Privacy
policy

1. Data controller

Martins & Moscoso, Lda., Portugal. Privacy contact: hello@tapcontact.ai.

2. What data we process

• Customers: name, email, billing details and the content you choose to publish on your contact page (name, title, links, image). Legal basis: performance of the contract and legal billing obligations.
• Visitors of a contact page: nothing personal. Pages are static HTML with no cookies, no trackers and no JavaScript. We record only the aggregate tap count per card — IP addresses are not stored and no profile of who taps exists.
• Visitors of tapcontact.ai: the site sets no cookies and uses no third-party analytics.

3. Where the data lives

All data is hosted on servers in the European Union (Hetzner, Germany). We make no transfers of personal data outside the European Economic Area.

4. How long we keep it

Account and page data is kept for as long as the subscription lasts. After cancellation it is deleted — except billing data, which Portuguese tax law requires us to keep for the applicable legal period.

5. Who we share it with

Nobody, for commercial purposes. We use only technical hosting processors in the EU, bound by GDPR data-processing agreements. We do not sell or hand over data. Our business model is selling cards — not data.

6. Your rights

Under the GDPR you have the rights of access, rectification, erasure, portability, restriction and objection. To exercise them, write to hello@tapcontact.ai — we reply within 30 days at most. Practical details on the GDPR page. You also have the right to lodge a complaint with the CNPD, the Portuguese supervisory authority.

7. Security

We use encryption in transit (HTTPS) across the service and limit internal access to data to what is strictly necessary. The data surface is deliberately small: what we don’t collect can’t leak.

8. Changes

If this policy changes in a material way, we notify customers by email. The date at the top always tells you which version is in force.