Privacy Policy — Got It Tap

This Privacy Policy explains how Got It Tap (“Got It Tap,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you visit gotittap.com, view a Got It Tap NFC profile, sign up for an account, or purchase a Got It Tap card, wristband, or subscription. By using Got It Tap, you agree to the practices described below.

1. Information We Collect

1a. Information you give us directly

Account info: email address, display name, username, optional profile photo, optional bio, optional company and job title.
Profile content you publish on your tap profile: links you choose to share (website, social media, payment handles, calendar links, phone numbers, email addresses, etc.), cover image, headline, location.
Shipping info when you order a physical card or wristband: name, mailing address, phone number.
Contact requests when someone uses the “Save Contact” feature on your profile: their name, phone, email, and any optional notes they include.

1b. Information from Google when you sign in with Google

If you choose to sign in with Google, Google sends us only the basic OAuth profile fields you authorize on the consent screen:

Your Google account email address
Your name as it appears on your Google account
Your Google profile picture (URL only — we don’t copy or re-host the image)
A unique Google account identifier we use only to recognize you as a returning user

We do not request or receive access to your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service. We never receive your Google password.

1c. Information collected automatically

Tap analytics: when someone taps a Got It Tap card and views a profile, we record the timestamp, the card code, the country/region/city derived from the visitor’s IP address (the IP itself is one-way hashed and discarded), and the user agent string. This is shown to the profile owner as aggregated insights.
Standard server logs: request URLs, response codes, and basic browser metadata, retained for up to 30 days for security and debugging.

1d. Payment information

All payments are processed by Stripe. We never see, store, or transmit your full card number, CVV, or bank account details. We do receive a Stripe customer identifier and basic billing details (email, billing address, last four digits of the card) for receipt and subscription-management purposes.

2. How We Use Your Information

Create and operate your Got It Tap account and public profile pages.
Render your profile when someone taps your NFC card or visits the link.
Process orders for cards and wristbands and ship them to the address you provide.
Bill paid subscriptions and send receipts and renewal notifications.
Send you transactional email about your account (sign-in links, password changes, order confirmations, shipping updates).
Show profile analytics to you (the profile owner).
Improve the product, debug issues, and prevent abuse.
Comply with our legal obligations.

We do not sell your personal information. We do not use your information to train any AI model. We do not show you third-party advertising.

3. Who We Share Information With

We share information only with the third-party processors that are required to operate the service:

Stripe (payment processor): processes card payments and subscription billing.
Google (only if you sign in with Google): handles the OAuth handshake.
our database and authentication provider: stores your profile, links, and account credentials.
our hosting provider: serves the Got It Tap website.
our transactional email provider: sends sign-in links, receipts, and order confirmations.
SmartScale CRM (order fulfillment): receives basic order info (name, email, mailing address, SKU) so our fulfillment team can ship your card and follow up about your order.

We may also disclose information if we are required to by law, legal process, or a valid government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Got It Tap, our users, or the public.

4. Public Profile Content

Your Got It Tap profile page (everything at the URL gotittap.com/c/<your-code>) is publicly accessible by design — that’s the whole point of an NFC tap card. Anyone with your card, wristband, or profile link can view the name, photo, headline, bio, and links you have chosen to publish. Do not put information on your profile that you would not want a stranger to see.

5. Data Retention

Account and profile data: retained while your account is active.
If you delete your account, we delete your profile data within 30 days. Backups are retained for an additional 60 days and then permanently deleted.
Order/shipping records and payment receipts: retained for up to 7 years to comply with tax and accounting requirements.
Aggregated, non-identifying analytics may be retained indefinitely.

6. Your Rights

You can, at any time:

Access or update your profile data from your account dashboard.
Disable or unpublish your profile.
Request a copy of all data we hold about you.
Request that we delete your account and all associated personal data.
Withdraw consent for marketing communications (though we will continue to send transactional messages necessary to operate your account or fulfill an order).

To exercise any of these rights, email support@gotittap.com. We respond within 30 days.

7. Children

Got It Tap is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us at support@gotittap.com and we will delete the account.

8. Cookies

We use a small number of cookies, all strictly necessary to operate the service (signing you in, keeping you signed in, and remembering your theme preference). We do not use third-party tracking or advertising cookies.

9. International Visitors

Got It Tap is operated from the United States. If you visit from outside the U.S., information you provide will be transferred to, stored in, and processed in the United States.

10. Security

We use industry-standard technical and organizational measures to protect your data, including HTTPS encryption in transit, encryption at rest by our database provider, role-based access controls, and routine security audits. No system is perfectly secure, but we work hard to protect what you give us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will post the updated policy at this URL and update the “Effective date” at the top. Continued use of Got It Tap after a change constitutes acceptance of the updated policy.

12. Contact Us

Questions, requests, or complaints about this Privacy Policy or our handling of your data:

Email: support@gotittap.com
Mailing address: Smart Scale Consulting, Texas, USA