Loading...
Loading...
Last updated: 2026-04-01
We collect information you provide directly (name, email, company, billing info), automatically (IP address, browser type, device info, usage patterns), and from third parties (payment processors, SSO providers). For HRMS features, your organization may store employee personal data which we process on your behalf.
We use your information to: provide and maintain the Service, process transactions, send service communications, improve our products, provide customer support, comply with legal obligations, and detect fraud or security issues. We do not sell your personal information.
Data is stored in Microsoft Azure data centers with SOC 2 Type II and ISO 27001 certifications. We implement encryption at rest (AES-256) and in transit (TLS 1.3), regular penetration testing, automated backups, and role-based access controls.
Each tenant's data is logically isolated using row-level security. Tenant data is never shared across organizations. Enterprise customers may opt for dedicated database instances for additional isolation.
Active account data is retained for the duration of your subscription. After cancellation, data is retained for 90 days for export purposes, then permanently deleted. Audit logs are retained for 2 years for compliance. Backup data is automatically purged after 30 days.
You have the right to: access your data, correct inaccuracies, delete your data, export your data (portability), restrict processing, object to processing, and withdraw consent. To exercise these rights, contact privacy@taptipm.com.
We use essential cookies for authentication and session management, functional cookies for preferences, and analytics cookies (with consent) to improve the Service. You can manage cookie preferences through our cookie consent banner. See our Cookie Policy for details.
We use trusted third-party services: Azure (hosting), Stripe (payments), SendGrid (email), Google Analytics (analytics). Each provider has their own privacy policy and maintains appropriate data processing agreements with us.
Data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.
The Service is not directed to children under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will promptly delete it.
We may update this policy periodically. Material changes will be notified via email at least 30 days before taking effect. The "Last Updated" date at the top indicates the most recent revision.
For privacy concerns, contact our Data Protection Officer at privacy@taptipm.com or TaptiPM Inc., 100 Innovation Drive, Suite 400, San Francisco, CA 94105.