Privacy Policy

This Privacy Policy explains how TapFlow, a sole proprietorship operating in New York, collects, uses, and protects information when you request a quote, become a customer, or interact with a TapFlow review hub.

1. Information We Collect

From businesses requesting a quote or subscribing:

• Name, email, phone number, business address (street, city, state, ZIP).
• Additional information you choose to share in the quote form.
• Payment information collected by our payment processor (we do not store full card numbers).
• Account credentials (email and password) if you create a customer portal account.

From visitors who tap or scan a TapFlow card:

• Standard server logs (IP address, browser type, time of request) for security and reliability.
• Aggregate, non-identifying tap counts associated with the card's TapFlow link.

We do not knowingly collect personal information from anyone who simply taps a card to leave a review — those visitors are sent directly to the destination you configure (such as Google).

2. How We Use Information

• To design, print, ship, and program your cards.
• To host your TapFlow link and review hub.
• To process payments and manage your subscription.
• To send service-related emails (quote confirmations, payment receipts, account notices).
• To respond to support requests.
• To improve the service and detect abuse.

We do not sell your personal information, and we do not use it for advertising.

3. Third-Party Services

TapFlow uses the following third parties to operate the service:

• Stripe — payment processing.
• Lovable Cloud — hosting, database, and authentication.
• Email provider (via our hosting platform) — to deliver service emails.
• Google — destination for review traffic when configured by you.

Each provider has its own privacy practices. We share only the information they need to perform their function.

4. Data Retention

• Active customer records are retained while your subscription is active.
• After cancellation, we retain your business contact and billing records for up to 7 years to comply with tax and accounting obligations.
• Quote requests that don't convert are retained for up to 24 months for follow-up, then deleted.

5. Your Rights

You can:

• Request a copy of the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal data (subject to retention obligations above).
• Unsubscribe from non-essential emails using the link in the email footer.

To exercise any of these rights, email tapflowcards@gmail.com. We'll respond within 30 days.

6. Security

We use industry-standard safeguards including encryption in transit, hashed passwords, and access controls. No system is perfectly secure — if we become aware of a breach affecting your information, we'll notify you as required by law.

7. Children

TapFlow is intended for businesses. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email us and we'll delete it.

8. Changes

We may update this Privacy Policy from time to time. The updated version takes effect when posted on this page.

9. Contact

Questions or requests? Email tapflowcards@gmail.com.

See also: Terms of Service · Refund Policy