Privacy Policy

1. Introduction

TapSavvy ("we", "our", or "us") operates the TapSavvy platform, including our website, NFC cards, and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (job title, company, phone number, social links, bio, profile photo)
• Billing information (processed securely through Stripe; we do not store full card numbers)
• Contact exchange data (information shared when exchanging contacts via NFC tap or QR scan)
• Communications you send to us (support emails, feedback)

We automatically collect:

• Profile view and interaction analytics (views, taps, link clicks)
• Device information and browser type
• IP address and approximate location
• Usage patterns and feature interactions

3. How We Use Your Information

• To provide, maintain, and improve our services
• To create and manage your digital business card profiles
• To process transactions and send billing-related communications
• To provide analytics about your profile performance
• To send service-related notifications
• To respond to your support requests
• To detect, prevent, and address technical or security issues

4. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

• Public profile data: Information on your public profile is visible to anyone with the link or who taps your NFC card
• Service providers: We use third-party services (Stripe for payments, Supabase for data storage, Mailjet for email) that process data on our behalf
• CRM integrations: If you connect a CRM, contact data syncs per your configuration
• Legal requirements: When required by law or to protect our rights

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage for sensitive credentials, row-level security on our database, and secure authentication. However, no method of transmission or storage is 100% secure.

6. Your Rights and Choices

You have the right to:

• Access, update, or delete your personal information through your account settings
• Control profile visibility and sharing through privacy settings
• Set up view-once links and expiring links for controlled sharing
• Configure field-level sharing rules for contact information
• Request data export or deletion by contacting us
• Opt out of non-essential communications

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We use our own analytics system to track profile views and interactions. We do not use third-party advertising cookies.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

10. Instagram and Meta Platform Data

If you choose to connect an Instagram account to display your posts on your profile, TapSavvy accesses a limited set of data through Instagram's API (using theinstagram_business_basic permission):

• Your Instagram username, account type, and profile picture
• Your recent media (images, videos, captions, and links to the posts)

This data is used solely to render the Instagram feed section on your public profile. We store your access token in encrypted form and cache recent posts to display them. We do not use Instagram data for advertising, and we do not sell or share it with third parties.

You can revoke access at any time by disconnecting Instagram in your profile editor, or by removing TapSavvy from Instagram's Settings → Apps and websites. Either action deletes your stored connection and cached posts. To request deletion of your Instagram data directly, remove the app from Instagram or email support@tapsavvy.co.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at support@tapsavvy.co.