Privacy Policy

1. Information We Collect

Information You Provide Directly

• Account Information: When you create a taptzy account, we collect your name, email address, and password (securely hashed).
• Profile Information: Your business information including job title, company name, phone number, and profile photo (optional).
• Calendar Settings: Your working hours, meeting durations, buffer times, timezone preferences, and availability rules you configure.
• Calendar Connection: When you connect your calendar (Google Calendar, Outlook, etc.), we store access tokens to check your availability. We only read your calendar to determine when you're free or busy - we never read the contents of your calendar events.
• Payment Information: If you purchase cards or a subscription, payment details are processed by our payment processor (Stripe) and we only store the last 4 digits of your card and billing information necessary for order fulfillment.

Information Collected When Your Card is Tapped

When someone taps your NFC card or accesses your booking link, we collect:

• Tap Event Data: Timestamp, device type (e.g., "iPhone 15"), and approximate location (city level, derived from IP address).
• Booking Guest Information: When someone books a meeting with you, we collect their name, email address, and any notes they provide.
• Usage Analytics: Basic metrics like how many times your card was tapped, conversion rates (taps to bookings), and time patterns.

Information Collected Automatically

• Device Information: Device type, operating system version, app version, and unique device identifiers.
• Log Data: IP address, browser type, access times, pages viewed, and the page you visited before navigating to our service.
• Cookies: We use essential cookies to keep you logged in and remember your preferences. We don't use advertising or tracking cookies.

2. How We Use Your Information

To Provide Our Service

• Enable NFC cards to direct people to your booking page
• Check your calendar availability in real-time
• Create calendar events when meetings are booked
• Send email notifications and reminders to you and your guests
• Process and fulfill card orders
• Manage your subscription and billing

To Improve Your Experience

• Provide analytics about card taps and booking conversions
• Send you notifications when your card is tapped (if enabled)
• Personalize your app experience
• Troubleshoot technical issues

To Communicate With You

• Send you service updates and feature announcements
• Respond to your support requests
• Send you marketing emails (you can opt out anytime)

Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraud and abuse
• Ensure security of our systems

3. How We Share Your Information

We Share Information When:

• Someone Books a Meeting: Your name, email, and meeting details are shared with the person who booked with you (and vice versa).
• Service Providers: We share data with trusted service providers who help us operate (Firebase for hosting, Stripe for payments, email service providers).
• Legal Requirements: We may disclose information if required by law, subpoena, or court order.
• Business Transfers: If taptzy is acquired or merged, your information may be transferred to the new owner.
• With Your Consent: We may share information for other purposes with your explicit consent.

We Never:

• ✕ Sell your personal information to third parties
• ✕ Share your data with advertisers
• ✕ Access the contents of your calendar events
• ✕ Use your data to train AI models

4. Calendar Integration

When you connect your calendar to taptzy, we take privacy seriously:

• Limited Access: We only request "read-only" access to check when you're free or busy. We cannot view event titles, descriptions, attendees, or any other details.
• Real-Time Checking: We check your calendar in real-time when someone is booking with you. We don't store your calendar events.
• Creating Events: When a meeting is booked, we create a single calendar event with the guest's information. That's the only time we write to your calendar.
• Revocable: You can disconnect your calendar at any time from the app settings. This will immediately revoke our access.

5. Data Retention

• Account Data: We keep your account information as long as your account is active.
• Meeting History: Past meetings and booking data are retained for 2 years for analytics and record-keeping purposes.
• Tap Analytics: Tap event data is retained for 1 year for analytics purposes.
• Deleted Accounts: When you delete your account, we delete your personal information within 30 days. Some data may be retained longer for legal or security purposes.

6. Security

We take security seriously and implement industry-standard measures:

• All data transmitted is encrypted using TLS/SSL
• Passwords are hashed using bcrypt
• Calendar access tokens are encrypted at rest
• Our infrastructure is hosted on Firebase (Google Cloud Platform) with enterprise-grade security
• We conduct regular security audits
• Employee access to data is limited and logged

However, no system is 100% secure. If you discover a security vulnerability, please email us at security@taptzy.com immediately.

7. Your Privacy Rights

You Have the Right To:

• Access Your Data: Request a copy of all personal information we have about you.
• Correct Your Data: Update or correct any inaccurate information in your account settings.
• Delete Your Data: Request deletion of your account and associated data.
• Export Your Data: Download your data in a portable format (CSV/JSON).
• Opt-Out of Marketing: Unsubscribe from marketing emails via the link in any email.
• Disconnect Calendar: Revoke calendar access at any time from app settings.

How to Exercise Your Rights:

You can manage most of these directly in your account settings. For other requests, email us at privacy@taptzy.com. We'll respond within 30 days.

8. Children's Privacy

taptzy is not intended for users under 16 years of age. We don't knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately at privacy@taptzy.com.

9. International Users

taptzy is operated from the United States. If you're accessing our service from outside the US, your information may be transferred to, stored, and processed in the United States where our servers are located. By using taptzy, you consent to this transfer.

10. App Clip Privacy

Our App Clip (the lightweight version that appears when someone taps your card) collects minimal information:

• It only accesses data necessary for booking: your availability and meeting preferences
• The person booking provides their name and email to complete the booking
• No app download or account creation is required for them
• Their information is only used to create the meeting and is not used for marketing

11. Third-Party Services

taptzy integrates with third-party services. Their privacy practices are governed by their own privacy policies:

• Google Calendar/Gmail: Google Privacy Policy
• Microsoft Outlook: Microsoft Privacy Statement
• Stripe (Payments): Stripe Privacy Policy
• Firebase (Hosting): Firebase Privacy Policy

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll:

• Update the "Last Updated" date at the top
• Notify you via email if the changes are material
• Post the new policy on our website

Continued use of taptzy after changes means you accept the updated policy.

13. Contact Us

Questions about this Privacy Policy or how we handle your data? We're here to help:

• Email: privacy@taptzy.com
• General Support: support@taptzy.com
• Security Issues: security@taptzy.com