Who handles your information
ScanOrTap uses information to operate its website, accounts, subscriptions and support. When a business collects customer feedback through ScanOrTap, that business is responsible for its use of the feedback and follow-up details; ScanOrTap provides the supporting service. The business may also have its own privacy notice.
Information we handle
Account and business details include information you provide, such as your name, email, business name, destination links, branding, touchpoint codes and subscription status. Supabase handles authentication. If you choose Google sign-in, we receive the information authorised through that process.
Support and setup requests may include your contact details, messages and payment confirmations. Do not send payment-card numbers in feedback or support messages.
Feedback includes your rating, comment, the relevant business and the time of the interaction. Your name, email and phone number are optional follow-up fields. Usage information includes scans and redirects used for business analytics. Service providers also receive technical request information, such as IP addresses and browser details, to deliver and secure their services. A redirect does not establish that a public review was posted.
How we use it
We use information to set up and secure accounts, activate and support your setup, manage subscriptions, deliver feedback and requested analytics, answer support enquiries, prevent misuse and meet legal obligations.
The legal basis depends on the activity and applicable law: fulfilling an agreement, complying with legal obligations, a permitted operational or security purpose, or consent where required. Optional follow-up details are not required for the basic review experience. We do not run advertising pixels or third-party marketing analytics on our website.
Who can see it
Feedback and any follow-up details are available to the relevant business in its dashboard. Authorised ScanOrTap personnel may access information as needed to operate, support or secure the service. Private feedback is not automatically published as a Google review.
Subscription payments are handled by Paddle, our merchant of record. When you subscribe, Paddle receives the details needed to process the payment and manage billing, such as your name, email address, country and payment method, under its own privacy policy. Full payment-card numbers are collected by Paddle and its payment providers; ScanOrTap does not receive or store them.
Supabase, hosting and communication providers process information needed to deliver their services. Some pages load Google Fonts, which sends a resource request to Google. We may disclose information at your request, where required by law, or where reasonably necessary to address misuse, protect rights or resolve a dispute. We do not sell personal information or supply customer feedback to advertisers.
Google, social platforms, WhatsApp and other linked services handle information under their own policies. Providing contact details with feedback does not by itself permit unrelated marketing. A business's later use of that information is its responsibility.
Storage and retention
These pages do not set first-party cookies or use advertising and marketing-analytics trackers. A local timestamp lets an administrator's stock update refresh other open ScanOrTap tabs; it contains no customer feedback or login credentials. External sign-in providers may use their own cookies.
We retain account, subscription, business and feedback information as needed to provide the service, meet legal obligations, maintain security and resolve disputes. Retention depends on the type of information and its purpose. Some accounting or dispute records may need to remain after an account closes. Backup copies may remain until replaced through the provider's normal backup cycle.
Security and international processing
Authentication and access controls help protect account and business information, although no internet service is completely secure. Keep your credentials safe and report suspected unauthorised access promptly.
Service providers may process information outside your country. Where a transfer requires safeguards under applicable law, those safeguards must be in place. Details of the arrangements relevant to your account can be requested from support.
Your choices and rights
Depending on applicable law, you may request access or a copy, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent for processing based on consent; this does not invalidate earlier lawful processing. Rights are subject to lawful exceptions.
Send a privacy request using the contact details below, identifying the account or business involved. We may verify your identity to protect your information. Where a business controls the feedback, we may refer the request to it or help it respond. Requests are handled within applicable legal deadlines, and you may raise concerns with a competent data-protection or consumer authority.
Children and updates
Business accounts and subscriptions are intended for people legally able to enter an agreement. We do not design these services to collect children's information. If a child has submitted information that should be removed, include the relevant details in a privacy request.
We update this notice when our services or practices change. The date above shows the latest revision. Material changes receive additional notice or consent where required.