Privacy Policy

Account and workspace information

We receive account identifiers, email address, display name, organization membership, role, and workspace details from our identity provider. Workspace owners and administrators also provide church, campus, presentation-area, keyword, and team configuration.

Billing information

Stripe processes checkout and payment-card information. Tap Route stores Stripe customer, subscription, plan, status, and billing-period identifiers, but does not store full payment-card numbers.

Customer-provided routing content

We store destination URLs, labels, keyword names, fallback URLs, and live-route history needed to operate and audit the service.

Tap activity

A public-route request may create an event containing the time, presentation area, selected keyword, resolved destination, browser or device user-agent, and a daily rotating one-way hash derived from the network address. Tap Route does not store the raw network address in its analytics table, although hosting and security providers may process network identifiers in ordinary request logs.

Connector information

The connector sends connection status, software version, a message-order identifier, the selected routing keyword, and a one-way representation of a slide identifier. It does not upload full slide notes.

Support communications

We keep messages and diagnostic details you choose to send so we can investigate, respond, and maintain a support history.

We use information to:

• authenticate users and enforce workspace permissions;
• resolve taps and maintain safe fallback behavior;
• pair, authorize, monitor, update, and revoke connectors;
• provide plan limits, billing, exports, and support;
• detect abuse, diagnose failures, and protect the service;
• measure aggregate product usage and improve reliability; and
• meet legal obligations and enforce our Terms.

We use essential session and security technologies needed for sign-in, checkout, and service operation. We do not use tap activity for third-party behavioral advertising.

We use service providers to operate Tap Route, including Clerk for identity, Stripe for billing, Vercel for hosting, Neon for database services, and Upstash for temporary routing and tap processing. They process information for us under their own terms and privacy commitments.

We may disclose information when reasonably necessary to comply with law, protect users or the service, investigate misuse, or complete a merger, financing, acquisition, or sale of assets with appropriate protections.

Tap Route sends a visitor to the destination URL selected by the customer. That third-party site receives the request and applies its own privacy policy. Tap Route is not responsible for how a customer's destination handles information.

We do not sell personal information.

Tap and route-change history is ordinarily retained for the period included with the selected plan: 30 days for Starter, 90 days for Ministry, and 365 days for Network.

When a subscription reaches its final canceled state, the workspace is scheduled for deletion after 30 days. During that window, the public route uses its saved fallback and the owner may request an export. Some billing, fraud-prevention, audit, backup, and legal records may be retained longer when reasonably necessary or required by law.

To request account or workspace deletion, email support@taproute.cc. We may need to verify that the requester is authorized to control the workspace.

Authorized users can review and correct much of their workspace configuration in the dashboard. Owners and administrators can export workspace data from Plan & billing. Depending on where you live, you may also have rights to ask for access, correction, deletion, restriction, objection, or portability.

Send a request to support@taproute.cc. We will verify the request and respond as required by applicable law. We will not discriminate against you for exercising a privacy right.

We use access controls, scoped connector credentials, encrypted transport, credential hashing, and service-provider safeguards. No system can guarantee absolute security. Notify us promptly if you believe an account or connector has been compromised.

Tap Route is a business service intended for adult workspace administrators and operators. It is not directed to children under 13, and we do not knowingly collect personal information from them through account creation.

We may update this policy as Tap Route changes. We will revise the effective date and provide additional notice when required.

Privacy questions: support@taproute.cc