Legal
Privacy Policy
Last updated 1 June 2026
This policy covers two different groups: customers who build funnels with us, and respondents who answer a funnel built by one of our customers. Where the rules differ, we say so.
1. Our two roles
When you visit tap-next.co, sign up, or email us, we are the controller of your personal data and this policy governs it.
When someone answers a funnel built by one of our customers, that customer is the controller and we are their processor. We only handle those answers on the customer’s documented instructions, under our Data Processing Addendum. If you answered a funnel and want your data removed, contact the brand that ran it — and if you cannot reach them, write to us and we will route it.
2. What we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, work email, company, password hash, role | To create and secure your workspace |
| Billing data | Plan, billing address, VAT ID, last four digits of card | To charge you and meet tax obligations. Card numbers are held by our payment processor, never by us |
| Funnel content | Questions, options, logic, branding you upload | To run your funnels |
| Respondent data | Answers, email if collected, timestamps, coarse location, device type | Processed for the customer who built the funnel |
| Usage data | Pages viewed, features used, IP address, referrer | To keep the service reliable and to work out what to build next |
| Support data | Emails, chat transcripts, call notes | To answer you and improve our documentation |
We do not ask for special-category data (health, biometrics, political opinions and so on). If your funnel collects it, you are responsible for having a lawful basis, and you must tell us so we can apply the right controls.
3. Legal bases
- Contract — running your workspace, processing payments and providing support.
- Legitimate interests — securing the platform, preventing abuse, aggregate product analytics, and sending existing customers relevant service news. We balance these against your rights and you can object at any time.
- Consent — non-essential cookies, marketing email to non-customers, and any case where you have explicitly opted in. You can withdraw consent whenever you like without affecting past processing.
- Legal obligation — tax, accounting and lawful requests from authorities.
4. Cookies and analytics
Our marketing site sets one essential cookie for your session and, if you accept, a first-party analytics cookie. Funnels themselves run without any analytics cookie at all — completion is measured server-side from anonymous session identifiers that expire after 30 days. Full detail lives in our Cookie Policy.
5. Who we share data with
We use a short list of sub-processors, each under a written contract with confidentiality and security terms at least as protective as ours. The current list is maintained in the DPA, and we give 30 days’ notice before adding one so you can object.
We also disclose data when we are legally required to. We notify you first unless we are prohibited from doing so, and we publish the number of requests received each year in our transparency report.
If Tap Next is ever acquired or merged, personal data may transfer as part of that transaction. You will be told before it happens and the acquirer stays bound by this policy until it is properly superseded.
6. International transfers
You choose your data region — EU (Frankfurt) or US (Oregon) — when you create a workspace, and funnel data stays there at rest. Some support and engineering staff work outside that region; those transfers rely on the European Commission’s Standard Contractual Clauses together with the UK Addendum, plus supplementary technical measures such as encryption in transit and at rest, and access logging.
7. How long we keep it
- Account data — for the life of the account, then 90 days after closure.
- Respondent data — for whatever retention window the customer configures, from 30 days to indefinite. Deleting a funnel deletes its responses within 30 days.
- Billing records — seven years, because tax law says so.
- Backups — encrypted, rotated on a 35-day cycle. Deletions propagate as backups age out.
8. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or port it elsewhere. Under GDPR you may also complain to your local supervisory authority; under the CCPA/CPRA you may opt out of “sharing” for cross-context behavioural advertising — though we do not do that in the first place.
Email privacy@tap-next.co and we will verify you and respond within 30 days. We do not charge for this and we will not treat you differently for asking.
9. How we protect it
TLS 1.3 in transit, AES-256 at rest, least-privilege access reviewed quarterly, mandatory SSO and hardware keys for staff, annual penetration testing and a SOC 2 Type II report available under NDA. More detail sits on our Security page. We notify affected customers of a personal data breach without undue delay and within 72 hours of becoming aware.
10. Children
Tap Next is a business tool and is not directed at anyone under 16. We do not knowingly collect their data. If you believe a child has submitted personal data through a funnel, tell us and we will delete it promptly.
11. Changes to this policy
We update this policy when the product or the law changes. Material changes are announced by email and in-app at least 30 days before they take effect, and every previous version stays available on request.
12. How to reach us
Questions about this document go to privacy@tap-next.co, or by post to either entity below. We answer legal and privacy mail within five business days.
| Entity | Role | Address |
|---|---|---|
| Tap Next, Inc. | Contracting entity | 1 Sansome Street, Suite 3500, San Francisco, CA 94104, United States |
| Tap Next Europe B.V. | EU/UK representative (Art. 27 GDPR) | Herengracht 124, 1015 BT Amsterdam, Netherlands |