California Consumer Rights.
We don’t sell. We don’t share. We respond in 45 days.
TappHQ complies with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
TappHQ does not sell personal information.
We do not share personal information for cross-context behavioral advertising. There is no opt-out required because we do not engage in the underlying activities.
We do not sell personal information of consumers under the age of 16.
Categories of PI we process — and why
Six categories of personal information for five clearly defined operational purposes. No surprise data uses.
Categories of personal information
- Identifiers - name, email, organization affiliation, IP address
- Customer records - contact info, billing address, payment card tokens (via Stripe)
- Commercial information - subscription tier, transaction history
- Internet activity - browser data, usage analytics (limited to your organization)
- Professional info - employer name, job title, org role
- Inferences from above - AI summaries and suggestions based on your own organization's data
Purposes of processing
- Providing the TappHQ platform to you
- Security, fraud prevention, and abuse detection
- Billing and account management
- Customer support and platform health monitoring
- AI-assisted features you have enabled (Ask TappIQ, Content Studio, agents)
What California residents can do
Six rights protected under CCPA/CPRA. Exercise them at /settings/data-requests or by emailing privacy@tapphq.com. We respond within 45 days (one 45-day extension when reasonably necessary).
Your rights
- Know what personal information we collect and how we use it
- Delete personal information (with some exceptions)
- Correct inaccurate personal information
- Opt out of sale/sharing (N/A - we do neither)
- Limit use of Sensitive PI to necessary purposes
- Non-discrimination for exercising these rights
Sensitive PI handling
- Financial account information (Stripe-tokenized - TappHQ never stores card numbers)
- Precise geolocation (only if an integration sends it - we do not collect device GPS)
- Racial/ethnic origin or religious affiliation (only if you intentionally store it for grant reporting)
We use Sensitive PI only for purposes necessary to provide the service you requested. We do not infer characteristics.
Authorized-agent requests
Authorized agents may submit requests on behalf of California consumers. We require (a) written permission signed by the consumer, (b) verification of the consumer’s identity, and (c) verification of the agent’s authority. Contact privacy@tapphq.com for the agent-request intake form.
Submit a CCPA/CPRA request
Use the in-app data-requests page if you have an account, or email our privacy team. Authorized agents and verified consumer requests follow the same 45-day timeline.