Privacy Policy

TapBee is a link-in-bio product with a Free plan. This Privacy Policy explains what we collect, how we use it, and how you can contact us with privacy requests.

What Information We Collect

Account and profile information. We collect information you provide when you create and manage an account, including your name, email address, username, password, and account settings. We store your password in a protected form rather than as the password you entered. We also process email-verification and password-reset information.

Public profile content. We collect the display name, bio, profile image, links, and appearance choices you add to your profile. If you enable a digital contact card, we also store the public name, job title, public email, public phone number, and website that you explicitly enter into that card.

Creator email subscriptions. If you choose to subscribe on a public profile, TapBee stores your normalized email address, the time and version of your consent, confirmation status, and unsubscribe status for that creator. Subscriber addresses are not part of public profile responses. The creator can view their own list and export only currently confirmed subscribers.

Usage and technical information. TapBee records public profile views and link clicks using a randomly generated browser identifier stored in local storage. When you visit a public profile, the browser may also send the referring URL. TapBee immediately classifies it as direct/unknown, search, social, referral, or internal; stores only that category; and never stores or logs the full referrer URL. For Creator Device Insights, TapBee classifies the request's User-Agent as desktop, mobile, tablet, or unknown and stores only that category. TapBee does not store the raw User-Agent or derived browser or operating-system details. On public marketing pages, TapBee may also store bounded UTM parameters, only the referring hostname, the landing page path, and whether a Facebook click identifier was present. We do not store that click identifier, the full referrer URL, or the landing page query or fragment. We also process account activity, request identifiers, IP addresses used for rate limiting, and limited diagnostic information needed to operate, secure, and troubleshoot the service. Our analytics providers may process browser, device, and usage information as described below.

Communications. We collect the information you include when you contact us for support, privacy, or accessibility assistance.

How We Use Information

We use information to create and authenticate accounts, display public profiles, keep links working, provide support, measure and improve TapBee, send account and service emails, protect the service, and investigate spam, fraud, security issues, or other misuse.

Public Profile Information

Your TapBee profile is designed to be public. Information you publish, including your username, display name, bio, profile image, enabled links, and selected profile appearance, may be visible to anyone who visits your page or receives your TapBee URL. If you enable a contact card, the details you explicitly enter there can be downloaded as a contact file. TapBee does not automatically copy your private account email or authentication or billing data into the card. Your account email, password, account status, and disabled links are not part of the public profile response. Please avoid publishing private information you do not want others to see.

Analytics

We use site analytics providers to understand site usage and performance. These providers may receive page URLs and page titles for page-view measurement. TapBee does not intentionally send these providers account passwords or the content of public links, and password-reset pages are excluded from these analytics. Creator Traffic Sources analytics uses only the normalized category described above and does not display referrer URLs or browser identifiers. Creator Device Insights displays only aggregate category counts and does not display raw User-Agent strings or browser identifiers. Our current code does not implement third-party advertising pixels or retargeting. The first-party acquisition attribution described above is kept separate from product-usage analytics.

Service Providers

We use third-party service providers to operate TapBee, including providers for hosting and infrastructure; database and data storage, including profile images; site analytics; account email delivery; and optional payment and subscription processing. Payment processors receive payment information when a user chooses to enter their checkout flow; TapBee does not collect full payment-card details through its own forms. These providers may process information as needed to provide their respective services.

How Information May Be Disclosed

We may disclose information to the service providers described above; when reasonably necessary to comply with law or a valid legal request; to protect users, TapBee, or others from fraud, abuse, or security threats; or in connection with a merger, financing, reorganization, sale, or transfer of all or part of the service.

Data Exports and Privacy Requests

Eligible Pro users can export analytics information available through Advanced Analytics as a CSV. This analytics-specific CSV is not a full-account export or comprehensive archive of account data.

Free and Pro creators can export their own currently confirmed email subscribers as a separate CSV. Pending and unsubscribed addresses are excluded from that export.

TapBee does not currently offer a self-service full-account archive or download. To request a broader copy of data associated with your account or make another privacy-related request, email support@tapbee.io. We may need to verify your identity or control of the account and clarify the requested scope before disclosing account-associated information. Do not include passwords, authentication tokens, payment-card details, or other secrets in your request.

Account Deletion Requests

TapBee does not currently offer self-service account deletion. To request account deletion, email support@tapbee.io. To help us identify the account and understand the request, you may provide:

• the email associated with the account;
• the username or profile URL, if known;
• whether the request covers the entire account or a narrower scope.

Before processing the request, we may need to verify your control of the account or identity, or clarify the requested scope. Do not send passwords; authentication or verification codes; password-recovery links or tokens; payment-card information; or other secrets.

Some information may need to be retained, where appropriate, to meet legal, financial, security, fraud-prevention, dispute, or operational obligations. As a result, deletion may not remove every record in all circumstances.

Data Retention

We keep information for as long as reasonably needed to provide TapBee, maintain records, support users, improve the product, prevent abuse, resolve disputes, and meet legal obligations. Some information may be retained where reasonably necessary for security, fraud prevention, disputes, or legal obligations. We do not state a fixed retention period because retention depends on the information and why it is used. Acquisition-attribution records have a 120-day retention target; automated enforcement is still being implemented. Pending and unsubscribed creator-email records are retained for consent history and resubscription handling; a fixed cleanup period is not yet automated. Account deletion and verified privacy-deletion requests must include those records unless retention is otherwise required.

Cookies and Similar Technologies

TapBee uses a cookie to keep account holders signed in. It uses local storage for basic account state and a randomly generated identifier used to count public profile views and link clicks without repeatedly counting the same browser for the same profile or link. A temporary opaque acquisition-attribution value may be kept in local storage for up to 30 days to connect a marketing visit with a later signup. A temporary email-verification value may be kept in session storage. Analytics providers may use cookies or similar browser technologies according to their own services. Blocking browser storage may affect some features.

Security

We use reasonable technical and organizational safeguards intended to protect information. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

International Processing

TapBee and its service providers may process information in locations where they operate. Privacy laws in those locations may differ from the laws where you live.

Children's Privacy

TapBee is intended for people who are at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to TapBee, please contact us so we can review and take appropriate action.

Changes to This Policy

We may update this Privacy Policy as TapBee evolves. When we make changes, we will update the date at the top of this page. If a change is significant, we aim to provide reasonable notice where practical.

Contact for Privacy Requests

For requests to access, correct, or delete personal information, or for other privacy questions, email us at support@tapbee.io. Depending on where you live, applicable law may provide additional privacy rights. We may need to verify a request before acting on it.