Tap Privacy Policy

Tap is a brand operated by Tap HQ, LLC. We provide smart NFC tags and public venue pages that help guests access menus, links, sharing, and saved venue history. This policy explains what information we collect and how we use it.

Guests do not need an account or an App Store download to use Tap. On iPhone, your page opens in Tap's App Clip; on Android, in the browser. Tap may collect product interaction data that is not linked to a guest identity:

• A randomly generated guest identifier stored on the device
• Venue scans and page opens
• Link clicks, share actions, favorites, and guest history

When a venue or business works with Tap, we may collect information needed to provide the service:

• Contact information submitted through Tap forms
• Venue profile, links, tag, and account setup information
• Billing and subscription details processed by our payment providers
• Operational messages needed to provide support and service updates

On campaign pages, you can ask for Tap updates or nominate a venue without creating an account. We may collect:

• An email address you voluntarily submit for Tap campaign updates
• The campaign landing page and referral code that led to the signup
• A nominated venue name, optional neighborhood, and whether its share link was used

Opening a valid campaign link as a page sets an essential, first-party referral cookie containing only its code for up to 90 days. Embedded images, scripted fetches, and prefetches do not set it. We use the cookie to connect a handoff or paid campaign signup to the campaign that introduced Tap, not to record guest venue activity.

Campaign emails are kept in a marketing-specific list, separate from guest reviews and private-feedback information. You can unsubscribe from future campaign email at any time using the instructions in the message or by contacting us.

We use information to operate venue pages, provide scan and link analytics, maintain guest history and sharing features, fulfill support requests, improve Tap, prevent misuse, and comply with legal obligations.

We do not sell guest personal information. We share information only with the service providers that run Tap, each limited to providing services to Tap:

• Cloudflare (Workers hosting, performance analytics, Images, and R2 media storage)
• Neon (managed Postgres database)
• Stripe (payments, checkout, billing)
• Resend (transactional and campaign email)
• Google (Analytics 4 and Ads via a first-party server-side tagging endpoint on Google Cloud Run; Gmail for business correspondence; reCAPTCHA-class abuse controls where present)
• Upstash (rate limiting)
• EasyPost (shipping labels and tracking)
• OpenRouter (LLM-powered venue setup extraction)
• Cal.com (sales consultation scheduling)

You can unsubscribe from campaign email at any time using the unsubscribe link in the message or by contacting us — the marketing list records the opt-out immediately.

You may request a copy (export) or deletion of your personal information — marketing-list entries, guest analytics rows tied to your device identifier (scans, link clicks, shares, campaign taps), review and private-feedback submissions, and account data — by emailing hello@taphq.co from the address in question. We verify the request, then export or delete the rows and confirm within 30 days. Deletion of guest analytics rows removes the device identifier; aggregate, de-identified counts may be retained.

The Tap public iOS app and App Clip do not use guest product interaction data for tracking across apps or websites owned by other companies.

On Tap's marketing and checkout pages, optional Google Analytics and Google Ads remain disabled until you grant analytics consent. Advertising measurement is a separate choice. When granted, Tap may use a first-party measurement endpoint and send consented purchase data, including normalized one-way hashes of checkout contact details, to improve conversion matching.

Cloudflare provides privacy-first aggregate page-performance measurement as part of operating Tap's proxied websites. It does not use cookies or collect personal information for this service.

Analytics URLs exclude lead tokens, checkout session identifiers, promotional codes, email addresses, and other sensitive query values. You can change or withdraw your choice at any time.

We keep information for as long as needed to provide Tap, maintain business records, resolve disputes, and meet legal obligations. Guests can clear local app and site data from their device settings.

Questions about this policy can be sent to hello@taphq.co.