TapRevView pricing

Privacy Policy

1. Introduction

TapRev ("we", "us", "our") operates a NFC-powered customer engagement platform that helps businesses deploy, track and manage interactive guest experiences. This Privacy Policy explains how we collect, use, disclose and protect your data when you use our platform (the "Service").

By creating an account or using the Service, you agree to the practices described in this policy.

2. Data We Collect

2.1 Account Data

When you register, we collect your email address, password (hashed), full name, and role. Business accounts may also include business name, category, logo, contact email, contact phone and website.

2.2 Business Data

You may provide business information including locations, units/spaces, NFC tag assignments, public page content, branding assets, and team member details. This data is associated with your business and visible to your team members.

2.3 Guest Interaction Data

When a customer taps an NFC tag or scans a QR code, we collect non-personal scan analytics: scan type (NFC/QR), timestamp, approximate country (derived from IP), user agent (browser/device type), and the page displayed. We do not collect personal information from your guests unless they voluntarily submit a form (e.g. contact form).

2.4 Technical Data

We collect server logs, IP addresses, and usage telemetry to operate, secure and improve the Service. Analytics data is only collected with your consent as managed through our cookie consent system.

2.5 Billing Data

If you subscribe to a paid plan, we collect billing information processed securely by our payment provider (Stripe). We do not store full card numbers on our servers.

3. How We Use Your Data

  • Provide the Service: Create and manage your business account, locations, units, NFC tags and public pages.
  • Analytics: Provide scan analytics dashboards so you can measure engagement.
  • Communication: Send service notifications, trial alerts, billing notices and support responses.
  • Security: Detect, prevent and respond to security, fraud and abuse issues.
  • Improvement: Analyse usage patterns to improve features and performance (only with consent).
  • Legal Compliance: Fulfil legal obligations and enforce our Terms & Conditions.

4. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

  • Contract performance — processing necessary to provide the Service you requested.
  • Legal obligation — compliance with applicable laws and regulations.
  • Legitimate interests — platform security, fraud prevention and service improvement.
  • Consent — analytics and marketing communications. You can withdraw consent at any time.

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Service providers — hosting, email delivery, payment processing (Stripe), and analytics tools, under data processing agreements.
  • Legal authorities — when required by law, court order, or to protect our rights and safety.
  • Business successors — in connection with a merger, acquisition or asset sale, with notice where required.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account termination, we retain business data for up to 90 days for recovery purposes, then permanently delete it unless legal retention obligations apply. Scan analytics are retained according to your plan's analytics history limit.

7. Your Rights (GDPR / Data Subject Rights)

You have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — limit our processing of your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — withdraw consent for analytics at any time via cookie settings.

To exercise these rights, contact us at privacy@taprev.com. We respond within 30 days.

8. Public Guest Pages

Your customers may access public guest pages via NFC or QR without logging in. These pages display business content (welcome text, facilities, contact details) and do not require guests to provide personal information. Scan events are logged anonymously for analytics purposes.

9. Data Security

We implement industry-standard security measures including:

  • Encrypted data transmission (TLS/HTTPS).
  • Hashed passwords and secure token-based authentication.
  • Row-level security (RLS) enforcing tenant isolation — businesses can only access their own data.
  • Server-side validation and abuse protection on all public endpoints.
  • Regular security reviews and access audits.

10. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place, including standard contractual clauses and provider data processing agreements.

11. Children's Privacy

The Service is intended for business use. We do not knowingly collect personal information from children under 16. If you believe we have collected such data, contact us for deletion.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy questions or requests, contact us at:

  • Email: privacy@taprev.com
  • Through the in-app Contact Sales form

Last updated: September 2026