Privacy Policy

1. Introduction

Tapily, LLC (“Tapily,” “we,” “us,” or “our”) is committed to protecting the privacy and security of individuals and businesses that interact with our platform.

Tapily provides a digital service-request and business operations platform that connects physical service locations with digital communication, workforce management, and service monitoring tools.

Our platform enables customers to request assistance by tapping a near-field communication (“NFC”) card or scanning a QR code at a participating business. Customers access a web-based service interface without needing to download the Tapily mobile application or create an account.

Participating businesses use Tapily’s mobile and administrative applications to receive requests, communicate with customers, manage staff, configure service locations, monitor service activity, and analyze performance.

This Privacy Policy describes how we collect, use, retain, share, protect, and manage information across our services.

This Policy applies to:

• Customers and guests using Tapily-enabled NFC cards or QR codes.
• Employees, managers, contractors, and business owners using Tapily applications.
• Businesses and organizations subscribing to Tapily.
• Visitors to Tapily.com and related websites.
• Individuals communicating with Tapily for customer support, billing, or other business purposes.

2. Our Role and Participating Businesses

Tapily provides technology services to participating businesses.

For customer service requests, staff communications, employee profiles, and operational records, the participating business generally determines the business purposes for which information is processed.

Where applicable, Tapily acts as a service provider or data processor on behalf of that business.

Tapily may act independently in determining how certain information is processed for platform administration, security, billing, legal compliance, technical operations, and customer support.

Participating businesses are responsible for complying with applicable privacy, consumer protection, and employment laws when using Tapily.

3. Information We Collect

3.1 Customer and Guest Information

When a customer taps an NFC card or scans a QR code, Tapily may collect or process:

• The participating business’s name or identifier.
• The associated table, room, section, department, or service location.
• A unique service session identifier.
• Customer-selected service requests.
• Messages and additional information voluntarily submitted.
• Request timestamps and status changes.
• Assigned staff information.
• Staff responses and service completion information.
• Customer ratings, reviews, and feedback.
• Device, browser, IP address, and technical diagnostic information.

Customers are not required to provide their name, email address, or telephone number simply to access Tapily’s standard service-request functionality.

Additional information may be requested if a participating business enables optional features requiring it.

Customers should avoid submitting sensitive personal information, including payment-card details, passwords, government identification numbers, or medical records, through ordinary service messages.

3.2 Employee and Staff Information

Participating businesses may create or authorize employee profiles containing:

• Name or display name.
• Business email address or authorized login information.
• Profile photograph or avatar.
• Job title and employment role.
• Business affiliation.
• Assigned department, section, or service area.
• Staff account identifier.
• Service assignments and responsibilities.
• Customer request and response history.
• Customer ratings and reviews.
• Service performance information.
• In-app communications.
• Account preferences and notification settings.
• Authentication, device, and security records.

Where separately enabled, workforce features may process scheduling, attendance, or location-verification information.

Any location-based feature requiring device permissions will be subject to applicable permission and disclosure requirements.

3.3 Business and Administrator Information

When a business registers or subscribes, Tapily may collect:

• Legal and trading business names.
• Business addresses and service locations.
• Business category or industry.
• Authorized owner and administrator information.
• Business contact details.
• Subscription and billing information.
• Employee assignments and access permissions.
• Business sections and service areas.
• Table, room, and department identifiers.
• NFC card and QR code assignments.
• Tap point configuration information.
• Administrative activity and service analytics.
• Customer support communications.

3.4 NFC Cards, QR Codes, and Tap Points

Tapily-enabled NFC cards and QR codes direct customers to digital service pages associated with participating businesses and designated physical locations.

A tap point may identify a table, room, counter, section, department, or other service area.

These identifiers allow requests to be associated with the correct location and routed to authorized staff.

NFC cards and QR codes do not inherently require storing a customer’s personal identity.

3.5 Device and Technical Information

We may automatically process technical information necessary to operate and secure our services, including:

• IP addresses.
• Browser and operating system information.
• Device type.
• App version.
• Session and authentication identifiers.
• Connection information.
• Access timestamps.
• Error reports and diagnostic logs.
• Security events.

We use this information for authentication, troubleshooting, reliability, fraud prevention, and security.

3.6 Billing and Payment Information

Tapily may use third-party payment processors, including Stripe where integrated, to process business subscriptions, setup fees, NFC card purchases, and other authorized transactions.

Payment providers may process payment credentials, billing addresses, transaction details, and fraud-prevention information under their own privacy policies.

Tapily may retain transaction references, invoices, subscription information, payment status, and limited billing records.

Where payments are processed through hosted third-party systems, Tapily does not need to store full payment-card numbers or security codes.

4. Customer Access Without App Installation

Customers may access Tapily at participating businesses by tapping an NFC card or scanning a QR code using a compatible device.

The customer’s browser opens the relevant business’s Tapily service page.

Customers may then:

1. View available service options.

2. Submit service requests.

3. Send messages to participating business staff.

4. Receive responses and service updates.

5. Continue communicating during an active service session.

6. Submit optional ratings or reviews.

7. End the interaction when service is completed.

Customers do not need to install Tapily’s staff application or create a Tapily account for this standard process.

