1. Who we are
TapBridg (“TapBridg,” “we,” “us”) is a platform that connects physical places and objects to digital experiences. A physical TouchPoint (such as an NFC tag or QR code) resolves to a reusable digital Experience when someone taps or scans it. This Privacy Policy explains how we handle information across our administrative application, our public tap experiences, and our supporting services.
The data controller for the purposes of this policy is TapBridg Co., located at Palma Real 243 San Pedro Tampico Mexico. For questions, contact legal@tapbridg.com.
2. Key concepts
- TouchPoint — a persistent physical identity (the object) that a visitor taps or scans.
- Experience — the reusable digital behavior a TouchPoint triggers (for example a menu, a request form, a review link, or a check-in).
- Profile — the ownership and management boundary (an individual or an organization) that a customer manages TouchPoints and Experiences under.
- User — an authenticated human who signs in to manage a Profile.
- Interaction — a physical-to-digital event recorded when a visitor engages a TouchPoint (for example an open, a request, a check-in, or a capture).
3. Information we collect
Information you provide
- Account information for Users: name (optional), email address, and an authentication credential (a password you set, or a Google sign-in — see section 6).
- Profile and organization details you enter, such as Profile name, type (individual or organization), timezone, and locations.
- Experience configuration you create, such as menus, request options, review destinations, contact links, and capture form fields.
- Content submitted by visitors through your Experiences, such as a request ("call waiter"), a check-in, or information entered into a capture form. You configure what is collected.
Information collected automatically
- Interaction records generated when a TouchPoint is engaged, including the TouchPoint's public identifier, the Experience served, and a timestamp.
- Device and technical data such as IP address, browser type, and general device information, used for security and to make experiences work.
- Usage and analytics data about how Experiences perform (for example counts of opens, requests, check-ins, and captures).
4. How we use information
| Purpose | Examples |
|---|---|
| Provide the service | Resolve a tap to the right Experience; deliver requests and captures. |
| Manage accounts | Authenticate Users; scope access to the correct Profile. |
| Analytics and improvement | Show how the physical network performs; improve reliability. |
| Security and abuse prevention | Detect fraud, protect accounts, and enforce our terms. |
| Communications | Send service messages and, where permitted, product updates. |
| Legal compliance | Meet obligations and respond to lawful requests. |
Where required by law, we rely on a lawful basis for each purpose, such as performing our contract with you, our legitimate interests, your consent, or compliance with a legal obligation.
5. Physical interactions and context
A distinctive part of TapBridg is that interactions happen in a physical context. When a visitor engages a TouchPoint, we may associate the interaction with contextual details such as the TouchPoint, its location (as configured by the managing Profile), the Experience served, and a timestamp. If a visitor is signed in, an interaction may be associated with their account. We do not use this context to identify private individuals beyond what is necessary to deliver and measure the Experience.
6. Google sign-in
If you choose “Continue with Google,” Google provides us a signed identity token containing your Google account identifier and email address so we can create or sign you in to your TapBridg account. We verify that token and do not receive your Google password. Your use of Google sign-in is also subject to Google's own privacy policy. You can stop using Google sign-in at any time by signing in with an email and password instead.
7. How we share information
We share information only as described here:
- With the managing Profile. Content submitted through an Experience (such as a request or capture) is made available to the Profile that owns the TouchPoint.
- With service providers that process data on our behalf (for example hosting, storage, and email delivery), under contracts that limit their use of the data.
- With Connections you configure, such as sending a request to your email or a webhook endpoint you provide.
- For legal reasons, when required by law or to protect rights, safety, and the integrity of the service.
- In a business transfer, such as a merger or acquisition, subject to this policy.
We do not sell personal information.
8. Data retention
We keep information for as long as needed to provide the service and for legitimate business or legal purposes, after which it is deleted or anonymized. Retention periods vary by data type and plan; see We retain information for as long as necessary to provide the service and comply with applicable legal, accounting, or reporting obligations. Contact legal@tapbridg.com for specifics.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. To exercise these rights, contact legal@tapbridg.com. You may also have the right to lodge a complaint with a supervisory authority.
10. Security
We use technical and organizational measures designed to protect information, including encrypted transport and access controls scoped to a User's Profile membership. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International transfers
We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for such transfers.
12. Children
TapBridg is not directed to children under the age of 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us so we can address it.
13. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new effective date and, where appropriate, provide additional notice.
14. Contact us
Questions about this policy or our data practices can be sent to legal@tapbridg.com, or by mail to Palma Real 243 San Pedro Tampico Mexico.