1. Scope
This Privacy Policy applies to Tap Industrial's mobile apps, websites, business dashboards, public Tap pages, NFC/QR experiences, customer reward and Wallet experiences, booking, rental, stay and service-request tools, staff and contractor tools, optional music and jukebox experiences, asset-history and verification tools, lead marketplace features, campaigns, and related support services.
Businesses using Tap may also have their own privacy practices. When a customer chooses to interact with a business through Tap, that business may receive information needed to provide the requested service, reward, booking, offer, or communication. Tap processes business-managed records to operate these tools; the business also controls its customer, employee and contractor relationships and its independent use of those records. Contact that business about its practices, or Tap about processing by Tap.
2. Information we collect
Business and account information
We may collect business names, contact information, locations, categories, public profile details, logos and media, account/login identifiers, plan information, team-member access, and settings used to configure Tap.
Customer information
Depending on the feature used, we may collect a name, phone number, email address, ZIP code or general location, communication preferences, verification and consent records, and information a customer submits to a business.
Asset, equipment, property, and service-history information
When a user or business uses Tap to identify, service, verify, maintain, transfer, or keep history for an asset, we may process information associated with that asset and the people or businesses authorized to access it. Examples include vehicles and VINs; license plates; mileage or odometer readings; make, model, year, trim, or other vehicle details; equipment, machinery, tools, appliances, devices, inventory, facilities, rooms, units, or other property; serial numbers, barcodes, QR/NFC identifiers, or other asset identifiers; ownership or customer-association information; photos and documents; estimates; inspections; cleaning, replenishment, maintenance, repair, and service records; readings; technician or staff entries; timestamps; and related history. The specific information collected depends on the feature and the type of asset.
An “asset” in this policy can include property a customer owns, leases, manages, uses, services, or is otherwise authorized to associate with a Tap account or business relationship. A VIN or vehicle is one example and does not limit the scope of Tap's asset features.
Rewards, Wallet, and activity
We may process check-ins, points, punches, balances, gift or store-credit activity, memberships, ticket status, redemptions, offer claims, referrals, and Wallet pass identifiers needed to create, update, or revoke a pass.
Bookings, feedback, and service requests
We may collect appointment or waitlist details, table/service requests, private feedback, review routing information, service-needed requests, lead details, and messages or notes submitted through Tap.
Rentals, stays, waivers, and identity checks
When a business enables these features, we may process rental or stay dates, room or unit assignments, delivery details, deposits, returns, condition photos, late or damage charges, and related service records. Rental eligibility and waiver tools can also collect date of birth or age, identity or driver's-license photos, a staff member's verification result, signed name, guardian name where applicable, waiver text and version, signature timestamp, IP address, and browser information. These records support the business's eligibility checks, agreement, fulfillment and dispute handling; they are not collected for every Tap user.
Staff, contractor, and time-clock records
Business tools may process staff or contractor names and contact details, roles, invitations, assignments, schedules, job addresses and notes, time-clock punches, work and verification records, payment references, and activity logs showing who performed an action and when. The relevant business and its authorized team members receive records according to their access and assigned work.
Healthcare and protected health information
Tap's current general-purpose service is not offered as a HIPAA-ready service for protected health information. Before onboarding a healthcare business for a use that involves protected health information, Tap will complete the necessary healthcare setup, including suitable database and server infrastructure, risk assessment and security safeguards, a business associate agreement with the business, and appropriate agreements and configuration for any providers handling that information. AI, voice, messaging, storage and other integrations will only be included if approved for that healthcare use. Until Tap confirms that setup in writing, do not submit protected health information through Tap. A healthcare business category or booking feature does not itself mean that setup is complete.
Shared screens and connected devices
Tap may process pairing and device identifiers, screen names, configuration, connection addresses, and status for hubs, TVs, kiosks and other supported devices. A business can display selected menus, queues, orders, customer names or nicknames, requests, and jukebox messages on a shared or public screen. Visibility depends on the feature and the business's display settings; information deliberately displayed in public can be seen by other people.
Campaign and communication data
We may process audience selections, message content, delivery status, unsubscribe or opt-out records, email/SMS consent, and Wallet update activity so businesses can communicate with customers who are eligible to receive those messages.
Voice, call, and AI receptionist information
When businesses or users use Tap's calling, voice, or AI receptionist features, we may process telephone numbers, caller and destination information, call routing information, timestamps, duration, call status, information provided during calls, AI interactions, transcripts or summaries where applicable, and related technical and usage information. Depending on the feature and business configuration, a call may be handled by telecommunications, voice, transcription, or AI service providers acting for Tap or the participating business. We use this information to answer and route calls, provide requested information, create bookings, requests, waitlist entries, leads, messages, or other requested follow-up actions, troubleshoot services, prevent abuse, account for usage, and improve service reliability.