Tapily may use temporary session identifiers and necessary browser technologies to maintain the interaction.

5. Customer Service Sessions and Historical Records

Tapily retains the history of customer service sessions, including completed and closed sessions, to support business monitoring, employee training, quality assurance, performance evaluation, complaint resolution, and service improvement.

Depending on the features used, session histories may contain:

• Participating business information.
• Table, room, section, or tap point identifiers.
• Session creation and closure timestamps.
• Customer requests and messages.
• Assigned employees.
• Staff responses.
• Request acknowledgment and completion records.
• Service resolution information.
• Customer ratings and reviews.
• Related operational activity.

When a service session is closed, the active customer interaction ends.

Closing a session does not automatically delete its historical records.

Historical session records may remain available to authorized business personnel through Tapily’s administrative tools.

Participating businesses may use these records for legitimate purposes, including reviewing service quality, identifying delays, training employees, investigating complaints, and improving customer experiences.

Access to historical information is subject to applicable role-based permissions, privacy requirements, and security controls.

Tapily does not make private customer service histories publicly accessible.

Historical Record Retention

Tapily retains historical session information according to its documented data retention schedule, applicable business agreements, operational needs, and legal requirements.

Records may remain available during an active business subscription and, where justified, for an additional limited period after account termination.

Historical records may be deleted, de-identified, or aggregated when retention of identifiable information is no longer necessary or where deletion is required by law.

Tapily may retain anonymous or appropriately de-identified performance statistics for longer periods.

The retention period for identifiable session histories will be defined in Tapily’s approved data retention schedule.

6. Purposes for Using Information

Tapily processes information to:

• Deliver digital customer service requests.
• Route requests to authorized staff.
• Facilitate customer and staff communications.
• Manage business locations, sections, and tap points.
• Create and administer staff profiles.
• Program and configure NFC cards and QR codes.
• Track request acknowledgment and completion.
• Maintain historical service records.
• Support business monitoring and employee training.
• Generate service performance analytics.
• Collect and display customer ratings and reviews.
• Provide notifications and operational updates.
• Process business subscriptions and authorized purchases.
• Provide technical support.
• Prevent fraud, abuse, and unauthorized access.
• Maintain and improve platform reliability.
• Comply with legal and contractual obligations.

We may also use aggregated or appropriately de-identified information to improve Tapily’s technology and understand service trends.

7. Customer Ratings, Reviews, and Employee Performance

Customers may voluntarily submit ratings, reviews, or feedback concerning the service they receive.

Such information may be associated with a particular employee, business, service request, or completed session.

Authorized business managers may review this information for service monitoring, employee recognition, coaching, training, and lawful performance evaluation.

Depending on business settings, employees may be able to view ratings and reviews associated with their profiles.

Customer feedback reflects individual opinions and may be subjective.

Tapily does not independently make employment decisions on behalf of participating businesses.

Businesses are responsible for ensuring their use of ratings, reviews, and employee performance information complies with applicable employment and privacy laws.

8. Communications and Notifications

Tapily facilitates communications between customers and authorized business personnel.

Communications may include service requests, acknowledgments, messages, status updates, and completion notifications.

Authorized personnel may access relevant communications to perform service duties, supervise operations, investigate complaints, or conduct training.

Tapily may send operational, account, billing, security, and support notifications.

Push notifications are subject to device permissions and applicable operating system settings.

Marketing communications, if offered, will be subject to applicable consent and opt-out requirements.

9. Cookies and Session Technologies

Tapily may use cookies, local storage, authentication tokens, and similar technologies to:

• Maintain customer service sessions.
• Authenticate staff accounts.
• Protect against unauthorized access.
• Remember necessary preferences.
• Maintain service functionality.
• Diagnose technical issues.
• Measure operational performance.

Necessary session technologies may be required for core service functionality.

If Tapily uses optional analytics or advertising technologies, applicable notices and privacy choices will be provided as required by law.

10. Location Information

Customer requests may be associated with a physical service location represented by an NFC card or QR code.

For example, a request may be associated with a restaurant table, hotel room, or designated service section.

This does not inherently require collecting a customer’s precise GPS location.

If Tapily offers employee location-verification, attendance, or geofencing features, those features will be subject to appropriate disclosures, permissions, and applicable legal requirements.

11. Disclosure and Sharing of Information

Tapily may disclose information to:

Participating Businesses: To enable service delivery, operational monitoring, employee management, customer communication, and performance analysis.

Authorized Employees and Administrators: According to business roles and access permissions.

Technology Service Providers: Including hosting, authentication, payment processing, communications, security, and technical support providers acting on authorized instructions.

Professional Advisers: Including legal, accounting, insurance, and security advisers where reasonably necessary.

Government or Legal Authorities: Where required by applicable law, lawful process, or to protect rights and safety.

Business Transaction Participants: Where reasonably necessary for a lawful merger, acquisition, financing, reorganization, or sale of business assets, subject to appropriate safeguards.

Tapily does not authorize one participating business to access another unrelated business’s private records.

