Privacy Policy

Account information: when you sign up we collect your email address through our authentication provider, Privy. We do not store your password.

Creator content: the Moments you create — including headlines, copy, destination links, images, and theme settings.

Payment information: if you subscribe to a paid plan, payments are processed by Stripe. We receive limited billing details (such as subscription status and customer identifiers) but never store your full card number.

Analytics data: when a fan views a Moment, we record events such as views, CTA taps, skips, and dwell time, along with approximate location (country/city derived from IP address), device and browser type, and the referring source. We use this to give creators performance insights.

Cookies and local storage: we use essential cookies and similar technologies to keep you signed in and to operate the service.

To provide, maintain, and improve the TapNext service.

To authenticate you and secure your account.

To process subscriptions and billing.

To generate analytics and insights for creators about their own Moments.

To send you service and account emails, and — if you have not opted out — product update and engagement emails.

We share information with service providers who help us run TapNext, including Privy (authentication), Supabase (database and hosting), Stripe (payments), Resend (email delivery), and Vercel (application hosting). These providers process data on our behalf under their own terms.

We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of TapNext, our users, or the public.

We do not sell your personal information.

We retain account and creator content for as long as your account is active. Analytics history is retained according to your plan: 30 days on the Free plan, 90 days on Creator, and for the life of the account on Pro.

When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal or accounting purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us at the address below.

If you are in the EEA/UK, our legal bases for processing include performance of our contract with you, your consent, and our legitimate interests in operating and improving the service. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know and the right to delete.

We use industry-standard safeguards to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

TapNext is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them.

TapNext is operated from the United States and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers.

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes may be communicated to you directly.

If you have questions about this Privacy Policy or your information, contact us at privacy@tapnext.link.