Tap-Digital Business Card Privacy Policy

Last Update: April 23, 2026

1. Introduction

This Privacy Policy describes how Tap - Digital Business Card LLC ("Tap," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our services, including our mobile application (the "App"), our Tap Teams web platform, our NFC-enabled products, and our website at gettap.co (collectively, the "Services").

This Privacy Policy applies to all users of our Services, including individual users, Tap Teams administrators and members, website visitors, and individuals whose contact information is captured or processed through our Services.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

1.1 Key Definitions

"Personal Information" means any information that identifies, relates to, describes, or can reasonably be linked to you as an individual.

"Captured Data" means contact information collected through our lead capture features, including data obtained via NFC taps, QR code scans, lead capture forms, AI Card Scanner, or manual entry by our users.

"Usage Data" means information automatically collected about your interaction with our Services.

"Enrichment Data" means additional information appended to a Captured Data record through our optional, credit-based enrichment feature, supplied by third-party enrichment providers. Enrichment is only performed when a user manually requests it for a specific contact. See Section 11 for a current list of our sub-processors.

"Meeting Recording Data" means audio recordings, transcripts, extracted topics, AI-generated summaries, AI-generated meeting titles, and AI-generated action items created through the in-person meeting recording feature of the App.

"Match Profile Data" means the data fields on a user's Tap profile (role, industry, interests, and similar fields) that are used by the in-app matchmaking feature to suggest potential connections.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when you use our Services, including:

• Account Information: name, email address, phone number, password, company name, and job title when you create an account.
• Profile Information: professional details, profile photo, social media links, bio, and other information you add to your digital business card.
• Purchase Information: billing address, shipping address, payment method details (processed by our third-party payment processors), and order history when you buy NFC products or subscription plans.
• Communication Data: information you include when you contact our support team, respond to surveys, or communicate with us.
• Team Information: organization name, team member details, and administrative configurations when you set up a Tap Teams account.
• Match Profile Data: the role, industry, interests and similar profile fields you enter, which are used by the in-app matchmaking feature to suggest potential connections with other Tap users.
• Meeting Audio: if you use the in-person meeting recording feature, the audio captured by your device's microphone during a meeting you initiate, as further described in Section 6.

2.2 Information We Collect Automatically

When you use our Services, we automatically collect certain information, including:

• Device Information: device type, operating system, browser type and version, and unique device identifiers.
• Network Information: IP address, internet service provider, and general geographic location derived from your IP address.
• Usage Information: pages viewed, features used, time spent on pages, click patterns, and navigation paths.
• NFC Interaction Data: which of your digital profiles are viewed and which lead capture forms are submitted via NFC taps or QR code scans.
• Performance Data: error logs, crash reports, and diagnostic information.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: payment confirmation and transaction details from our payment processors.
• CRM Systems: if you connect your CRM, we may access contact data you authorize us to sync.

Enrichment Providers: when you manually trigger enrichment for a captured contact using the credits available on your plan, we retrieve supplemental contact and company information from third-party enrichment providers. This may include updated or newly discovered job titles, seniority, verified business email and phone numbers, social media profiles, and company-level data such as size, industry, headquarters location, and website. The identities of our current enrichment providers are listed in Section 11.

• Analytics Providers: aggregated insights about website traffic and user behavior.
• Platform Providers: information from Shopify and other technology partners that help us operate the Services.

2.4 Information About Captured Contacts

When our users capture leads through the Services, we process contact information on their behalf. This may include names, email addresses, phone numbers, company names, job titles, and any additional information submitted through lead capture forms or appended via enrichment. If your contact information has been captured by a Tap user and you have questions about how your data is being used, we encourage you to contact the person or organization that captured your information. You may also contact us directly at info@gettap.co to request deletion of your data.

