Privacy policy

This notice explains how the Tapcord service (tapcord.app) handles your personal data. It covers only Tapcord — not any other activity of Gridvise Limited.

Who we are

Gridvise Limited is the data controller for the Tapcord service (tapcord.app). This notice covers only the Tapcord service and not any other activity of Gridvise Limited. Tapcord is a trading name of Gridvise Limited (Company No. 09002112), registered at Swift House, Ground Floor, 18 Hoffmanns Way, Chelmsford, Essex, England, CM1 1GU.

For anything in this notice, or to exercise your rights, email us at hello@tapcord.app.

What we process

• Your account: the email address you sign in with, and basic sign-in metadata needed to keep your account secure.
• Your tapcords: the records you create — photos, video, voice notes, text notes, dates, and any location you choose to attach. Media can contain whatever you point your camera at, so treat it as personal to you.
• Waitlist: if you join the waitlist, the email address you give us and, optionally, whether you asked for product updates.
• Tag activity: when a tag is tapped or a tapcord is opened, we record a first-party analytics event so an owner can see how often their own tags are used and we can keep the service healthy. It captures the kind of device, browser and operating system, a coarse location (country/region), the referring site, and a one-way hashedform of the visitor’s IP address. We do not set cookies for this, store your raw IP address, or use it to identify anonymous visitors.

We do not use third-party advertising, cross-site tracking, or data-broker scripts, and we do not sell your data. The tag-activity analytics above are first-party and privacy-respecting — counts and coarse technical detail, never a profile of you across the web.

Why we’re allowed to (lawful bases)

• Contract: to give you the account and features you signed up for — storing and showing your tapcords back to you.
• Legitimate interests: to keep the service secure, prevent abuse, fix problems, and understand how tags are used (first-party, privacy-respecting analytics) so we can improve the service.
• Consent: for optional marketing updates, where you opt in. You can withdraw consent at any time.
• Legal obligation: where the law requires us to keep or disclose certain information.

Who processes data for us

We use a small set of trusted providers who process data on our behalf under contract:

• Supabase — database and authentication.
• Cloudflare R2 — storage for your photos, video, and voice notes.
• Vercel — hosting and content delivery.
• Email delivery (Brevo / SMTP) — sending sign-in and service emails.
• Stripe — payment processing, when the shop launches.

How long we keep it

We keep your account and tapcords for as long as your account is active. If you ask us to delete your account, we remove your personal data within a reasonable period, except where we must keep some records to meet a legal obligation.

International transfers

Some of our providers process data outside the UK/EEA. Where they do, the transfer is protected by appropriate safeguards, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Your rights

You have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. Self-service tools for export and deletion are on the way; in the meantime, email hello@tapcord.appand we’ll handle your request. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).