Legal
Privacy Policy
Last updated: October 16, 2026 · Contact: support@tapmy.store
This Privacy Policy explains how Tapmy (“Tapmy”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use tapmy.store, the Tapmy dashboard at app.tapmy.store, stores that creators publish on Tapmy, and the Tapmy app for iPhone and iPad (together, the “Service”).
If you have questions about this policy or your data, contact us at support@tapmy.store.
1. Who this policy covers
This policy applies to three groups of people:
- Creators — people who create a Tapmy account to build a store, sell products or services, run a community, or use our AI tools.
- Buyers and store visitors — people who visit a Tapmy store, chat with a creator’s AI Clone, submit a form, book a session, buy something, or join a community.
- Website visitors — people who browse tapmy.store.
For creator accounts and our own website, Tapmy decides how personal information is used. When a buyer shares information with a creator’s store (at checkout, in a booking or contact form, or in a community), that creator decides how the information is used, and Tapmy processes it on the creator’s behalf to run the store. Creators are responsible for telling their buyers how they use that information. If you have a question about a specific store, contact the creator first; we will help where we can.
2. Information you give us
Account information
- Email address and password. We store passwords only as a one-way hash.
- First name, last name, and, if you add it, phone number.
- If you sign in with Google: your name, email address, and basic profile information that Google shares with us.
- If you sign in with Apple: the name and email address you choose to share (which may be an Apple private relay address) and an Apple user identifier.
Store and onboarding information
- What you tell us about your business, such as your niche, audience, offer, tone of voice, and location.
- Your profile photo and the content you add to your store: text, images, videos, files, products, prices, courses, booking settings, and community content.
Social profiles you share with us
During onboarding you can enter your Instagram username or a YouTube or TikTok profile link. If you do, we retrieve publicly available information from that profile — such as your name, bio, profile photo, location, recent posts or videos, and, for YouTube, video subtitles — through a data provider, and use it to draft your store. This step is optional, and you can skip it.
If you connect social accounts to publish content from Tapmy (for example Instagram, TikTok, YouTube, Facebook, X, Threads, or LinkedIn), we receive the account name, display name, and profile picture, and we send the posts you schedule to that network through our publishing partner.
Payments and payouts
- When you subscribe to a paid plan, Stripe processes your payment. We store your Stripe customer ID and subscription status, not your full card number.
- When you connect Stripe to sell, we receive your Stripe account ID and account status (for example, whether charges and payouts are enabled, your business type, and the account email). Your bank and identity details go directly to Stripe.
- If you join our affiliate program, we and our affiliate partner Rewardful process your name, payout email, payout method, and referral activity.
Conversations and support
- Messages and files you send to Tapmy’s AI agent in the dashboard.
- Messages you send to our support team, for example at support@tapmy.store.
4. Information collected automatically
- Device and usage information: IP address, device type, operating system, browser, language, pages viewed, clicks, referring page, and campaign (UTM) parameters.
- Store analytics: when someone views a Tapmy store, we record approximate location (country, region, and city), device, browser, operating system, page, and a one-way visitor identifier created on our servers. We do not store the raw IP address for store page views.
- Cookies and similar technologies, described in the Cookies section below.
5. The Tapmy app for iPhone and iPad
The Tapmy app opens the Tapmy dashboard (app.tapmy.store) inside the app, so everything in this policy applies to the app in the same way. The app also uses these device features:
- Push notifications: if you turn them on, we store your device’s push token and use Apple Push Notification service to tell you when you make a sale. You can turn notifications off at any time in iOS Settings.
- Microphone and speech recognition: used only when you tap dictation in the message field. Your speech is converted to text by Apple’s speech recognition, which may run on your device or on Apple’s servers. Tapmy receives only the text you choose to send; we do not record or store audio.
- Sign in with Apple and Google: Sign in with Apple uses Apple’s native sign-in sheet. Google sign-in opens in Apple’s secure browser sheet.
- Files and photos: when you upload an image or file, iOS lets you pick specific items. The app does not get access to your whole photo library.
The app does not use Apple’s in-app purchase system. When you upgrade your plan or connect Stripe, the app opens Safari, and Stripe processes the payment. The app does not access your contacts or precise location.
6. How we use information
We use personal information to:
- Create and secure your account and keep you signed in.
- Build, host, and display your store, and deliver products, bookings, courses, and community access to buyers.
- Process payments, subscriptions, platform fees, refunds, disputes, and affiliate commissions.
- Power AI features, such as drafting your store, writing product copy, generating images, running the AI agent, and answering store visitors through AI Clone.
- Send transactional messages, such as account verification, password resets, purchase confirmations, community invitations, and sale notifications.
- Send product news and tips to people with a Tapmy account (you can unsubscribe at any time).
- Provide support and respond to your requests.
- Measure and improve the Service, including analytics on how people use tapmy.store, the dashboard, and stores.
- Measure our advertising campaigns.
- Prevent fraud, spam, and abuse, enforce our Terms of Service, and comply with legal obligations.
We do not sell personal information.
7. AI features
Tapmy uses AI models from third-party providers to run its AI features. When you use them, we send the information needed for that task to the provider — for example, your messages to the AI agent, your store and business details, product information, images you ask us to edit, or a visitor’s message to your AI Clone together with the bio, expertise, and FAQ you wrote for it.
Our AI providers include OpenAI, OpenRouter (which routes requests to models from providers such as Google and OpenAI), and Braintrust. They process this information to return a result to us under their API terms. We do not use your content to train our own AI models, and we do not sell it.
