Privacy Policy

Effective date: 2026-10-08

This Privacy Policy explains how [Company name] ("we", "us") collects, uses and protects personal information through TATAP (the "Service"). It covers account holders (people who create pages) and visitors (people who view pages or share their details).

1. Information we collect

Account holders: name, email address, password (stored only as a secure hash), business details, and the content you add to pages.

Visitors who share details: information you choose to submit through a page, such as your name, email, phone number, company, message, appointment preferences, review and star rating, or order details.

Usage information: when a page is viewed or a button is tapped, we record the date and time, the page, how you arrived (link, QR code or NFC tag), device type, browser, and a random visitor identifier stored on your device. For orders we record the IP address to help prevent fraud.

Photos you scan: if an account holder scans a business card or flyer, the image is processed to read text. When AI reading is enabled, the image is sent to our AI provider for that purpose only.

2. How we use information

to provide the Service, including showing pages, delivering submitted details to the page owner, and sending requested contact cards;
to send notifications and emails you asked for, such as a thank-you message with the owner's contact card;
to produce analytics for page owners;
to keep the Service secure, prevent abuse and fix problems;
to meet legal obligations.

We do not sell personal information.

3. Who receives information

The page owner receives details you submit on their page. Their use of your information is governed by their own privacy practices.
Service providers that host the Service, send email, process AI requests or provide analytics, under contracts that limit their use of the data.
Payment providers (such as Square, Stripe or PayPal) when you choose to pay; they process payment details under their own privacy policies.
Integrations the page owner connects, such as email marketing or CRM tools via webhook.
Authorities where required by law.

4. Cookies and similar technologies

We use essential cookies to keep account holders signed in and to unlock password-protected pages, and local storage on your device to remember a random visitor identifier and to store forms you send while offline. If a page owner enables Google Analytics or the Meta Pixel, those services may set cookies. Where a cookie banner is shown, these load only after you accept.

5. Legal bases (EEA and UK)

We process personal data to perform our contract with account holders, for our legitimate interests in running and securing the Service, with consent where required (for example, optional analytics cookies), and to comply with legal obligations.

6. Retention

We keep account data while the account is active and for up to 30 days after closure, unless a longer period is required by law. Visitor submissions and analytics are kept until the page owner deletes them or closes their account.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, object to or restrict processing, and withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights; we do not sell or share personal information for cross-context behavioural advertising. To make a request, contact [contact email]. If you shared details on someone's page, you can also contact that page owner directly.

8. Security

We use encryption in transit (HTTPS), hashed passwords and access controls. No system is completely secure, so we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for these transfers.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

11. Changes

We may update this Privacy Policy and will post the new version with a new effective date.

12. Contact

[Company name]
[company address]
[contact email]