Privacy Policy

This Privacy Policy explains how Taploop, Inc. ("Taploop", "we") collects, uses, and shares personal data when you visit our website, use our marketing agent, CRM, bots, and related Services. We act as a controller for personal data of website visitors and account holders, and as a processor for personal data you upload or collect through the Services (see our Data Processing Addendum).

1. Data we collect

You give us

• Account info: name, email, password (hashed), company.
• Billing info: processed by our payment provider; we store only the necessary metadata.
• Content you upload: campaigns, posts, contacts, bot configurations.
• Support communications.

We collect automatically

• Device and log data (IP, browser, OS, timestamps).
• Usage events (pages viewed, features used).
• Cookies and similar technologies — see our Cookie Policy.

From third parties

• Authentication providers (e.g., Google) when you sign in.
• Public social signals processed by our audience-analysis tools.

2. How we use data

• Provide, secure, and improve the Services.
• Process payments and prevent fraud.
• Send service notifications and, with your consent, marketing emails.
• Comply with legal obligations and enforce our Terms.

3. Legal bases (GDPR)

• Contract — to deliver the Services you signed up for.
• Legitimate interests — to secure, improve, and promote the Services.
• Consent — for non-essential cookies and marketing emails.
• Legal obligation — for tax, accounting, and regulatory needs.

4. Sharing

We share personal data with:

• Sub-processors (hosting, analytics, email, payments) under contractual safeguards.
• Authorities when required by law.
• Buyers in case of a corporate transaction, with appropriate confidentiality.

We do not sell personal data.

5. International transfers

Where data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses or another valid transfer mechanism.

6. Retention

We keep personal data only as long as needed for the purposes described above, then delete or anonymize it. Account data is deleted within 90 days of account closure unless we must retain it for legal reasons.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, and to object to processing. EU/UK users may also lodge a complaint with their local data protection authority. To exercise rights, email [email protected].

8. Security

We use encryption in transit, access controls, audit logging, and least-privilege practices. No system is 100% secure; we will notify affected users of any data breach as required by law.

9. Children

The Services are not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We will notify you of material changes to this Policy. The "Last updated" date above reflects the latest revision.

11. Contact

Data controller: Taploop, Inc. — [email protected].