Tap does not require every call to be recorded or transcribed. Whether recording, transcription, summaries, or other call-processing features are used can depend on the applicable feature, provider, business settings, and legal requirements. Businesses are responsible for using calling features in accordance with applicable notice and consent requirements.
Artificial Intelligence and Automated Processing
Some Tap features use artificial intelligence or automated processing. What information they use, which providers process it, and the choices you have are described in AI features and AI privacy details below.
Music, jukebox, and Apple Music information
When a business, host, or customer uses an optional Tap music or jukebox feature, we may process information needed to operate that experience, such as the participating business, Tap tag or jukebox room, Apple Music catalog identifiers and catalog metadata such as song title, artist, artwork, duration, or explicit-content indicator, music search terms, song selections, queue and round position, votes, reactions, playback state and timestamps, business promo text, and customer-entered jukebox names or shoutout messages.
To limit duplicate votes and keep a person's place in a jukebox queue, Tap may use a pseudonymous jukebox identifier stored in a cookie or app storage. A paid shoutout may also be associated with a payment reference, amount, status, and the name or message the customer chose to display.
On a business or host device, Apple Music authorization and subscription capability may be checked through Apple or MusicKit so the requested playback feature can operate. Tap does not ask users to provide their Apple Account password to Tap; Apple handles Apple Music authorization through Apple services or MusicKit. Apple may separately process Apple Music account, subscription, catalog, search, or playback information under Apple's own privacy policy.
Apple Music user data obtained through MusicKit is used only to support or improve the music experience described to the user. Tap does not use Apple Music user data obtained through MusicKit to identify a person or device for advertising purposes, and does not share that MusicKit user data with unrelated third parties for advertising or unrelated marketing.
Device and technical information
We may collect IP address, browser/device information, timestamps, request logs, security events, and similar technical information used to operate, protect, troubleshoot, and improve Tap. Wallet integrations may also use platform-specific device or registration identifiers supplied by Apple or Google.
Cookies, local storage, and offline work
Tap uses cookies and browser or app storage for sign-in, session security, consent and preferences, referrals, jukebox participation, and feature state. Some app data is saved locally so supported screens and work can be used without a connection. Saved copies can include customer names, phone numbers, job addresses and notes, staff assignments, tag information, and account details. Supported time-clock punches are saved on the device until they can be sent to Tap. Cached screens show when they were saved and may be outdated. Local files are protected by the device's security and app access controls; protect shared devices, and check that pending work has synced before clearing app data or removing the app.
Nearby discovery, interests, and promoted places
Nearby features use device location to find businesses, estimate distance and show queues or offers. If you enable Nearby alerts and grant background location permission, Tap can use location and geofencing even when the app is closed or not in use to notify you about selected places and offers matching your interests. Location coordinates are sent to Tap when nearby results or the watch area are refreshed; selected places, interests and recent location state can also be stored on your device. These features can include paid placements labeled Promoted, so location is also used to support advertising within Tap.
Tap records when places or offers are shown, opened, alerted, claimed, or used for directions and can associate that activity with your Tap identity and later bookings or visits to measure results. Businesses receive feature and campaign reports. Turn off Nearby alerts in Tap or revoke background location in device settings to stop background alerts; foreground discovery has a separate location permission. Turning off alerts does not erase activity already recorded. See the privacy-request options below for that information.
Mobile app permissions and device features
Tap may request access to device capabilities only when they support a feature you choose to use. Permission availability and wording can vary by device and operating system, and you can change permissions through your device settings.
- Location. With permission, Tap may access approximate or precise device location for nearby discovery and offers, On the way arrival estimates, and in-person payment features such as Tap to Pay where required by the payment provider. Optional Nearby alerts also use background location as described above. The precision and availability depend on the feature and device permission granted.
- Camera and photos. With permission, Tap may let you take, select, upload, or process photos for profiles, customer requests, quotes, service records, job or asset documentation, and related workflows. Camera access may also be used to scan supported barcodes, VINs, serial numbers, QR codes, or similar identifiers for asset, request, or Max Tag workflows. Selected or captured media may be uploaded to Tap when you choose to attach or save it.
