Sub-processors
Last updated: 14 October 2026
These are the third parties that process personal data on Tap's behalf when we provide the Tap app, Tap Teams and public profile pages (link.gettap.co). Each one is bound by a written agreement with data protection terms at least as strict as our Data Processing Agreement.
Services you connect yourself, such as your CRM, Slack, Zapier or Google Calendar, are not on this list. You choose them, you hold the account, and Tap sends data to them on your instruction.
Tap companies
| Company |
Role |
Location |
| Tap - Digital Business Card LLC (New York) |
Contracts with customers outside Egypt |
United States |
| Tap - Digital Business Card LLC (Egypt) |
Builds, operates and supports the service. Sub-processor for customers of the New York company |
Egypt |
Infrastructure
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| Amazon Web Services, Inc. |
Hosting, database, file storage, logs |
All service data |
United States (us-east-1) |
| Cloudflare, Inc. |
Network security and delivery in front of our API |
Traffic in transit, IP addresses |
Global network |
AI and transcription
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| Soniox, Inc. |
Turns meeting recordings and voice notes into text |
Audio, transcripts |
United States |
| Google LLC (Gemini API) |
Transcription fallback, meeting analysis, Ask AI search index and answers, follow-up email drafts |
Audio, transcripts, meeting details |
United States |
| OpenAI |
Meeting analysis, Ask AI answers, notes analysis, competitor detection, voice-note formatting, reading business cards, people search |
Transcripts, notes, card text, search queries |
United States |
| Deepgram, Inc. |
Transcription fallback |
Audio |
United States |
| Google LLC (Cloud Vision) |
Reads text from a photographed business card. The photo is not stored |
Business-card image |
United States |
None of these providers may use your data to train their models.
Contact enrichment
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| BetterContact |
Finds a lead's work email and phone when a user asks for it |
Lead name, company, LinkedIn URL |
To be confirmed |
| FullEnrich |
Same, as a second provider |
Lead name, company, LinkedIn URL |
France |
| Apify Technologies s.r.o. |
Reads a Tap user's own public LinkedIn profile to fill in their card |
The user's LinkedIn URL and public profile |
Czech Republic |
Email, notifications and messaging
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| Resend |
Account, meeting and service emails |
Email address, name, email content |
United States |
| Google LLC (Google Workspace) |
Sends emails, including emails users send to their leads from Tap |
Email address, name, email content |
United States |
| DeBounce |
Checks that an email address is valid before we send to it |
Email address |
To be confirmed |
| Google LLC (Firebase Cloud Messaging) |
Push notifications |
Device token, notification text |
United States |
| Apple Inc. (APNs, App Store Connect) |
iOS push notifications; registering a Tap Instant (App Clip) card |
Device token, notification text; card name, title and image |
United States |
| OneSignal, Inc. |
Push notifications |
User id, email address, device token, notification text |
United States |
Payments
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| Stripe |
Card payments and subscriptions outside Egypt |
Name, email, payment details |
United States / Ireland |
| Paymob |
Card payments and subscriptions in Egypt |
Name, email, phone, billing address |
Egypt |
| RevenueCat, Inc. |
In-app subscriptions bought through the App Store or Google Play |
User id, email, phone, purchase receipts |
United States |
Digital cards
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| Google LLC (Google Wallet) |
Adds your card to Google Wallet when you ask |
Name, title, company, mobile, email, photo |
United States |
| TinyURL, LLC |
Shortens the "Add to Google Wallet" link |
The wallet link |
United States |
| goQR.me |
Generates QR code images for cards and products |
Profile link (contains your username) |
Germany |
Location from IP address
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| ip-api.com (with ipinfo.io, ip2location.io and geoPlugin as fallbacks) |
Picks your country and currency |
IP address |
To be confirmed |
| ipapi.co |
Pre-selects the country code in phone fields |
IP address |
To be confirmed |
| ipify |
Tells public profile pages the visitor's IP address for view counts |
IP address |
To be confirmed |
Product analytics and reliability
| Sub-processor |
What it does for Tap |
Data involved |
Location |
| Microsoft Corporation (Clarity) |
Session replays and heatmaps in Tap Teams and the app, used to fix usability problems. Text fields are masked |
Usage, screens, device |
United States |
| PostHog, Inc. |
Product analytics in the app |
User id, email, usage events |
United States |
| Google LLC (Firebase Analytics, Crashlytics, Remote Config) |
App analytics, crash reports, app settings |
User id, plan, device, usage events |
United States |
| Functional Software, Inc. (Sentry) |
App error reports |
Error and device details |
United States |
| HeronSignal |
Performance monitoring on public profile pages |
IP address, browser, page address |
To be confirmed |
In the EU, UK and Switzerland, the app asks before it turns on analytics.
Changes to this list
We give customers at least 30 days' notice before adding or replacing a sub-processor, so they can object. To get notified, email privacy@gettap.co with the subject "Sub-processor updates".
Questions: privacy@gettap.co. See also our Privacy Policy and Trust & Privacy page.
