Privacy Policy

Tap is provided by Tap - Digital Business Card LLC. Two companies share that name:

• the New York company, at 447 Broadway, New York, NY, United States, serves customers outside Egypt;
• the Egyptian company, in Maadi, Cairo, Egypt, serves customers in Egypt, and builds and runs Tap for both.

"Tap", "we" and "us" mean the company that serves you. For anything about privacy, email privacy@gettap.co.

When you use Tap

• Account and card: name, email, phone, country, job title, company, photo, bio, username, and the links, files and contact details you add to your cards.
• Sign-in: your password, or the Google, Apple, Facebook or LinkedIn account you sign in with, your two-step verification settings and the devices you use.
• LinkedIn profile: if you add your LinkedIn link, we use your public profile to fill in your card, suggest people to meet and identify your industry. We refresh it every 6 months.
• Billing: your plan, payments and invoices. Card numbers stay with our payment provider; we keep only the card type and last four digits.
• Usage: the features you use, card views and taps, activity scores, AI usage, app analytics, session recordings and crash reports.
• Meetings and notes: meetings you record, voice notes, typed notes, and the summaries Tap creates from them.
• Meeting location: the approximate place of meetings you record, if you allow location access.
• Calendar: your events for the next 7 days, if you connect Google Calendar.
• Your choices: your marketing preference and the recording confirmations you give.

When you share your details with a Tap user

You might share your details through someone's Tap profile or Tap Instant, or they might add you from a business card, their phone contacts, a file or their CRM. Your details go to that person or their company, who decide how to use them and may sync them to their own CRM. We hold for them:

• the details you shared or they added: name, email, phone, job title, company, website, address, LinkedIn link, notes and files;
• how and when they met you, and who added you;
• your consent, if their form asked for it: when you gave it, the notice you saw and a shortened IP address;
• work email, phone, job title and company details found through enrichment, if the Tap user asks for them;
• the lead score, buying role, tags and notes they add, and the emails they send you from Tap.

When you're in a recorded meeting

The recording, transcript, speaker names, talk time and the AI summary: topics, action items and observations such as objections, buying signals, competitors mentioned, interest level and sentiment.

When you visit a Tap profile page

A shortened IP address, your device and browser type, whether you arrived from an NFC tap or a link, and which buttons you tapped.

When you visit gettap.co or buy from us

Cookies (see our Cookie Policy), pages visited, forms you send, newsletter sign-ups, orders and reviews.

To open an account, we need your name, email and a password or sign-in method. Everything else is optional, though some features need it.

We use personal data only for these purposes. For people in the EU, UK and Switzerland, the second column is our legal basis under the GDPR.

Meeting notes

Record an in-person meeting in the app, or upload a recording, and Tap turns it into a transcript, a summary, action items and insights such as objections and buying signals. Ask AI answers your questions from your own meetings.

Recording always starts with a Tap user, who confirms that everyone present has agreed. Recording laws differ from place to place, and some require everyone's consent.

Our transcription and AI providers process recordings only to deliver these features, and may not use them to train their models. Audio is deleted 30 days after the meeting. Transcripts and summaries stay until the meeting is deleted or the account is closed. With Tap Teams, meetings belong to the company: the person who recorded a meeting and the company's admins can see it.

Business card scanning

Scan a card and Tap reads its text to fill in a new lead for you to check. The photo isn't kept, and the lead is created only when you save it.

Contact enrichment

When you ask, we look up a lead's work email and phone with our enrichment partners, using their name, company and LinkedIn link. We keep results for up to 3 months and may reuse them when another customer looks up the same person. When a form asks a lead for consent and they don't give it, Tap doesn't look up extra details about them automatically.

Meeting location

If you allow it, the app notes roughly where a meeting took place, so you and your team can see where meetings happen. We match it to an area, such as a district or city, and after 90 days we keep only the area. If no area matches, the approximate point stays with the meeting. We don't track your location at any other time, and recording works without it.

Lead scores, insights and matchmaking

Lead scores, from 0 to 100, come from fixed rules, such as whether a lead has a work email or a senior job title, and help you sort your leads. Team Insights shows company admins their team's activity. Matchmaking suggests people to meet based on what they chose to show on their profile; contact details are shared only after a connection request is accepted. None of these makes decisions with legal or similar effects on anyone.

Apps you connect

Connect a CRM (such as HubSpot, Salesforce, Zoho, Pipedrive, Odoo or Veeva), Zapier, Slack or Google Calendar, and Tap sends it the data you choose. Once the data arrives, that service's terms and your own settings apply. Disconnecting stops future syncs but doesn't delete what was already sent.

