This policy covers people who create an account, visitors who view a TapNest page, and anyone who signs up for the newsletter or sends us a message through the contact form.
When you create an account we store your name, email address and phone number and, if you set one, a password (hashed, never stored in readable form). If you sign in with Google we store your Google account id and the email address Google reports.
Your page holds whatever you choose to publish: display name, username, bio, country, photo or logo, links, social accounts, and contact details such as an email address, phone number or WhatsApp number. Anything you publish on your page is public by design until you unpublish it.
Business accounts may also answer optional questions about the organisation, such as its industry, size, branches and the software it uses. These answers are self-declared and optional. The company behind TapNest also makes ERP software, and we use these answers to understand whether it might be relevant to your business.
Images you upload, such as your photo, logo, link icons or QR code logo, are kept in our file storage so your page can show them.
If you subscribe to the newsletter we store your email address, your language and when you subscribed or unsubscribed. No newsletter emails are being sent yet.
If you use the contact form we store your name, email address, your message, the topic you chose, your language and, if you give them, your phone number and company. We do not store your IP address. We keep a one-way keyed hash of it so we can recognise repeated abuse; the address cannot be read back from it. Messages are read by our team in an internal inbox and answered from a normal email account.
When someone views a page or opens one of its links we record the event, when it happened, the referring website's hostname and a broad device category (mobile, tablet or desktop).
We do not store visitors' IP addresses or full browser details in analytics. To tell repeat views apart we derive a one-way daily fingerprint from the visitor's IP address, browser string and the current date; it changes every day and is not linked across days. We do not store a visitor's location.
We set only cookies needed for the site to work: a session cookie that keeps you signed in, a security token that protects forms, and a cookie that remembers the language you chose. Page analytics use no cookies. See the cookie policy for details.
We do not use advertising or third-party tracking services, and we do not sell personal data. When a visitor follows a link on a page, the destination website sees that visit as it would any other.
You can edit or remove your links, social accounts, photo and business answers at any time, unpublish your page, and choose whether search engines may index it. You can unsubscribe from the newsletter with the link provided for that purpose.
This draft does not yet answer: which organisation is the data controller and under which law; how long analytics events, contact messages and newsletter sign-ups are kept; how to request a copy or deletion of your data; and whether there is a minimum age to use the service.