3. How We Use Your Information

3.1 To Provide and Operate the Services

• Create and manage your account.
• Process orders, payments, and deliver NFC products.
• Enable digital business card creation and sharing.
• Facilitate lead capture, CRM synchronization, and analytics.
• Provide Tap Teams functionality including team management.
• Provide customer support and respond to your inquiries.
• Process manual enrichment requests by sending the relevant data points to our enrichment providers and appending the returned information to the selected contact record.
• Operate the in-app matchmaking feature by evaluating profile-level compatibility signals and surfacing potential connections.
• Process in-person meeting recordings, including transmitting audio to our transcription provider, processing the resulting transcript through our AI provider for summary, title, topic, and action item generation, and storing the resulting outputs for your later access.

3.2 To Improve and Develop the Services

• Analyze usage patterns to improve features and user experience.
• Conduct research and development for new features.
• Generate aggregated, anonymized analytics and industry benchmarks.

3.3 To Communicate With You

• Send transactional emails (order confirmations, account notifications, meeting recording completion notices).
• Send marketing communications with your consent or where permitted by law.
• Notify you of changes to our Services, Terms, or this Privacy Policy.

3.4 To Ensure Security and Compliance

• Detect, prevent, and address fraud, unauthorized access, and other security threats.
• Enforce our Terms and Conditions and other policies.
• Comply with legal obligations, court orders, and law enforcement requests.

4. Lead Capture and Contact Enrichment

4.1 How Lead Capture Works

Tap enables users to capture contact information from individuals they meet in professional settings, through NFC tap, QR code scan, AI Card Scanner, and manual entry.

4.2 Roles and Responsibilities

• The Tap user who captures the lead is the Data Controller of that Captured Data.
• Tap acts as a Data Processor, processing Captured Data on behalf of the user solely to provide the Services.
• Captured Contacts (the individuals whose data is collected) are Data Subjects with rights under applicable law.

4.3 Contact Enrichment

Enrichment is an optional, manual feature available on specific plans and/or through the purchase of enrichment credits. When you manually trigger enrichment for a specific captured contact, Tap transmits the relevant identifiers (such as email address, name, or company domain) to a third-party enrichment provider, which returns supplemental information drawn from publicly available and business data sources. The returned data is appended to the captured contact record within Tap and, where applicable, is also synced to your connected CRM along with the rest of the contact. The identities of our current enrichment providers are listed in Section 11 (Sub-processors).

Enrichment is never performed automatically without your action. Each enrichment request consumes one or more credits from your balance. Tap does not guarantee the accuracy, completeness, or currency of enrichment data, and users are responsible for complying with applicable laws when relying on enriched information for outreach or other purposes.

4.4 Rights of Captured Contacts

If your contact information has been captured through our Services and you wish to exercise your privacy rights, you may contact the Tap user or organization that captured your information directly, or contact Tap at info@gettap.co.

5. Tap Teams Data Processing

5.1 Team Data

When an organization subscribes to Tap Teams, the organization (via its Administrator) is the Data Controller of team-generated data, including leads captured by team members, team analytics, and organizational configurations. Administrators have visibility into team member activity, including profile views, leads captured, and conversion metrics.

5.2 Member Data Upon Departure

When a team member is removed from a Tap Teams account, leads and analytics generated during their membership remain with the organization. The member's personal profile information remains with the individual.

5.3 Data Processing Agreement

Tap Teams customers who require a formal Data Processing Agreement (DPA) may request one by contacting info@gettap.co.

6. In-Person Meeting Recording (Mobile App)

The Tap mobile application includes an optional feature that lets a Tap user record the audio of an in-person meeting they are attending. This section explains how that feature works and how related personal data is processed.

6.1 How the Feature Works

• The Tap user starts a recording from within the mobile app. Before the recording begins, the user is required to affirm, via an in-app checkbox, that the other participant(s) have been informed and have given permission to record the meeting. This is a self-attestation by the Tap user — see Section 6.6 below.
• During the meeting, audio is captured by the device's microphone and uploaded to Tap's servers.
• The audio file is transmitted to a third-party transcription sub-processor, which generates a written transcript and extracts topics discussed during the meeting.
• The resulting transcript is processed by a third-party large language model (LLM) sub-processor to produce a written summary, an auto-generated meeting title, and a list of action items. Tap may change its transcription or LLM sub-processors from time to time, including by transitioning to an in-house or open-source alternative; the sub-processor list in Section 11 will be updated accordingly.
• The transcript, summary, title, topics, action items, and metadata (such as meeting date and duration) are stored in the Tap user's account and, where applicable, in the associated Tap Teams organization.