• Service providers: the hosting, AI, email, payment and analytics companies that help us run Tap, under contracts that limit them to our instructions.
• The other Tap company, which builds and supports Tap (section 1).
• Apps you connect, and the people you share your card with.
• Sign-in providers, when you choose to sign in with Google, Apple, Facebook or LinkedIn.
• Advertising and measurement partners (Google, Meta, TikTok and AppsFlyer), for our own marketing on our website and in the app, with your consent where the law requires it. See our Cookie Policy.
• Authorities, when the law requires it or to protect people's rights and safety; and a buyer, if Tap is sold or merged, under this policy.

We never sell personal data. Under some US state laws, advertising cookies can count as "sharing"; you can opt out on our Do not sell or share my personal information page.

• Your card: change or remove what it shows at any time.
• Your data: delete leads, notes and meetings whenever you like. Delete your account from Settings in the app; Tap Teams users can download their data from Settings.
• Location: optional. Recording works without it.
• Product news: unsubscribe from any email.
• Cookies: use the Cookie settings link at the bottom of every page. In the EU, UK and Switzerland, we ask before turning on analytics, on our website and in the app.
• Connected apps: disconnect any of them at any time.

With Tap Teams, when a member leaves, the leads and meetings they captured stay with the company and move to one of its admins. When a company closes its account, its data is erased 30 days after each account is deleted. Copies already sent to a connected CRM aren't deleted by Tap.

We protect data with encryption in transit, separation between companies, role-based access, two-step verification, private storage for recordings, audit trails and an incident response plan. Read more on our Trust & Privacy page.

If a breach puts your rights at risk, we'll tell you and the regulators as the law requires.

Tap runs on Amazon Web Services in the United States, and our team in Egypt operates and supports it. Some providers work in other countries.

• From the EU, UK and Switzerland: we use the European Commission's Standard Contractual Clauses, with the UK Addendum, together with a transfer assessment and extra safeguards.
• From Egypt: under the cross-border licence and conditions of Egypt's Personal Data Protection Law, including your consent where the law requires it.
• From Saudi Arabia and the UAE: under the transfer conditions of their data protection laws.

For a copy of the safeguards, email privacy@gettap.co.

Depending on where you live, you can ask us to:

• give you access to your data and a copy of it, in a portable format;
• correct it;
• delete it;
• restrict how we use it;
• stop using it for purposes based on legitimate interests, and for marketing at any time;
• withdraw your consent at any time, without affecting what was done before.

Delete your account from Settings in the app, or download your data from Settings in Tap Teams. For anything else, email privacy@gettap.co. We may ask you to confirm your identity. We reply within one month, or up to two more months for complex requests, and we'll tell you why.

If a Tap customer holds your data, for example because you're their lead or employee, contact them first, since they decide how it's used. If you write to us, we'll pass your request on and help them answer it.

Complaints

You can complain to your data protection authority: in the EU, the authority where you live or work; in the UK, the Information Commissioner's Office (ico.org.uk); in Egypt, the Personal Data Protection Center (pdpc.gov.eg). We'd appreciate the chance to put things right first.

Egypt

Under Law 151 of 2020, you also have the right to be told about any breach of your personal data.

US states

If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia or Texas, you can ask to know, access, correct and delete your personal information, and opt out of its "sale" or "sharing" for targeted advertising and of profiling with legal effects. The categories we collect, their sources and purposes, and who receives them are in sections 2, 3 and 5. We don't sell personal information for money. You can opt out of advertising "sharing" on our Do not sell or share page, and we honour the Global Privacy Control signal. Meeting locations are used only for meeting features. You can use an authorised agent, and we won't treat you differently for using your rights.

We're responsible for the data we need to run Tap itself: accounts, billing, our website and marketing, security and matchmaking.

If your company uses Tap Teams, your company is in charge of the data its team puts in: members' activity, the leads they capture, their notes and their meetings. We process that data for your company, only on its instructions, under our Data Processing Agreement. Your company's admins can see your activity, leads and meetings, including in Team Insights, and should tell you how they use them. When you leave, the leads and meetings you captured stay with the company.

If you use the Tap app for your own business, you decide how to use the leads you capture, and we process them for you.

If a company or a Tap user captured your details, they're your first point of contact. We're happy to help too (section 10).

Children. Tap is for people aged 16 and over, and built for professional use. We don't knowingly collect data from children. If you think a child has given us personal data, tell us and we'll delete it.

Changes. When we update this policy, we change the date at the top. We tell users by email or in the app before significant changes take effect.

Contact. Email privacy@gettap.co, or write to Tap - Digital Business Card LLC, 447 Broadway, New York, NY, United States (customers outside Egypt), or Tap - Digital Business Card LLC, Maadi, Cairo, Egypt (customers in Egypt).