed.

Tap Tag LLC. Email support@taptag.shop.