Privacy Policy

Last updated: October 14, 2026

TapaTap is a service of Tugce Ventures LLC, a California company based in Irvine ("TapaTap", "we", "us"). This policy explains what personal information we collect through tapatap.app, app.tapatap.app, the stand and card links on tapatap.link, and our emails, and how we use and share it. Questions: [email protected].

We serve two groups of people:

• Business users: owners and staff of businesses that use TapaTap, and our authorized dealers.
• Visitors: people who tap or scan a TapaTap stand or card.

1. Visitors who tap or scan a stand

When you tap or scan a stand, our service on tapatap.link sends you to the page the business chose, or shows the business's profile page. For each tap we record:

• the date and time, whether you tapped (NFC) or scanned (QR), and the button you chose on a profile page;
• your approximate country and city, which our hosting provider Cloudflare derives from your connection;
• your device type (phone, tablet or computer).

We do not store your IP address, we do not set cookies on stand pages, and we do not try to identify you. Businesses see these records only as counts and charts. The page you are sent to (for example Google, Instagram or the business's own website) is run by someone else and has its own privacy policy.

2. Information about business users

• Account: your name, email address, password (stored only as a one-way hash), phone number if you add one for verification and account recovery, and preferred language.
• Your business: its name, address, time zone, Google listing ID, and what you set up in TapaTap: links, profile page content (logo, buttons, opening hours), team members and settings.
• Billing: your plan, payment dates, and the brand and last four digits of your card. Card numbers are handled by Stripe and never reach our servers. When you agree to an automatically renewing plan, we keep a record of that consent: the text you agreed to, the time, your IP address, the price and the renewal date.
• Security and support: a log of changes to accounts, businesses, stands and links (who made the change, what changed, when and from which IP address), verification events, and messages you send us.
• Delivery: when our team or a dealer delivers a stand, the time and method of delivery and, sometimes, a photo of the stand in place.

3. AI features

Some dashboard features use artificial intelligence, for example drafting a reply to a review that you paste in. When you use one, we send the text you submit and the business details the task needs (such as your business name and the reply language) to the AI provider we use for that feature: Anthropic (Claude), OpenAI or Google (Gemini). The provider uses this content to produce the result and returns it to us, and we show it to you to review, edit and use.

• We do not keep the text you submit or the result after showing it to you. We keep a record of each use: the feature, the provider and model, the amount of text processed (tokens), its cost and the credits used.
• We use these providers' paid business services, whose terms do not allow them to use this content to train their models. Under their own terms they may keep it for a limited time to detect abuse.
• AI results can be wrong. Please check them before you publish or rely on them.
• Please do not enter sensitive personal information, such as health or payment details, into AI features.

4. Information from other sources

• Google: when you look up your business while claiming a stand, or use "Fill from Google", we request your business's public listing from Google. We keep the listing ID, and only the details you choose to add to your profile. Search results may be kept for up to 24 hours to avoid repeat requests.
• Dealers: if a dealer gave you your stand, the dealer may give us your business's name and contact details.
• Stripe tells us whether a payment succeeded.

5. How we use information

• To provide TapaTap: send visitors to the right page, show profile pages, and run your dashboard, statistics and emails.
• To bill you and to handle renewals, cancellations and refunds.
• To keep TapaTap secure: verify accounts, prevent fraud and abuse, and check destinations against lists of unsafe websites.
• To send service emails (account, security, billing, trial and plan notices) and, if you choose, weekly statistics.
• To improve TapaTap using combined statistics that do not identify you.
• To comply with the law.

We do not sell personal information, we do not share it for targeted advertising, and we do not use advertising cookies.

6. Who we share information with

Service providers that process information for us, under contracts that limit how they may use it:

• Cloudflare: hosting of stand links, network security and content delivery;
• Stripe: payments;
• Resend: email delivery;
• Twilio: phone verification codes;
• Google: business listing lookups, and Gemini when we use it for AI features;
• Anthropic and OpenAI: AI features, when we use them.

Others:

• Authorized dealers: if your business came to us through a dealer, that dealer can see your business account, stands and statistics in order to support you.
• Your team: the people you add to your business can see its information.
• Legal reasons: when the law requires it, or to protect the rights, property or safety of TapaTap, our users or others.
• Business transfers: if TapaTap is merged or sold, information may move to the new owner, who must respect this policy.

7. Cookies

The dashboard uses only the cookies needed to keep you signed in and to protect forms. Cloudflare may set cookies it needs for security. We do not use advertising cookies or third-party analytics cookies, and stand pages on tapatap.link set no cookies at all. Because we do not track you across other websites, we do not respond differently to "Do Not Track" signals.

8. How long we keep information

• Account and business information: while your account is active, and afterwards as long as needed to close it, resolve disputes and meet our legal obligations.
• Tap records: 13 months. After that only daily totals per stand remain, without location or device type.
• Billing records and renewal consents: as long as tax and consumer laws require, and renewal consents for at least three years.
• Security logs: as long as needed for security and accountability.
• Backups: encrypted backups are kept for 30 days.

9. Security

We encrypt information in transit, store passwords as Argon2id hashes, encrypt secret keys and backups, offer two-factor authentication to business users and require it for our administrators, and give staff only the access they need. No system is perfectly secure; if you believe your account is at risk, contact [email protected].

10. Your choices and rights

You can view and update most of your information in your dashboard, and you can turn weekly statistics emails off. You can also ask us for a copy of your personal information, or ask us to correct or delete it, by writing to [email protected]; we will verify your request before acting on it. If you are a California resident, you have these rights under California law, and we will not treat you differently for using them. We may keep information that the law requires us to keep.

11. Children

TapaTap is a service for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.

12. Where information is processed

We and our service providers process information in the United States.

13. Changes to this policy

We will post any new version on this page with a new date. If a change is significant, we will also email account holders before it takes effect.

14. Contact

Tugce Ventures LLC, Irvine, California · [email protected]