Privacy Policy

1. Information we collect

We collect information you give us and information generated when you use our services:

• Account & business details - your name, business name, email address, phone number, and the Google review link (or other URL) you want your cards programmed with.
• Order & shipping details - items purchased, shipping address, and order history.
• Payment information - handled by our payment processor (Stripe). We receive confirmation of payment and limited details (such as the last four digits of a card and billing status); we do not collect or store full card numbers ourselves.
• Support & communications - messages you send us through support tickets, the contact form, or email.
• Review & feedback data - where a business uses our platform, we process the star ratings and private feedback that the business's own customers submit, on that business's behalf.
• Technical data - basic information such as IP address and device/browser information, used for security (for example, detecting unusual logins) and to keep the service working.

2. How we use your information

• To fulfil and ship your orders, including programming your cards.
• To create and manage your account and provide the dashboard and platform features.
• To process payments and manage subscriptions and billing.
• To provide customer support and respond to your enquiries.
• To send service and transactional messages (such as order confirmations, receipts, security alerts, and account notifications).
• To send product news or marketing only where you have consented; you can opt out at any time.
• To protect the security and integrity of our service and prevent fraud or misuse.
• To comply with our legal obligations.

3. Service providers we share data with

We share personal information only with the trusted service providers we use to run the business, and only as needed to provide our services. These include:

• Stripe - payment processing.
• Vercel and Neon - website hosting and database storage.
• SendGrid - sending system and transactional emails (such as receipts and account notifications).
• Resend - sending internal support-ticket notifications to our team.
• Google - review links point to Google; if you connect Google features, this is governed by Google's own terms.
• Shipping carriers - to deliver physical orders.

These providers may store and process data on servers located outside Australia. We take reasonable steps to ensure they handle your information appropriately. We do not sell your personal information to third parties.

4. How we store & protect your information

We store data with reputable hosting and database providers and take reasonable technical and organisational measures to protect it, including hashed passwords, access controls, and encrypted connections. No method of transmission or storage is completely secure, but we work to protect your information and to limit access to those who need it.

5. How long we keep it

We keep personal information for as long as needed to provide our services and to meet legal, accounting and tax obligations. When it is no longer required, we take reasonable steps to delete or de-identify it.

6. Cookies & similar technologies

We use a small number of cookies and similar technologies that are necessary for the site to function, such as keeping you signed in. We do not use them to sell your data. You can control cookies through your browser settings, though some features may not work without them.

7. Your rights

You may request access to, correction of, or deletion of your personal information, and you may withdraw consent to marketing at any time. To make a request, contact us at support@tapstars.com.au. We will respond within a reasonable time and may need to verify your identity first. If you are not satisfied with how we handle a privacy matter, you may contact the Office of the Australian Information Commissioner (OAIC).

8. Children

Our products and services are intended for businesses and adults. We do not knowingly collect personal information from children under 18.

9. Free link shortener

When you create a short link with our free Google review link shortener, we keep a log of the destination URL, the time it was created and how many times the short link is opened. We use this to keep the service running and prevent abuse, and - because destination links often identify a business - we may use that information to contact you about Tap Star products we think could help. We do not sell this information. To have a short link and its log entry deleted, contact us using the details below.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows when it last changed. Material changes take effect when posted.

11. Contact

Questions about your privacy or this policy? Email us at support@tapstars.com.au and we'll be glad to help.