Privacy Policy

This Privacy Policy explains what information TruTap™ ("TruTap," "we," "us") collects, how we use it, and the choices you have. It covers our website at trutap.co, our online store, and our NFC review products. By using TruTap, you agree to this policy, which forms part of our Terms of Service.

Information we collect

• Account details Your business name and email address, provided when you register. TruTap is passwordless — we sign you in with a one-time code sent to your email, so there's no password to create, store, or remember.
• Card and destination data The card IDs you claim and the destination link you set for each card, such as your Google review page.
• Order information What you ordered and your shipping details when you buy a product. Payments are processed by Shopify, and we never see or store full payment card numbers.
• Messages you send us The name, email, phone number, and message you submit through our contact form or by email.
• Technical data Standard information collected automatically when a card is tapped or our site is visited, such as IP address, browser type, and timestamp. We use it to complete the redirect and keep the service secure.
• Cookies Small files needed to keep you signed in and run core features of the site.

We don't collect sensitive personal information, and we don't ask for more than we need to run the service.

How we use your information

• To create and manage your account and the cards you claim.
• To redirect each tap to the destination you've set.
• To process and ship your orders and provide support.
• To reply to messages you send us.
• To operate, secure, and improve TruTap and prevent fraud or abuse.
• To send service-related messages about your account or orders.

How taps and redirects work

When someone taps a TruTap card, their phone opens the card's fixed TruTap link, our system looks up the destination you've assigned to that card, and the visitor is redirected. We don't ask the visitor for any personal information, and there's no account or sign-in involved in tapping a card.

Once the redirect completes, the visitor is on a third-party page, such as Google Reviews. That page is governed by the third party's own privacy policy, not ours.

How we share information

We don't sell your personal information, and we don't share it for advertising. We share it only with the service providers that run TruTap, and only as much as they need to do their job:

• Supabase — database and account authentication.
• Vercel — website and application hosting.
• Shopify — online store and payment processing.
• Formspree — delivery of messages sent through our contact form.

Each of these providers handles data under its own privacy terms. We may also disclose information if required by law, or where necessary to protect the rights, safety, and security of TruTap, our customers, or the public. If TruTap is ever involved in a merger, acquisition, or sale of assets, customer information may transfer as part of that transaction, and we'll notify you before it becomes subject to a different policy.

Cookies

We use essential cookies to keep you signed in and to operate core features of the site. You can control or clear cookies through your browser settings, though some parts of the service may not work properly without them.

Data retention

We keep your information for as long as your account is active, or as long as needed to provide the service, resolve disputes, and meet our legal and accounting obligations. You can ask us to delete your account and its associated data at any time. Some records, such as order history, may be retained where the law requires it.

Your rights and choices

You can access, update, or delete your account information at any time by signing in, or by emailing us at contact@trutap.co. You can also request a copy of the data we hold about you.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to access, correct, delete, or port your data, and to object to certain processing. We honor those rights as required by law, and we won't discriminate against you for exercising them. We may need to verify your identity before acting on a request.

Security

We protect your information with industry-standard measures, including encrypted connections, one-time email sign-in codes, and managed authentication through our providers. That said, no method of storage or transmission over the internet is completely secure, and we can't guarantee absolute security. Keeping access to your email account secure is your responsibility, since that's how you sign in, and you should let us know right away if you believe your account has been compromised.

Third-party sites

Our products and site link to services we don't control, including Google. We're not responsible for the content, security, or privacy practices of those sites, and we'd encourage you to read their policies before sharing information with them.

Children's privacy

TruTap is built for businesses and isn't directed to children under 16. We don't knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last Update" date above, and we'll let you know by email or a notice on our site if the changes are significant. Continuing to use TruTap after an update means you accept the revised policy.

Questions?

If anything here isn't clear, or you'd like to make a request about your data, we're happy to help. Email us at contact@trutap.co or use our contact page, and we'll get back to you within 24 hours during support hours — Monday through Friday, 8:00 AM – 4:00 PM EST.