6.2 AI Sub-Processors Do Not Train on Your Meeting Content

The third-party transcription and LLM sub-processors that we engage to process meeting content are contractually prohibited from using your meeting audio, transcripts, or derived outputs to train their general-purpose artificial intelligence or machine learning models. Meeting content is processed solely to return the requested transcript, summary, title, topics, and action items to Tap.

6.3 What We Retain and for How Long

• Audio: automatically deleted from Tap's servers approximately thirty (30) days after the recording is created. Audio cannot be downloaded or shared from within the mobile app.
• Transcript, topics, AI-generated summary, AI-generated title, action items, and metadata: retained as described in Section 6.4 (ownership rules) and Section 6.5 (deletion).

6.4 Ownership of Meeting Recording Outputs

Tap Teams context: where the Tap user who created a recording is a member of a Tap Teams organization, the transcript, topics, summary, title, action items, and metadata are considered the property of the organization and are retained in the organization's Tap Teams account. If that team member later leaves the organization, loses access, or has their Tap Teams seat terminated, these outputs remain with the organization and continue to be accessible to organization administrators, regardless of the status of the individual's personal Tap account. Audio files continue to be subject to the approximately 30-day auto-deletion described in Section 6.3.

Individual user context: where the Tap user who created a recording is using Tap on an individual (non-Teams) basis, the transcript, topics, summary, title, action items, and metadata are associated with that individual user's account. If the individual deletes their Tap account, all associated meeting recording outputs are deleted along with the account, subject to any legal hold or ongoing dispute.

6.5 Deletion of Recording Outputs on Request

You may request deletion of a specific recording's outputs (transcript, topics, summary, title, action items and metadata) before the associated retention period ends by contacting info@gettap.co. We will verify your identity and, for Tap Teams recordings, we will coordinate the request with the applicable organization's administrator where required by the organization's internal policies. Audio files continue to be deleted automatically approximately 30 days after creation in all cases.

6.6 Consent of Other Meeting Participants — Your Responsibility

Recording of in-person conversations is subject to different laws in different jurisdictions. Some jurisdictions require the consent of all participants before a conversation may be recorded; others require only the consent of one participant. Tap does not independently verify that the other participant(s) have consented.

By using the in-person meeting recording feature and by checking the in-app confirmation box, the Tap user represents and warrants to Tap that (i) they have informed each other participant that the meeting is being recorded, (ii) they have obtained each other participant's permission to record the meeting, and (iii) such permission was obtained in a manner that complies with all applicable laws in the jurisdiction where the meeting takes place. The Tap user is solely responsible for obtaining such consent and for any consequences of recording a meeting without valid consent.

If you are an attendee of a meeting that has been recorded by a Tap user and you believe your consent was not obtained, please contact the Tap user directly or contact Tap at info@gettap.co.

6.7 Who Can Access a Recording's Outputs

• The Tap user who initiated the recording can view the transcript, topics, summary, title, and action items within the mobile app.
• If the recording was created in a Tap Teams context, the administrators of that organization can also view these outputs (see Section 5 and Section 6.4).
• When a captured contact is synced to a connected CRM, the AI-generated summary, topics, and action items may be included in the lead record transmitted to the CRM. The audio and the full transcript are NOT synced to CRMs.
• Tap personnel may access recording outputs only as needed to operate, troubleshoot, or secure the Services, or to comply with legal obligations.

7. In-App Matchmaking and Connections (Mobile App)

The Tap mobile application includes a matchmaking feature that helps users discover other Tap users with whom they may want to connect professionally. This section explains how that feature processes personal data.