- Photo booth. A business's photo booth makes the framed photo on your phone; it isn't uploaded unless you tap Share with the event. A shared photo is shown to anyone with that event's photo link (the event's guests and the business), who can save or download it; it is linked to an anonymous device code (not your name), can be reported, hidden or deleted, and is deleted after 30 days. You can delete your own shared photo from the gallery.
- Microphone and speech recognition. With permission, Tap can capture speech when you choose a voice feature. Transcription may run on the device, through its speech-recognition provider, or through Tap's transcription provider as described in the AI section.
- Bluetooth and local network. Supported payment-reader and TV/casting features may request access to connect to nearby readers or discover and connect to screens on your network.
- NFC. On supported devices, Tap may use NFC access to read, identify, assign, configure, or securely program supported Tap tags, including supported NTAG tag types, when you use NFC features. NFC availability and supported operations depend on the device, operating system, tag type, and your Tap permissions.
- Apple Music and media access. On supported Apple devices or browsers, Tap may request Apple Music or media authorization when an authorized business or host chooses to connect Apple Music for a Tap music feature. This permission can allow Tap, through Apple's MusicKit or media frameworks, to search the Apple Music catalog and control permitted playback on that authorized device. Apple controls the authorization prompt and determines subscription and playback eligibility.
- Notifications. If you enable notifications, Tap may process device push tokens, browser push subscriptions, notification preferences, delivery information, and related device identifiers needed to deliver booking, service, payment, reward, lead, call, contractor, and other account or business updates.
Declining or later disabling a device permission does not prevent use of unrelated Tap features, but a feature that requires that permission may be unavailable or may have reduced functionality.
Notifications
You may control notification permissions through Tap, your browser, or your device settings, as applicable. Notification delivery also depends on the device platform, network connection, and third-party push services.
AI features and AI privacy details
This section explains how Tap's artificial intelligence ("AI") features work with your information. It applies together with the rest of this policy.
Which features use AI
- Ask Tap. Answers questions about your bookings, rewards, requests, places you use and items you saved, and can suggest actions such as booking or ordering. Ask Tap action cards require your confirmation, and may open another screen where you complete the request or payment.
- Voice. When you hold to talk, Tap first tries your device's speech-recognition service. On-device recognition is used when supported; otherwise Apple or Google's service may process the speech. Tap can also send a recording to OpenAI for transcription. If you turn on provider-based spoken answers, answer text is sent to Telnyx to be read aloud; you can choose your phone's own voice instead.
- Estimates. When you request a local service, Tap can produce an estimated price range from the category, the details you typed and your ZIP code. Estimates are for reference only and are not a quote, offer or promise of price.
- Answers about a business, item or place. Some Tap tags let you ask about a product, a place or an exhibit. Answers are based on material the business provided.
- Business tools. Businesses may use AI summaries (briefs), manuals and document answers, an assistant for their team, or an AI receptionist. These tools can process permitted business records, including customer names and contact details, booking or job details, addresses, notes, and relevant asset or service history. Enabled summaries can run on a schedule; an AI receptionist can answer questions and create bookings or other requested follow-up during a call. Each business is responsible for its notices, permissions and use of these tools.
What we send and to whom
When an AI feature runs, Tap sends the question, relevant conversation or voice content, and the account, business, document or service details used for that feature (for example, an upcoming booking, reward balance, job address, or request details). Tap does not include passwords or full payment-card numbers from its authentication or payment systems in AI requests. Information you put into questions, notes, calls or uploads can be included, so do not submit passwords, card numbers or unnecessary sensitive information there.
- OpenAI processes questions, answers, relevant records and document excerpts, summaries, estimates, and voice recordings submitted for transcription. See OpenAI's privacy policy.
- Telnyx provides voice services, such as reading answers aloud and handling phone calls for businesses that use the AI receptionist. See Telnyx's privacy policy.
- Apple or Google may process speech through the device's speech-recognition service when recognition is not performed on the device, under their Apple or Google privacy policies and device settings.
Tap's providers process information to deliver the feature and for applicable security, abuse prevention and legal requirements. Tap requires providers handling information on its behalf to protect it under applicable contractual and legal requirements, including protections consistent with this policy. Provider terms and settings can affect retention; this policy does not promise zero retention or that every provider deletes all copies immediately. We will update this section and obtain additional permission when required before materially changing AI sharing.
Your choice
In current supported versions of the personal Tap app, the AI permission prompt is separate from accepting Terms and Privacy at signup or sign-in. It identifies the information sent to OpenAI or Telnyx before your first use of features such as Ask Tap, hold to talk, or an estimate. Choose "Not now" to leave those features off. Your permission is saved on your Tap account. You can withdraw it in Ask Tap → settings → Turn off Tap AI, or contact us below; those personal AI features then require permission again. Declining personal AI does not prevent unrelated Tap features from working.