Tapily will disclose its actual practices concerning personal information sales, targeted advertising, and third-party advertising technologies in accordance with applicable law.

12. Data Security

Tapily maintains or will implement safeguards appropriate to the nature and sensitivity of the information processed.

These safeguards include, as applicable:

• Encryption of information in transit.
• Appropriate encryption of stored information.
• Secure authentication.
• Role-based access controls.
• Separation of participating business data.
• Restricted administrative privileges.
• Security monitoring and logging.
• Secure software development practices.
• Vulnerability management.
• Backup and recovery procedures.
• Vendor security oversight.
• Incident response processes.
• Secure data deletion and disposal.

No internet-based service can guarantee absolute security.

Businesses and authorized users must protect account credentials and promptly report suspected unauthorized access.

13. Data Retention and Deletion

Tapily retains information for periods reasonably necessary to operate its services, maintain historical records, support training and monitoring, meet contractual obligations, protect security, and comply with applicable law.

Different categories of information may be subject to different retention periods, including:

• Customer session histories.
• Service messages.
• Staff profiles.
• Customer ratings and reviews.
• Business configuration records.
• NFC and QR assignments.
• Billing and transaction records.
• Security logs.
• Backup records.

Closed customer sessions remain part of historical service records, subject to the applicable retention schedule.

Retention of identifiable information is not necessarily indefinite.

When information is no longer required, Tapily may securely delete, de-identify, or aggregate it.

Valid privacy rights and legal deletion requirements take precedence over ordinary business retention preferences where applicable.

14. Account Deletion and Privacy Requests

Individuals may request access to, correction of, or deletion of eligible personal information in accordance with applicable law.

Requests may be submitted to:

privacy@tapily.com

Where Tapily processes information on behalf of a participating business, we may direct requests to that business or assist it in fulfilling them.

Staff users who create accounts must have access to appropriate account-deletion functionality where required by mobile app marketplace policies.

Removing a staff account from a business may not automatically delete historical operational records associated with that employee.

Tapily may retain limited information where legally permitted or required for security, accounting, dispute resolution, or compliance.

We may verify identity and authorization before fulfilling requests.

15. Individual Privacy Rights

Depending on applicable law and jurisdiction, individuals may have rights to:

• Request access to personal information.
• Correct inaccurate information.
• Request deletion.
• Obtain copies of certain information.
• Restrict or object to certain processing.
• Withdraw consent where applicable.
• Opt out of qualifying sales or targeted advertising.
• Appeal certain privacy decisions.
• Exercise privacy rights without unlawful discrimination or retaliation.

These rights may be subject to legal exceptions.

Tapily will provide applicable rights and opt-out mechanisms where legally required.

16. International Data Processing

Tapily may provide services to businesses and individuals in multiple jurisdictions.

Where applicable law requires a lawful basis for processing, that basis may include contractual necessity, legitimate interests, legal obligations, or consent.

Where international transfers of personal information occur, Tapily will implement appropriate safeguards and transfer mechanisms as required by law.

Additional jurisdiction-specific notices may apply.

17. Children’s Privacy

Tapily is not designed as a social networking service or platform directed toward children under 13.

Customers are not required to create accounts to submit ordinary service requests.

Tapily does not knowingly collect personal information from children in violation of applicable children’s privacy laws.

If we discover that information has been collected unlawfully from a child, we will take appropriate corrective action.

Participating businesses should avoid requesting unnecessary personal information from children.

18. Sensitive and Regulated Information

Tapily’s ordinary service messaging features are not intended for transmitting highly sensitive information, including medical records, government identifiers, financial account credentials, or biometric information.

Users should not submit such information through ordinary service requests.

Businesses operating in regulated industries must determine whether additional contractual, technical, or legal safeguards are required before using Tapily to process regulated information.

Use of Tapily does not automatically establish HIPAA or other industry-specific compliance.

19. Employee Monitoring and Business Responsibility

Tapily provides tools that allow participating businesses to monitor service requests, employee responses, customer feedback, and operational performance.

Participating businesses are responsible for providing employees with legally required notices concerning workplace monitoring and performance evaluation.

Businesses must use Tapily’s historical records and analytics lawfully and must not engage in discriminatory employment practices or unauthorized surveillance.

Tapily provides technology to support these activities but does not replace the business’s legal responsibilities.

20. Security Incidents

Tapily maintains procedures intended to identify, investigate, contain, and respond to suspected security incidents.

Where required by applicable law or contract, Tapily will notify affected businesses, individuals, or authorities of qualifying incidents.

Notification obligations and timelines depend on the circumstances and applicable legal requirements.

21. Third-Party Websites and Services

Tapily may provide links or integrations involving participating businesses, payment processors, app marketplaces, or other third parties.

These organizations may maintain their own privacy policies and information practices.

Tapily is not responsible for independent third-party privacy practices outside its control.

22. Changes to This Privacy Policy

Tapily may update this Privacy Policy as its services, technology, or legal obligations change.

The updated effective date will be displayed when revisions are published.

Material changes will be communicated, and consent obtained, where required by applicable law.

23. Contact Information

For privacy questions, requests, or concerns:

Tapily, LLC

Email: privacy@tapily.com