1. Who we are
TapBridg (“TapBridg,” “we,” “us”) is a platform that connects physical places and objects to digital experiences. A physical TouchPoint (such as an NFC tag or QR code) resolves to a reusable digital Experience when someone taps or scans it. This Privacy Policy explains how we handle information across our administrative application, our public tap experiences, and our supporting services.
The data controller for the purposes of this policy is TapBridg Co., located at Palma Real 243 San Pedro Tampico Mexico. For questions, contact legal@tapbridg.com.
2. Key concepts
- TouchPoint — a persistent physical identity (the object) that a visitor taps or scans.
- Experience — the reusable digital behavior a TouchPoint triggers (for example a menu, a request form, a review link, or a check-in).
- Profile — the ownership and management boundary (an individual or an organization) that a customer manages TouchPoints and Experiences under.
- User — an authenticated human who signs in to manage a Profile.
- Interaction — a physical-to-digital event recorded when a visitor engages a TouchPoint (for example an open, a request, a check-in, or a capture).
3. Information we collect
Information you provide
- Account information for Users: name (optional), email address, and an authentication credential (a password you set, or a Google sign-in — see section 6).
- Profile and organization details you enter, such as Profile name, type (individual or organization), timezone, and locations.
- Experience configuration you create, such as menus, request options, review destinations, contact links, and capture form fields.
- Content submitted by visitors through your Experiences, such as a request ("call waiter"), a check-in, or information entered into a capture form. You configure what is collected.
Information collected automatically
- Interaction records generated when a TouchPoint is engaged, including the TouchPoint's public identifier, the Experience served, and a timestamp.
- Device and technical data such as IP address, browser type, and general device information, used for security and to make experiences work.
- Usage and analytics data about how Experiences perform (for example counts of opens, requests, check-ins, and captures).
4. How we use information
| Purpose | Examples |
|---|---|
| Provide the service | Resolve a tap to the right Experience; deliver requests and captures. |
| Manage accounts | Authenticate Users; scope access to the correct Profile. |
| Analytics and improvement | Show how the physical network performs; improve reliability. |
| Security and abuse prevention | Detect fraud, protect accounts, and enforce our terms. |
| Communications | Send service messages and, where permitted, product updates. |
| Legal compliance | Meet obligations and respond to lawful requests. |
Where required by law, we rely on a lawful basis for each purpose, such as performing our contract with you, our legitimate interests, your consent, or compliance with a legal obligation.
5. Physical interactions and context
A distinctive part of TapBridg is that interactions happen in a physical context. When a visitor engages a TouchPoint, we may associate the interaction with contextual details such as the TouchPoint, its location (as configured by the managing Profile), the Experience served, and a timestamp. If a visitor is signed in, an interaction may be associated with their account. We do not use this context to identify private individuals beyond what is necessary to deliver and measure the Experience.
6. Google sign-in
If you choose “Continue with Google,” Google provides us a signed identity token containing your Google account identifier, name (if available), and email address so we can create or sign you in to your TapBridg account. We use this information only to authenticate you, create your account, show your account identity, and associate your Profile with your sign-in. We do not receive your Google password, access your Google contacts, or use Google data for advertising. We verify the token and request only the basic identity information needed for sign-in. Your use of Google sign-in is also subject to Google's own privacy policy. You can stop using Google sign-in at any time by signing in with an email and password instead.
To delete your TapBridg account and associated personal information, email legal@tapbridg.com from the address associated with your account. We will verify the request, delete or anonymize information that we no longer need, and retain only information required by law or for legitimate security and accounting purposes.
7. How we share information
We share information only as described here:
- With the managing Profile. Content submitted through an Experience (such as a request or capture) is made available to the Profile that owns the TouchPoint.
- With service providers that process data on our behalf (for example hosting, storage, and email delivery), under contracts that limit their use of the data.
- With Connections you configure, such as sending a request to your email or a webhook endpoint you provide.
- For legal reasons, when required by law or to protect rights, safety, and the integrity of the service.
- In a business transfer, such as a merger or acquisition, subject to this policy.
We do not sell personal information.
8. Data retention
We keep information for as long as needed to provide the service and for legitimate business or legal purposes. Account and Profile information is retained while the account is active and for a reasonable period after closure to complete deletion and resolve disputes. Interaction and analytics records may be retained in aggregated or de-identified form for service measurement and reliability. We delete or anonymize personal information when it is no longer needed, unless a longer period is required by law. Contact legal@tapbridg.com for questions about a specific data type or deletion request.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. To exercise these rights, contact legal@tapbridg.com. You may also have the right to lodge a complaint with a supervisory authority.
10. Security
We use technical and organizational measures designed to protect information, including encrypted transport and access controls scoped to a User's Profile membership. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International transfers
We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for such transfers.
12. Children
TapBridg is not directed to children under the age of 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can address it.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new effective date and, where appropriate, provide additional notice.
14. Contact us
Questions about this policy or our data practices can be sent to legal@tapbridg.com, or by mail to Palma Real 243 San Pedro Tampico Mexico.