That personal setting does not switch off a business's AI receptionist, scheduled briefs or other business tools, or erase information already lawfully processed. A business must separately provide required notices and obtain any permission needed before sharing customer or staff information with AI providers. Accepting these Terms and Privacy alone is not a substitute for that permission. Contact the business or Tap about its processing of your information and available alternatives.
If you call a business that uses Tap's AI receptionist, the call may be answered by an AI assistant on that business's behalf. You can ask to leave a message or reach a person where the business offers that option.
Accuracy
AI can make mistakes. Check important details, such as times, prices and addresses, before relying on them. Outputs assist users and businesses and are not a substitute for qualified judgment or required human review, including for employment, eligibility, safety or other significant decisions.
How long we keep it
Your Ask Tap conversations are kept with your Tap account so you can see recent answers, and are deleted when your account is deleted, as described in "Your choices and privacy rights." Estimates are kept with the request they belong to. Some records may be kept longer where needed for security, fraud prevention, or legal obligations, as described in "Data retention and security."
3. How we use information
We use information to:
- provide and secure Tap accounts, business dashboards, and public pages;
- verify customers and connect them with the correct business, reward account, booking, or service request;
- create and update Apple Wallet, Google Wallet, and Tap/web passes;
- process rewards, gift balances, tickets, redemptions, purchases, and customer history;
- route reviews, private feedback, bookings, waitlists, service alerts, and requested leads;
- create, maintain, verify, and retrieve asset records and service history; link records to the correct customer, business, vehicle, equipment, property, or other asset; and, when authorized, make permitted records available to another participating business;
- send transactional messages, Wallet updates, email campaigns, and SMS messages where permitted;
- process subscriptions, purchases, lead fees, messaging credits, and merchant payouts;
- operate rentals, stays, waivers, staff assignments, time-clock records, shared screens and supported offline work;
- provide nearby results and optional background alerts, match selected interests, display promoted places, and measure offer, booking and visit activity;
- detect fraud, abuse, duplicate redemptions, account misuse, and security incidents;
- use device permissions and capabilities to provide location-dependent, camera/photo, barcode/VIN, NFC, payment, Apple Music/media, and notification features that a user chooses to use;
- operate music and jukebox features, including catalog search, song requests, voting, reactions, queue and round management, playback coordination, venue displays, abuse prevention, and customer-requested shoutouts or promo displays;
- provide analytics, support, product improvement, and platform administration; and
- comply with legal obligations and enforce applicable terms and policies.
5. Email, SMS, and Wallet communications
Customers may receive transactional messages needed to verify identity, confirm an action, deliver a booking or service update, or maintain a Wallet pass. Marketing messages are sent based on the business's settings and available consent or eligibility records.
Email marketing can be stopped using the unsubscribe method provided in the message. SMS recipients can use the opt-out instructions in the message, including recognized keywords such as STOP where supported. Removing a Wallet pass from a device stops that device from displaying the pass, but it may not automatically delete the underlying customer or reward record held by Tap or the business.
6. Payments and billing
Tap uses payment providers such as Stripe for subscriptions, merchant onboarding, customer purchases, lead or success fees, messaging credits, eligible jukebox shoutouts, and payouts. Payment-card information is generally collected and processed by the payment provider rather than stored as raw card data by Tap. We may retain transaction identifiers, status, amount, billing references, and related records needed for accounting, support, disputes, and fraud prevention.
This can include subscription tier, billing period, cancellation status, checkout and payment references, refunds, rental deposits or card holds, payment-method references and limited card details such as brand and last four digits. Merchant onboarding may require the payment provider to collect identity, business, tax and payout-account information. Manage Tap-billed plans through the Tap billing controls; see the Terms for renewal and cancellation details.
7. Data retention and security
We retain information for as long as reasonably necessary to provide the service, maintain account and transaction history, honor consent and opt-out records, prevent fraud, resolve disputes, meet legal or accounting requirements, and protect the platform. Retention periods can vary by data type and feature.
When Tap records an authorization to share asset or service-history information, we may keep an audit record such as the customer or user identifier, timestamp, consent or notice version, authorized business or network, asset or record scope, method of authorization, and later revocation or change. These audit records help us honor the user's choices, investigate access, and document compliance. An audit record may be retained after access is revoked when reasonably necessary for security, dispute resolution, or legal compliance.