7.1 How Matchmaking Works

• Tap uses non-sensitive profile fields that you have chosen to include on your Tap profile — including your role, industry, and stated interests — to score compatibility with other users and to surface potential matches in the mobile app. In the future, Tap may also use additional signals, such as shared attendance at the same event, to generate matches; any material expansion of the signals used will be reflected in an updated version of this Privacy Policy.
• At launch, all Tap users are discoverable as potential matches for other users. In the future, Tap may introduce a setting that allows users to turn their discoverability on or off; any such setting will be documented in this Privacy Policy and in the app.
• Being surfaced as a potential match does not expose your personal contact details. Other users are only shown the limited profile information that you have chosen to make visible on your Tap profile.

7.2 Connection Requests and What Is Shared

• To connect with a matched user, the requesting user sends a connection request inside the app. No personal contact details or digital card data are shared with the recipient until the recipient explicitly approves the request.
• Once a connection request is approved, the requesting user shares a digital business card of their choice with the connected user. If the requesting user has only one digital card, that card is the one shared.
• Connected users may subsequently share their own digital card with each other through the standard Tap card-sharing flow.

7.3 Your Choices

You control what information appears on your Tap profile and which digital card (if you have more than one) you share when you accept or initiate a connection. You may edit or remove the information on your profile at any time, subject to the storage of prior connection records you have already approved.

8. CRM Integrations and Third-Party Services

The Platform allows you to connect your account to third-party CRM systems (including HubSpot, Salesforce, Pipedrive, Zoho, and via Zapier). When you enable a CRM integration, you authorize Tap to transmit your Captured Data, Enrichment Data (where applicable), and the AI-generated summary, topics, and action items from associated meeting recordings (but not the audio or the full transcript) to the connected third-party service in accordance with your configuration. Use of third-party CRMs is governed by the privacy policies of those third parties.

9. AI and Automated Processing

9.1 AI Card Scanner

The AI Card Scanner feature extracts contact information from photographs of physical business cards. Images submitted to the AI Card Scanner are processed solely for that purpose. We do not use your AI Card Scanner images to train general-purpose AI models.

9.2 Meeting Recording AI

As described in Section 6, audio from in-person meeting recordings is processed by a third-party transcription sub-processor for transcription and topic extraction, and the resulting transcript is processed by a third-party LLM sub-processor to produce a summary, a meeting title, and a list of action items. As set out in Section 6.2, Tap's agreements with these sub-processors prohibit the use of your meeting content to train their general-purpose AI or machine-learning models.

9.3 Matchmaking Scoring

The matchmaking feature described in Section 7 computes a compatibility score based on profile fields and presents ranked suggestions. It does not produce legal or similarly significant effects on data subjects; it only determines the order in which other users are suggested to you. No contact is initiated without the recipient's explicit approval of a connection request.

10. Cookies and Tracking Technologies

We use cookies and similar technologies on our website for essential, analytics, marketing, and functional purposes. You can control cookies through your browser settings. We recognize the Global Privacy Control (GPC) signal as a valid opt-out request for the sale or sharing of personal information where applicable.

11. How We Share Your Information — Sub-Processors and Partners

11.1 Service Providers and Sub-Processors

We share information with third-party vendors who perform services on our behalf. These providers are contractually obligated to use your information only to provide services to us and to protect it consistent with this Privacy Policy.

The following is the single authoritative list of our current sub-processors who process personal data on our behalf. This list may be updated from time to time; a current version is also published at gettap.co/pages/subprocessors.

Sub-Processor

Purpose

Data Categories Processed

Stripe

Payment processing (international)

Payment card data, billing information

Paymob

Payment processing (Egypt)

Payment card data, billing information

RevenueCat

Mobile subscription management

User ID, subscription status

Apple

Wallet passes, App Clips, push notifications

Profile data, device tokens

Google Workspace

Transactional email delivery

Email addresses, email content

AWS

Cloud hosting and storage

User uploads, images, backups

Pusher

Real-time messaging infrastructure

Event data, notifications

Shopify

E-commerce storefront for NFC products

Orders, customer contact information

FullEnrich

Contact enrichment (only on user-initiated request)

Contact identifiers (email, name, company)

Apollo

Contact enrichment (only on user-initiated request)

Contact identifiers (email, name, company)

Deepgram

Speech-to-text transcription and topic extraction for in-person meeting recordings

Meeting audio, resulting transcript, topics

Third-party LLM provider

Summary, title, and action-item generation from meeting transcripts

Meeting transcript text

Our agreements with FullEnrich, Apollo, Deepgram, and our LLM provider prohibit the use of our users' data (including meeting audio, transcripts, and derived outputs, and enrichment query inputs) to train their general-purpose AI or machine-learning models.

