Privacy Policy

This Privacy Policy explains what Taptico Holdings, LLC, operating as TapticoAI (“TapticoAI,” “we,” “us”), based in Atlanta, Georgia, collects when you use TapticoOS and the TapticoAI workspace (the “Service”), and what we do with it.

The short version: your business data is yours, it is walled off from every other customer, we never sell it, and we use it only to run the Service for you.

1. What we collect

• Account information. When you sign in with Microsoft, Google, or your work email, we receive your name, email address, and basic profile information from that provider.
• Workspace and business data. The information you pour into the Service: company facts, documents, preferences, decisions, meeting notes and transcripts, goals, and the work the Service produces for you.
• Payment information. Payments are processed by Stripe. We never see or store your full card number; we receive only confirmation details (such as the last four digits and billing contact) needed to manage your subscription.
• Usage data. How the Service is used in your workspace: features touched, work items created, credits consumed, and technical logs (device, browser, IP address, timestamps) needed to operate and secure the Service.
• Communications. If you email or message us, we keep that correspondence.

2. How we use it

We use what we collect to:

• operate, maintain, and improve the Service for you;
• store your business knowledge so the Service actually knows your business;
• turn your meetings and conversations into tracked, assigned work;
• process subscriptions, add-ons, and credits;
• report to you on what shipped, what's next, and what it cost;
• secure the Service, prevent abuse, and debug problems;
• meet legal obligations.

We do not use your workspace data to advertise, sell it to anyone, or use one customer's data to benefit another customer. Our public website uses ad measurement pixels; see section 4B.

3. AI model providers (bring your own key)

The Service runs on AI model providers you connect with your own API key (for example OpenAI or Anthropic). When the Service works for you, relevant parts of your data are sent to the provider you chose, under your own agreement with them. Your choice of provider is yours; their handling of data sent through your key is governed by your terms with them, not this policy.

4. Who we share with

We share data only with the service providers that help us run the Service, and only as needed:

• Cloud hosting and infrastructure (our hosting and database providers), which store and serve the Service;
• AI model providers, as described above, under your own agreement;
• Payment processing, to bill you;
• Sign-in providers (Microsoft, Google), to authenticate you.

We require these providers to protect your data and use it only for the services they give us. We may also disclose data if the law requires it, to protect rights and safety, or as part of a merger or sale of the business - in which case this policy's commitments travel with the data.

4A. Heidi text messaging

Heidi is Taptico Holdings, LLC's assistant. Nick Tapp is the initial user; clients may opt in during onboarding for non-marketing support, onboarding questions and requested follow-ups. Consent is optional. Message frequency varies. Message and data rates may apply.

• Consent: we record an explicit verbal yes during onboarding or retain written consent from the separate optional form, signed consent or email. The script and form are at taptico.ai/heidi. A general question permits a reply about that request only; it does not enroll you for future messages.
• Help and cancellation: text HELP or email [email protected]. Text STOP to unsubscribe. We send at most one confirmation and stop further messages until you give renewed consent.
• Records: we keep your consent details, number or protected identifier, consent wording/version, date, source, withdrawal and re-enrollment events, and delivery receipts. Written and verbal consent evidence is restricted to the team. SMS does not unlock private memory, files or actions. Do not send a passphrase or sensitive information.
• Providers: Twilio processes messages for delivery. Our model provider receives the current text and public instructions to produce a reply; the SMS path has no private conversation history or tools. This SMS release does not process MMS or voice memos.
• No sale or marketing sharing: mobile numbers and messaging consent are not sold, rented or shared with third parties or affiliates for marketing or promotion. Access by service providers is limited to operating and securing this messaging service.

Request access, correction or deletion of your SMS records at [email protected]. We retain consent and withdrawal evidence as needed to honor your preferences and meet recordkeeping obligations.

4B. Ad measurement on our website

Our public website (taptico.ai) uses measurement pixels from Meta (Facebook and Instagram) and OpenAI (ChatGPT Ads). A pixel is a small piece of code that sets a cookie in your browser and tells the ad platform which pages you visited and which actions you took, such as starting a signup or clicking to email us. We use this to learn which ads work and to reach people who are likely to be interested. This applies to the website only, never to your workspace data.

• What is sent: page views, the actions above, your IP address, browser details, and cookie identifiers. If you give us your email during signup, our server may send a hashed (scrambled, one-way) version of it so the platform can match the action to an ad. We never send raw email addresses or phone numbers this way.
• Who receives it: Meta Platforms, Inc. and OpenAI, under their own privacy policies.
• How to opt out: for Meta, adjust your ad preferences at facebook.com/adpreferences; for OpenAI, use the ad and data controls in your ChatGPT account settings. You can also block these cookies in your browser or with a tracker-blocking extension. Blocking them does not affect the Service.

5. Data isolation and security

Your workspace data is logically isolated from every other customer. Access inside TapticoAI is limited to the people and systems that need it to run the Service, and consequential external actions stay behind a human approval gate. No security measure is perfect; if a breach affects your data, we will notify you without unreasonable delay.

6. Retention and deletion

We keep your data while your workspace is active. You may delete content or request full deletion at any time by emailing us. After your workspace closes, we keep your data available for export for 60 days, then delete it from production systems, with backups clearing on their normal cycle. We may keep records the law requires (for example, payment records).

7. Your choices and rights

You can access, correct, export, or delete your data from your workspace or by emailing [email protected]. Depending on where you live (including EU/UK, California, and other states), you may have additional rights - to object to or restrict certain processing, or to portability. Email us and we will honor what the law gives you. We will not discriminate against you for exercising privacy rights.

8. International use

We operate from the United States. If you use the Service from elsewhere, your data will be processed in the US, and you consent to that transfer.

9. Children

The Service is for businesses and adults. We do not knowingly collect data from anyone under 18.

10. Changes

If we change this policy, we will post the new version here and, for material changes, give at least 30 days' notice by email or in-product notice before it takes effect.

11. Contact

Taptico Holdings, LLC, operating as TapticoAI
Atlanta, Georgia
[email protected]