Privacy Policy

Effective date: 1 April 2026

1. Who We Are

TapText is an Australian SMS widget platform. This Privacy Policy explains how we collect, use, store, and protect information when you use TapText as a business customer, and when your customers interact with your TapText widget.

TapText is a registered business name of The Trustee for Broad & Co. Family Trust (ABN 89 687 217 914), of 1 Kamala Street, Morayfield QLD 4506, Australia. Full business identification details are on our Legal page.

We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth).

2. Information We Collect

About you (business customers)

  • Business name, email address, and password (for your account)
  • Payment information - processed and stored by Stripe, not by us directly
  • Website URL and widget configuration settings
  • Usage data: SMS sent/received, login activity, dashboard interactions

About your customers (via the widget)

  • Name and mobile phone number (entered when they submit the widget form)
  • Optional message content they include with the form
  • The URL of the page they were on when they contacted you

This data is collected on your behalf. You are the data controller for your customers' information - we process it as your data processor.

3. How We Use Your Information

  • To provide and operate the TapText service
  • To send you an SMS lead alert when a visitor submits the widget form, and to send that visitor a confirmation SMS
  • To manage your subscription and process billing via Stripe
  • To send you service-related emails (account confirmations, billing receipts, trial reminders)
  • To improve and debug the platform
  • To comply with legal obligations

We do not sell your data. We do not use your customers' data for advertising. We do not share data with third parties except as described below.

4. Third-Party Services

We use the following third-party services to operate TapText:

  • Bantam SMS Gateway (Cellcast) - SMS delivery. Message content and phone numbers are transmitted through the Bantam SMS Gateway, which uses Cellcast, an Australian SMS provider, to deliver messages. Cellcast is bound by its own privacy policy.
  • Stripe - Payment processing. Card details are handled entirely by Stripe and are not stored on our servers.
  • Supabase - Database and authentication. Your account data and message logs are stored in Supabase's infrastructure.
  • Vercel - Hosting and edge functions. Our application runs on Vercel's infrastructure.
  • Google Analytics - Website analytics. We collect anonymised usage data on our marketing pages. No personal data from your account or your customers is shared with Google Analytics.

5. Data Storage & Security

Your data is stored on servers located in Australia and the United States. We use industry-standard security practices including encrypted connections (HTTPS/TLS), row-level security on our database, and restricted access controls.

Despite these measures, no system is perfectly secure. If we become aware of a data breach that is likely to cause serious harm, we will notify affected parties as required by law.

6. Data Retention

We retain your account data and message history for as long as your account is active. If you cancel your account, we retain your data for 30 days and then permanently delete it, unless we are required by law to retain it longer.

7. Your Rights

Under Australian Privacy Law, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your data (subject to legal retention obligations)
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at hello@taptext.com.au.

8. Cookies

Our website uses essential cookies for authentication (managing your login session). We also use Google Analytics cookies to understand how visitors use our marketing pages. These analytics cookies collect anonymised data only.

The TapText widget installed on your website does not set cookies on your visitors' browsers.

9. Your Customers' Privacy

When a visitor submits the TapText widget form on your website, they are providing their name and phone number to your business. You are responsible for informing your customers about how their data will be used and ensuring your use of TapText complies with applicable privacy laws. We recommend adding a brief disclosure to your widget or website (e.g. “By submitting this form, you agree to our Privacy Policy”).

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you by email of material changes at least 14 days before they take effect. The effective date at the top of this page will always reflect the current version.

11. Contact

Privacy questions or requests? Email us at hello@taptext.com.au. We aim to respond within 5 business days.