Tap Privacy Policy

Tap is a brand operated by Tap HQ, LLC. We provide smart NFC tags and public venue pages that help guests access menus, links, sharing, and saved venue history. We also provide the Tap dashboard and Tap Client mobile app for venue owners and their teams. This policy explains what information we collect and how we use it.

Guests do not need an account or an App Store download to use Tap. On iPhone, your page opens in Tap's App Clip; on Android, in the browser. Tap may collect product interaction data that is not linked to a guest identity:

• A randomly generated guest identifier stored on the device
• Venue scans and page opens
• Link clicks, share actions, favorites, and guest history

When a venue or business works with Tap, we may collect information needed to provide the service:

• Contact information submitted through Tap forms
• Venue profile, links, tag, and account setup information
• Billing and subscription details processed by our payment providers
• Operational messages needed to provide support and service updates

Tap Client uses your existing Tap account. We process your name, email, organization and venue memberships to sign you in and apply your permissions. The app lets you manage venue content, view reviews, label and inspect tags, manage existing billing, order physical tags and contact support. These actions can include purchase and shipping records, private feedback and replies, internal notes, support messages and photos you choose to upload.

NFC access reads a tag's identifier and stored destination so we can show authorized tag details; the app does not program tags. Support photos are optional. We remove image metadata and store private support files encrypted with access controls. Tap Client does not request your contact list, microphone or device location.

Notifications are optional. When enabled, we associate a random installation identifier and push token with your session and organization, and send notifications through Expo, Apple Push Notification service or Firebase Cloud Messaging. Notification text is generic; opening a notification requires authorized access to its record. You can change notification preferences in the app or permission in your device settings.

Encrypted operational snapshots are available offline for up to 24 hours and saved unsent drafts for up to seven days. You can clear saved data in the app; signing out clears its local private data. The native app includes no advertising or analytics SDK. Our servers and dashboard browser pages collect diagnostic information, including errors, request metadata, dashboard click and navigation history, and performance traces, to operate and troubleshoot the service. These records can contain identifiers associated with your account or requests.

Before each AI reply request, Tap Client asks whether to share the selected feedback context with OpenRouter and DeepInfra. If you agree, we send the venue name, rating, reply tone and up to 4,000 characters of feedback. We remove common contact and credential patterns, but free text may still contain personal information. The guest's structured email address and your internal notes are excluded. You can cancel and write your own reply. Generated text remains a draft until you review and send it.

Tap's private-feedback AI route requires no provider data collection and eligible zero-retention processing. Tap's OpenRouter key is excluded from optional prompt logging and input/output sharing is disabled. Request metadata may still be retained. These settings govern new requests and do not establish that any historical provider copies have been erased.

On campaign pages, you can ask for Tap updates or nominate a venue without creating an account. We may collect:

• An email address you voluntarily submit for Tap campaign updates
• The campaign landing page and referral code that led to the signup
• A nominated venue name, optional neighborhood, and whether its share link was used

Opening a valid campaign link as a page sets an essential, first-party referral cookie containing only its code for up to 90 days. Embedded images, scripted fetches, and prefetches do not set it. We use the cookie to connect a handoff or paid campaign signup to the campaign that introduced Tap, not to record guest venue activity.

Campaign emails are kept in a marketing-specific list, separate from guest reviews and private-feedback information. You can unsubscribe from future campaign email at any time using the instructions in the message or by contacting us.

We use information to operate venue pages, provide scan and link analytics, maintain guest history and sharing features, fulfill support requests, improve Tap, prevent misuse, and comply with legal obligations.

We do not sell guest personal information. We share information only with the service providers that run Tap, each limited to providing services to Tap:

• Cloudflare (Workers hosting, performance analytics, Images, and R2 media storage)
• Neon (managed Postgres database)
• Stripe (payments, checkout, billing)
• Resend (transactional and campaign email)
• Google (Analytics 4 and Ads via a first-party server-side tagging endpoint on Google Cloud Run; Gmail for business correspondence; reCAPTCHA-class abuse controls where present)
• Upstash (rate limiting)
• EasyPost (shipping labels and tracking)
• Expo, Apple and Firebase Cloud Messaging (optional app notifications)
• Sentry (dashboard error and performance diagnostics)
• OpenRouter (venue setup extraction and optional AI reply routing), and DeepInfra (optional private-feedback reply processing)
• Cal.com (sales consultation scheduling)

You can unsubscribe from campaign email at any time using the unsubscribe link in the message or by contacting us — the marketing list records the opt-out immediately.

You may request a copy (export) or deletion of your personal information — marketing-list entries, guest analytics rows tied to your device identifier (scans, link clicks, shares, campaign taps), review and private-feedback submissions, and account data — by emailing hello@taphq.co from the address in question. We verify the request, then export or delete the rows and confirm within 30 days. Deletion of guest analytics rows removes the device identifier; aggregate, de-identified counts may be retained.

The Tap public iOS app and App Clip do not use guest product interaction data for tracking across apps or websites owned by other companies.

On Tap's marketing and checkout pages, optional Google Analytics and Google Ads remain disabled until you grant analytics consent. Advertising measurement is a separate choice. When granted, Tap may use a first-party measurement endpoint and send consented purchase data, including normalized one-way hashes of checkout contact details, to improve conversion matching.

Cloudflare provides privacy-first aggregate page-performance measurement as part of operating Tap's proxied websites. It does not use cookies or collect personal information for this service.

Analytics URLs exclude lead tokens, checkout session identifiers, promotional codes, email addresses, and other sensitive query values. You can change or withdraw your choice at any time.

We keep information for as long as needed to provide Tap, maintain business records, resolve disputes, and meet legal obligations. Guests can clear local app and site data from their device settings.

Questions about this policy can be sent to hello@taphq.co.