Uploaded documents, identity photos, waivers, call or AI records and work logs follow the purpose and account-deletion rules in this policy. We do not claim a single retention period for all of them. Local cached copies and pending work can remain on a device separately from server records; removing server data does not remotely erase a downloaded copy or an independent business record. Providers may keep restricted backup, security, transaction or legally required records under their applicable retention obligations. Those copies must remain protected and cannot be used to recreate an active profile contrary to a completed deletion request.
Tap and its providers may process information in the United States and other places where they operate. Applicable protections and transfer requirements apply even when information is processed outside your state or country.
Tap uses safeguards designed to protect information, including authenticated access, tenant separation, access controls, encrypted provider connections, logging, rate limits, and provider-managed payment systems. No online service can guarantee absolute security, so users should also protect their login credentials and devices.
8. Your choices and privacy rights
Depending on where you live and the nature of your relationship with Tap, you may have rights to confirm processing, request access, correction, deletion or a portable copy of personal information, and to opt out of sale, targeted advertising, sharing for cross-context behavioral advertising, or profiling used for legally significant decisions where applicable. These legal categories can differ from ordinary use of those words. You can also withdraw consent to processing that requires consent. We do not treat acceptance of this policy as a waiver of those rights.
You may also update communication preferences, unsubscribe from marketing email, opt out of eligible SMS messages, remove Wallet passes, or contact the business directly about information it controls through its Tap account.
Where asset-sharing controls are available, you may view or change which participating businesses or networks are authorized to access your asset or service-history records and may revoke future access. Revocation applies prospectively: it may stop future access through Tap, but it does not necessarily erase records a business lawfully received before revocation, records the business independently collected during service, or records Tap or the business must retain for legal, security, warranty, accounting, or dispute purposes.
Users with Tap accounts may request deletion of their account and associated personal information from More → Delete account & data in the business app, Account & privacy in the personal app, or through our public Account Deletion page. The web page also accepts requests without an installed app or an active sign-in. Choose the personal Tap account or business/staff/contractor login you want deleted. A signed-in request identifies that account; an unsigned request requires ownership verification using information already associated with the account before we delete anything. No separate call or support email is required to submit the request.
We process account deletion within 30 days and provide a completion notice by email or text, plus a private request-status receipt. We explain any identity-verification or legally required delay. Deletion removes the selected account and login credentials, saved personal items and preferences, account-associated AI conversation history, personal rewards and account-linked user-submitted content. Deleting one login does not close a shared business or erase other people's accounts.
Records required by law, such as transaction/tax, employment, rental/waiver or service records, and limited records necessary for security, fraud prevention or an active dispute, may be retained only for the applicable obligation or necessary period. The completion notice identifies any retained categories, their basis and retention period. Retained records are not used as an active personal Tap profile. We retain the detailed deletion request and private status receipt for 90 days after completion, then remove them.
We review Tap-managed personal subscriptions and pending checkouts before completing deletion. Subscriptions billed by Apple or Google must be managed through that store; account deletion does not automatically refund a purchase or terminate an independent service agreement with a participating business. A business may separately hold records it collected independently and is legally required to maintain; contact that business for its privacy process.
To make another privacy request, including an applicable advertising or sale opt-out, email support@example.com with the right you want to exercise and enough information to locate your records. We may verify your identity or an authorized agent's authority using information relevant to the request; do not email an identity document or sensitive credentials unless we provide a secure method. We respond within the deadline required by applicable law, explain any permitted extension or denial, and provide requests without charge except where a lawful exception allows a fee. We do not unlawfully discriminate against you for exercising a privacy right.
If we deny a request, you can appeal by emailing the same address with the subject "Privacy appeal" and identifying the request. We will review it and explain the result within the applicable legal deadline. If an appeal is denied, we will provide information about contacting the appropriate regulator where required, including the Texas Attorney General for applicable Texas requests.
9. Children
Tap is intended for businesses and general consumer use, not as a service directed to children under 13. Children under 13 must not create an independent Tap account. A participating business may hold information supplied by a parent or guardian for a minor's authorized rental, waiver or service; the business must meet applicable age, notice and parental-consent requirements. If you believe information about a child was collected improperly, contact us so we can investigate and take appropriate action.
10. Changes to this policy
We may update this Privacy Policy as Tap's features, providers, or legal obligations change. When we make material updates, we will post the revised policy with a new “Last updated” date and may provide additional notice when appropriate.
11. Contact us
For privacy questions, requests, or concerns:
For general product or account support, visit Tap Support.