Privacy Policy
Last Updated: January 2025
Introduction
At TapToChat.io ("we", "our", "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
1. Information You Provide
- Account information (name, email, password)
- Organization details (company name, website URL)
- Payment information (processed by Stripe, we don't store card details)
- Chat conversations and messages
- Profile information (avatar, bio, phone number)
2. Automatically Collected Information
- Device information (browser type, OS, device ID)
- Usage data (pages visited, features used, time spent)
- IP address and geolocation
- Cookies and similar technologies
- Log data (timestamps, errors, performance metrics)
3. Information from Third Parties
- CRM data (if you integrate Salesforce, HubSpot, etc.)
- Social media profiles (if you connect Facebook, Twitter, etc.)
- Payment information from Stripe
How We Use Your Information
We use your information to:
- Provide and maintain our service
- Process your transactions
- Send you service-related communications
- Respond to your requests and support needs
- Improve our service and develop new features
- Detect and prevent fraud and abuse
- Comply with legal obligations
- Send marketing communications (with your consent)
Information Sharing
We share your information with:
Service Providers
- Supabase (hosting and database)
- Vercel (web hosting)
- Cloudflare (CDN and security)
- Stripe (payment processing)
- SendGrid (email delivery)
- Twilio (SMS delivery)
- Mixpanel & Google Analytics (analytics)
Legal Requirements
We may disclose information if required by law, court order, or government request.
Business Transfers
If we're acquired or merge with another company, your information may be transferred.
Data Retention
We retain your information for as long as your account is active or as needed to provide services. Closed chat transcripts are retained for 90 days by default, but you can configure this in your settings.
Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Portability: Export your data in a standard format
- Opt-out: Unsubscribe from marketing emails
- Objection: Object to certain data processing activities
To exercise these rights, contact us at privacy@taptochat.io.
GDPR Compliance (EU Users)
If you're in the EU, we comply with GDPR:
- Legal basis for processing: Contract, consent, legitimate interests
- Data Protection Officer: dpo@taptochat.io
- Data is stored in secure, encrypted databases
CCPA Compliance (California Users)
If you're in California, you have the right to:
- Know what personal information we collect
- Request deletion of your personal information
- Opt-out of the sale of personal information (we don't sell your data)
Children's Privacy
Our service is not intended for children under 13. We don't knowingly collect data from children.
Security
We use industry-standard security measures:
- TLS 1.3 encryption in transit
- AES-256 encryption at rest
- Regular security audits
- Access controls and authentication
However, no system is 100% secure. Use strong passwords and enable 2FA.
Cookies
We use cookies for:
- Essential functionality (authentication, preferences)
- Analytics (understanding how you use our service)
- Marketing (tracking conversions, retargeting)
You can control cookies in your browser settings.
Changes to This Policy
We may update this policy from time to time. We'll notify you of material changes via email or in-app notification.
Contact Us
Questions about this policy?
- Email: privacy@taptochat.io