1. Information We Collect
We collect information needed to provide TapReview. The categories depend on how a person or business uses the service and may include:
- Account information, such as a user’s name, email address, authentication identifiers, and account status.
- Business profile information, including business name, contact details, website, branding, Google review destination, support details, notification preferences, and settings.
- Business-member, invitation, role, location, and technician information, including technician names and phone numbers entered by the business.
- Customer feedback and the information a customer chooses to submit, such as rating, message, name, phone number, or email address.
- Review-interaction events, including link visits, rating selections, Google destination clicks or redirects, private-feedback activity, timestamps, and session identifiers.
- NFC, QR, SMS, device, location, and technician attribution associated with a review interaction.
- SMS records, including the phone numbers involved in a review request, message identifiers, delivery status, opt-out status, click activity, and failure information. TapReview does not need the content of unrelated personal messages.
- Subscription and billing metadata, such as plan, subscription state, Stripe customer and transaction identifiers, and billing-period information.
- Hardware cart, order, customization, fulfillment, shipping, and tracking information.
- Basic technical, security, and diagnostic information generated when the service is used, which may include request timestamps, browser or device information, IP-derived logs maintained by infrastructure providers, and safe error reference identifiers.
2. How We Use Information
We use information to operate and secure TapReview; authenticate users; create and administer business workspaces; provide NFC, QR, and SMS review-request functionality; route customers to the correct business and location; receive private feedback; provide customer-interaction, device, location, and technician analytics; deliver and troubleshoot SMS messages; provide support; process subscriptions and hardware purchases; fulfill hardware orders; detect abuse, fraud, or security incidents; maintain records; and improve the reliability and usability of the service.
3. SMS and Mobile Information
Mobile information will not be sold or shared with third parties or affiliates for marketing or promotional purposes. TapReview does not sell mobile phone numbers or SMS consent information, and we do not provide them to other companies for their independent marketing.
We may provide mobile information to telecommunications carriers, Twilio, infrastructure providers, and other service processors strictly as necessary to operate, secure, support, and deliver TapReview’s messaging functionality. Those providers process information on our behalf or as required to provide their services; this operational processing is not permission for third-party marketing.
4. SMS Consent
TapReview’s current review-request workflow is intended for a customer who has received a service from a participating business. Before entering the customer’s number into TapReview, the business representative or technician must verbally ask whether the customer agrees to receive a one-time SMS follow-up containing a feedback or review link. The customer must explicitly agree. Declining the SMS does not affect the customer’s underlying service.
Participating businesses may not use purchased contact lists for this workflow. Businesses are responsible for obtaining and honoring legally sufficient consent and for entering a number only after the customer says yes.
5. Message Frequency
Message frequency varies based on service interactions. Customers generally receive no more than one review-request message per service interaction. Transactional responses relating to HELP, STOP, START, delivery, or support may also occur when requested or required.
6. Message and Data Rates
Message and data rates may apply. Charges depend on the customer’s mobile plan and carrier.
7. STOP and HELP
Reply STOP to opt out. Reply HELP for assistance. TapReview’s messaging workflow records opt-outs and prevents a participating business from sending another review request to an opted-out number through TapReview unless the customer validly resubscribes, such as by replying START. Carriers and messaging providers may also apply their own opt-out handling.
8. Service Providers
We use service providers to operate TapReview, including Supabase for authentication, database, and storage services; Stripe for payment processing and subscription records; Twilio for telecommunications and SMS delivery; Resend as the SMTP delivery provider configured through Supabase Auth; and Vercel for planned application hosting and delivery. Providers have their own roles, security practices, and privacy terms. We disclose information to them only as reasonably necessary for their services, legal compliance, safety, or security.
9. Google Services
TapReview may direct a customer to a participating business’s Google review page. Google operates its own services under its own terms and privacy practices, which TapReview does not control. A “Google Review Click” or redirect in TapReview means that TapReview observed the Google destination being opened; it does not mean a review was written, submitted, accepted, or published by Google.
10. Payment Data
Stripe handles payment-card processing. TapReview receives transaction, customer, subscription, payment-status, and order metadata needed to provide the service and reconcile purchases. TapReview does not intentionally store full payment-card numbers in its application database.
11. Data Retention
We retain information for as long as reasonably necessary to provide TapReview, administer accounts and subscriptions, maintain transaction and consent-related records, fulfill orders, resolve disputes, prevent abuse, meet legal obligations, and enforce agreements. Retention varies by the type of information and operational or legal need. We may retain limited records after account closure when reasonably required, and our service providers may maintain information under their own retention obligations.
12. Security
We use administrative, technical, and organizational safeguards designed to protect information, including authentication controls, tenant-based database access restrictions, server-only credentials, validation, and signed webhook verification. No online service can guarantee absolute security. Businesses and users must protect their credentials and promptly report suspected unauthorized access.
13. User and Business Rights
Depending on applicable law, a person may request access to, correction of, or deletion of certain personal information, or seek account-related assistance. We may need to verify the requester’s identity and authority. For customer information submitted on behalf of a participating business, that business may be the appropriate first contact because it controls the underlying customer relationship. Some information may be retained where permitted or required for security, transactional, legal, or recordkeeping purposes.
Email us at udblackstar@gmail.com.
14. Children
TapReview is not intended for children under 13, and we do not knowingly design the service to collect personal information directly from children under 13. If you believe a child has provided information through TapReview, contact us so we can review the request.
15. Changes to This Policy
We may update this Privacy Policy as the service, legal requirements, or operational practices change. The Last Updated date above identifies the current version. Material changes may also be communicated through the service or another appropriate channel.
16. Contact
For privacy questions, requests, or account assistance:
Email us at udblackstar@gmail.com.