GDPR Compliance.
Six rights. One workflow.

Six rights, exercisable in one click

Sign in and visit /settings/data-requests or email dpo@tapphq.com.

Every request is answered within 30 days - the ceiling set by Art. 12(3), counted from the day we receive it. Erasure carries a 14-day cancellation window: you can withdraw the request at any point inside it, and deletion begins the day after it closes, so the erasure itself also finishes inside the same 30 days. Access and portability exports carry no cancellation window: a daily job picks them up and dispatches them automatically, with no step in between that waits on us.

Erasure is not absolute, and we will not tell you otherwise. A small set of records is retained after your account is deleted where the law requires it or where the record is the evidence that we handled your data correctly - security and audit trails, and financial records under their statutory retention period. Those records are kept for that purpose alone, and the erasure takes the link to you out of them, except the sign-in log described below: the row survives as evidence, the link to you does not.

Our sign-in provider keeps its own sign-in log of sign-in events, including the email address and IP address used, as a security record. It is kept under GDPR Art. 17(3) and is not used for anything else.

One kind of record keeps your identifier on purpose, and we would rather name it than let you find it: the data-subject request itself. Art. 5(2) requires us to be able to demonstrate that your erasure was requested and carried out, and a request with its subject stripped out of it demonstrates nothing. It is held for that purpose alone, under a retention window rather than for good, and it is never used to contact or profile you.

Everything outside all of this is deleted or anonymised.