11.2 CRM and Integration Partners

When you enable CRM integrations, your data is transmitted to the third-party platforms you select (HubSpot, Salesforce, Pipedrive, Zoho, and via Zapier). These are user-initiated integrations and the data transmitted is governed by the third party's privacy policy.

11.3 Marketing and Advertising Partners

We may share certain website-level information with advertising partners to show relevant advertisements. Under certain privacy laws, this may constitute a "sale" or "sharing" of personal information. See Section 14 for your opt-out rights.

11.4 Business Transfers and Legal Requirements

We may disclose your information in connection with a merger, acquisition or reorganization, or to comply with legal obligations.

12. International Data Transfers

Tap is based in the United States. For transfers of personal data from the EEA or United Kingdom, we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or applicable adequacy decisions.

13. Data Retention

Retention periods per data category:

Data Category

Retention Period

Reason

Account Information

Duration of account + 30 days

Service provision; 30-day export window

Purchase/Order Data

7 years after transaction

Tax and legal compliance

Captured Data (Leads)

Duration of account + 30 days

Processed on behalf of user

AI Card Scanner Images

30 days

Quality assurance

 Enrichment Data

Retained as part of the enriched contact record

Forms part of the lead record once appended

Meeting Recording Audio

~30 days, then auto-deleted

Audio is deleted after transcription and a short retention window

Meeting Transcripts, Topics, Summaries, Titles, Action Items (Teams)

Retained with the organization's Teams account

Organization property under Section 6.4; survives individual rep departures

Meeting Transcripts, Topics, Summaries, Titles, Action Items (individual)

Duration of individual account; deleted on account deletion

Follows the individual user's account lifecycle

Match Profile Data

Retained as part of the user's profile

Drives the matchmaking feature

Usage/Analytics Data

24 months

Service improvement

Marketing Preferences

Until consent withdrawn

Opt-out compliance

Support Communications

3 years

Quality and dispute resolution

Security/Fraud Logs

12 months

Security monitoring

14. Your Privacy Rights

Depending on your location, you may have rights to access, delete, correct, or port your data; to opt out of sale or sharing; to restrict processing; and to withdraw consent. To exercise a right, contact info@gettap.co with the subject line "Privacy Rights Request."

Rights in relation to meeting recordings: You may request deletion of the outputs of a specific meeting recording you created (transcript, topics, summary, title, action items and metadata) by contacting info@gettap.co. For recordings created in a Tap Teams context, the organization that owns the recording outputs (see Section 6.4) may need to be involved in the deletion decision in accordance with its internal policies. Audio files continue to be deleted automatically approximately 30 days after creation. If you are a non-user participant in a meeting recorded by a Tap user, see Section 6.6 for how to exercise your rights.

15. California Privacy Rights

California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale/sharing of personal information. To opt out, visit gettap.co/pages/do-not-sell, enable the Global Privacy Control signal, or email info@gettap.co.

16. Security Measures

We implement commercially reasonable technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), access controls, multi-factor authentication for administrative access, regular security assessments, and vendor management. No method of electronic transmission is 100% secure.

17. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16.

18. Data Breach Notification

Where required by law, Tap will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach, and will notify affected individuals and Tap Teams customers without undue delay.

19. Changes to This Privacy Policy

We will notify you of material changes by updating the "Last Updated" date, posting a notice on our site, and, for material changes to how we process personal information, sending an email notification.

20. Contact Information

Tap - Digital Business Card LLC

Attn: Privacy Team

447 Broadway, New York, NY, United States

Email: info@gettap.co