Privacy Policy

Account information: When you create an account, we collect your name, email address, organization name, and password (stored hashed).

Billing information: When you subscribe to a paid plan, payment details are collected directly by Stripe. We receive limited billing metadata (customer ID, subscription status, plan) but never your full card number.

Survey responses: We collect customer feedback submitted through your surveys, including ratings, comments, and optional contact details when customers opt in.

Marketing opt-ins: Email addresses collected through incentive entries when the customer has explicitly opted in to receive marketing.

Technical data: IP addresses, browser type, device information, and usage logs collected automatically when you or your customers interact with the Service.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Deliver survey responses, alerts, and notifications
• Communicate with you about your account, billing, and product updates
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We rely on the following third-party services to operate TapRate:

• Stripe — payment processing
• Resend — transactional and notification email delivery
• Neon — database hosting (PostgreSQL)
• Upstash — in-memory caching (Redis)
• Vercel — frontend hosting
• Fly.io — backend application hosting

Each processor receives only the data needed to perform its function and is contractually bound to protect that data.

We do not sell personal information. We may share information:

• With third-party processors as described above
• When required by law, regulation, or valid legal process
• To protect the rights, safety, or property of TapRate, our users, or others
• In connection with a merger, acquisition, or sale of assets, with notice to affected users

We retain account and survey data for as long as your account is active. After account termination, we retain data for up to 90 days to allow for recovery, then delete it except where retention is required by law.

Customer survey responses are retained according to the data controller's (your business's) policies and applicable legal requirements.

We use industry-standard safeguards including encryption in transit (HTTPS), encrypted passwords, scoped access controls, and regular security review. No method of electronic transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Receive a portable copy of your data
• Withdraw consent for marketing communications

To exercise these rights, contact us at hello@taprate.app.

The Service uses essential cookies and similar technologies for authentication, security, and basic functionality. We do not use third-party advertising trackers.

TapRate is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

TapRate is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service. The effective date at the top reflects the most recent update.

Questions about this Privacy Policy or our data practices? Contact us at hello@taprate.app.