1. Who We Are
TapText is an Australian SMS widget platform. This Privacy Policy explains how we collect, use, store, and protect information when you use TapText as a business customer, and when your customers interact with your TapText widget.
We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth).
2. Information We Collect
About you (business customers)
- Business name, email address, and password (for your account)
- Payment information — processed and stored by Stripe, not by us directly
- Website URL and widget configuration settings
- Usage data: SMS sent/received, login activity, dashboard interactions
About your customers (via the widget)
- Mobile phone number (entered when they submit the widget form)
- Message content they send via the widget
- The URL of the page they were on when they contacted you
This data is collected on your behalf. You are the data controller for your customers' information — we process it as your data processor.
3. How We Use Your Information
- To provide and operate the TapText service
- To route SMS messages between your customers and your phone
- To manage your subscription and process billing via Stripe
- To send you service-related emails (account confirmations, billing receipts, trial reminders)
- To improve and debug the platform
- To comply with legal obligations
We do not sell your data. We do not use your customers' data for advertising. We do not share data with third parties except as described below.
4. Third-Party Services
We use the following third-party services to operate TapText:
- Twilio — SMS delivery. Message content and phone numbers are transmitted through Twilio's infrastructure. Twilio is bound by its own privacy policy.
- Stripe — Payment processing. Card details are handled entirely by Stripe and are not stored on our servers.
- Supabase — Database and authentication. Your account data and message logs are stored in Supabase's infrastructure.
- Vercel — Hosting and edge functions. Our application runs on Vercel's infrastructure.
- Google Analytics — Website analytics. We collect anonymised usage data on our marketing pages. No personal data from your account or your customers is shared with Google Analytics.
5. Data Storage & Security
Your data is stored on servers located in Australia and the United States. We use industry-standard security practices including encrypted connections (HTTPS/TLS), row-level security on our database, and restricted access controls.
Despite these measures, no system is perfectly secure. If we become aware of a data breach that is likely to cause serious harm, we will notify affected parties as required by law.
6. Data Retention
We retain your account data and message history for as long as your account is active. If you cancel your account, we retain your data for 30 days and then permanently delete it, unless we are required by law to retain it longer.
7. Your Rights
Under Australian Privacy Law, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your data (subject to legal retention obligations)
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, contact us at hello@taptext.com.au.
8. Cookies
Our website uses essential cookies for authentication (managing your login session). We also use Google Analytics cookies to understand how visitors use our marketing pages. These analytics cookies collect anonymised data only.
The TapText widget installed on your website does not set cookies on your visitors' browsers.
9. Your Customers' Privacy
When a visitor submits the TapText widget on your website, they are providing their phone number to your business. You are responsible for informing your customers about how their data will be used and ensuring your use of TapText complies with applicable privacy laws. We recommend adding a brief disclosure to your widget or website (e.g. “By texting us, you agree to our Privacy Policy”).
10. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you by email of material changes at least 14 days before they take effect. The effective date at the top of this page will always reflect the current version.
11. Contact
Privacy questions or requests? Email us at hello@taptext.com.au. We aim to respond within 5 business days.