AI-generated content can be inaccurate. Creators should review AI output before publishing it.
9. Payment processing
All payments on Tapmy — creator plan subscriptions and buyer purchases — are processed by Stripe. Buyer payments go to the creator’s own Stripe account through Stripe Connect. Tapmy does not store full card numbers or bank account details. Stripe handles that information under the Stripe Privacy Policy.
10. Google API disclosure
Tapmy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google sign-in
If you sign in with Google, we receive your name, email address, and basic profile information, and use them only to create and secure your account.
Google Calendar (when available)
If you connect Google Calendar for bookings, we request the calendar.freebusy, calendar.events, and userinfo.email scopes. We use this access only to:
- Check busy times so your booking page shows accurate availability and prevents double-booking.
- Add new bookings to your calendar, including a Google Meet link if you enable it.
We store only what we need to keep the connection working: your Google account email, the calendar you chose, booking event IDs, a short-lived access token, and a refresh token encrypted with AES-256-GCM. We do not sell Google user data, share it with advertising platforms or data brokers, or use it to train AI models. When you disconnect Google Calendar, we revoke access at Google and delete the stored tokens.
12. Emails we send
We send transactional emails such as account verification, password resets, purchase confirmations, and community invitations. You cannot opt out of these while you have an account, because they are needed to provide the Service.
We may also send product news, tips, and offers to people with a Tapmy account. Every marketing email includes an unsubscribe link. Our emails may use open and click tracking to measure delivery and engagement.
13. Data retention
- We keep account and store information for as long as your account is active.
- When you delete your account, we delete or close your stores as described in the next section.
- While a buyer still has access to a closed store, we keep the purchase, customer, and course-progress records and the files those sold products need. A purchase still counts as access when it is completed, won in a dispute, or in an open dispute, and it is not a test purchase. When every such purchase has been refunded or lost in a dispute, we delete that closed store and its remaining files. We may still keep records for as long as needed to handle refunds and disputes and to meet accounting, tax, and other legal obligations. Stripe keeps its own payment records under its policies.
- Short-lived technical logs, such as community activity streams, are deleted after 7 days.
- We may keep information in encrypted backups for a limited period before it is overwritten, and we may keep information that has been aggregated or de-identified so that it no longer identifies you.
14. Deleting your account
You can delete your account at any time on the web or in the Tapmy app: open Settings, choose Profile, select Delete Account, and confirm. You choose a reason, and you can add a note.
We store that reason, your note if you write one, whether the account had a paid plan, and how many stores it had. We do not store your email on that record.
We cancel your Tapmy plan and any community subscriptions before the account is removed. If you have an upcoming confirmed booking, we will not delete the account. Cancel those bookings, refund any paid ones, and try again.
A store with nothing sold is deleted, including its pages, products, files, leads, conversations, and the files in storage.
A store that still has buyers with access becomes a closed store. It has no owner, no public address, and no storefront, and it cannot take new sales. Buyers keep the downloads and courses they bought, including receipt download links and course access in My Purchases. My Purchases shows the store name with no photo and no link to the store.
A closed store keeps the sold products, marked archived, the files and images those products need, and the purchase, customer, and course-progress records behind them. Pending checkouts on those products stay so a late payment can still be delivered.
A closed store does not keep unsold products, the profile and avatar, other files, AI conversations, contacts, analytics, documents, or the community. Community access ends. Bookings end. A product delivered as a link, including a webinar or challenge sold as a link, stays as that link. Whether the link still works is up to the creator.
Some information may remain after deletion:
- Purchases you made as a buyer on other people’s stores are not deleted. They stay in those creators’ records, linked to the email address you used at checkout.
- Information we must keep for legal, tax, fraud-prevention, or dispute reasons, kept only for as long as required.
An admin can delete an account through the same process. An admin deletion is not blocked by upcoming bookings.
You can also ask us to delete your account by emailing support@tapmy.store from the email address on your account. If you only bought from a store and never created a Tapmy account, contact that creator or us.
15. Security
We use technical and organizational measures to protect personal information, including encrypted connections (HTTPS), hashed passwords, encrypted third-party access tokens, access controls, and bot protection. No system is completely secure, so we cannot guarantee the absolute security of your information.
16. Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy of it.
- Correct inaccurate information. You can update most account details in Settings.
- Delete your information.
- Object to or restrict certain processing.
- Withdraw consent where we rely on it.
- Opt out of marketing emails using the unsubscribe link.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your information because it is needed to provide the Service under our Terms, because of our legitimate interests in running, securing, and improving the Service, because you have given consent, or because the law requires it. You can also lodge a complaint with your local data protection authority.
If you live in a US state with a consumer privacy law, you can ask to know, access, correct, or delete your personal information. We will not discriminate against you for exercising these rights.
To make a request, email support@tapmy.store. We may need to verify your identity, and we will respond within the time required by applicable law. If your request is about information you gave to a creator’s store, we may refer you to that creator.
17. International data transfers
Tapmy and its service providers process information in the United States, the European Union, and other countries. Where the law requires it, we use safeguards such as the European Commission’s Standard Contractual Clauses for these transfers.
18. Children’s privacy
The Service is not directed to children under 13, or under the minimum age required in their country. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
19. Third-party links and stores
Tapmy stores and creator profiles may link to other websites and services. Their privacy practices are their own, so please review their policies before you share information with them.
20. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows the latest version. If we make material changes, we will tell you by email or with a notice in the Service before they take effect.
21. Contact us
For questions or requests about this Privacy Policy, contact Tapmy at support@tapmy.store.