What data we collect
We gather the information you provide when creating a TapToBuy account, purchasing products, or contacting support. This includes contact details, store configuration, and payment metadata supplied by Stripe.
Policy
Privacy policy
TapToBuy is committed to protecting creator and customer data. This policy outlines the information we collect, why we collect it, and the controls available to you.
How we use your data
TapToBuy processes your information to deliver core product functionality, personalize the dashboard, prevent abuse, and comply with legal obligations. Marketing messages are limited to users who opt in.
Storefront visit counting
When someone views a creator's storefront or starts a checkout, we record the event so the creator can see visits and conversions on their dashboard. This counting uses no cookies and stores nothing in the visitor's browser. To tell visits apart, we combine the visitor's IP address and full user-agent string (which can include browser, operating-system, device and version details) with a random code that changes every day into an anonymous identifier. Each event record keeps only that identifier, the store and product, the visitor's country and the time. When a checkout starts, the record also keeps the payment session reference, so a completed purchase can be matched to the checkout that led to it. These records never include IP addresses or browser details. We use the IP address only briefly, to create the identifier and to limit abuse of the counting service, and do not keep it for analytics. Like any website, our hosting and error-monitoring providers may log IP addresses as part of normal operation, under their own retention periods. The daily code is deleted within two days, after which the identifier cannot be recreated, and the identifier never links the same visitor across days or stores. We do this under our legitimate interest in giving creators accurate store statistics. Known bots and automated browsers are not counted.
Data sharing and retention
We never sell personal data. Third-party processors such as Stripe, Cloudflare R2, and SendGrid receive only the information required to operate TapToBuy. Records are retained while your account remains active or as required by law.
Your rights
You can request a copy of your data, update details, or delete your account at any time from the privacy settings page. Email privacy@taptobuy.io for questions or to exercise data subject rights.