Privacy and data

Business accounts and billing

Taply uses your account email and sign-in session to provide access. Your business details, locations, Google destinations, card assignments and optional employee names support your dashboard and card links. Employee names are attribution labels, not employee accounts.

Supabase provides account authentication and application data storage. Resend delivers account emails. Stripe processes subscription checkout and billing; Taply retains subscription status, trial history and billing references to manage access.

Card visits and service records

Opening a card link can record its card, location, time and NFC, QR or unknown source. New visits can also record an assigned employee's ID and name at the time of the visit. Reassigning a card or renaming an employee does not rewrite those snapshots. The business can view activity and, where available, export it. These records count link requests, including repeat visits or automated traffic; they do not confirm that you posted a Google review.

Hosting and service providers also process technical request information to operate and protect the service. Signing in uses session cookies. These service records are separate from the review text you write.

Writing a review and choosing AI

The writing page keeps your text in page state. Leaving or reloading clears that page state; it does not remove text you copied elsewhere or information already sent to a provider.

If you request AI writing help, your description is sent to Vercel AI Gateway and its model provider to prepare a draft. Your description and the proposed draft are also sent for a separate accuracy check. The current model provider is OpenAI. Generating business suggestions similarly sends the public business details supplied by the merchant for generation and coverage checking.

AI is optional. Avoid private or sensitive information. Providers may retain submitted information under their applicable policies and agreements. Taply does not promise zero retention or Canadian-only processing. You can write manually, edit or ignore any draft, and choose your own rating. Taply does not post to Google for you.

Optional private feedback

If a business enables private feedback, its writing page offers a separate message form. Nothing you write in the review editor is automatically sent to the business. Sending the separate form requires your agreement to save that message for the business's owners and admins to read in Taply.

The message, selected category, associated business/location/card, submission time and reviewed status are stored with Supabase. The form does not ask for your name or contact details and does not send its message to AI or post it to Google. Avoid private or sensitive information. Messages remain stored after you close the page or the business marks them reviewed; use the contact below for access or deletion requests. Your ability to open Google does not depend on giving feedback or on its sentiment.

Retention and your choices

Account, business, visit and billing records remain separate from temporary writing-page text. Closing a page or canceling Pro does not delete those records. Provider retention and processing locations vary; processing can occur outside Canada.

For questions or requests about access, correction or deletion, contact taply.ca@gmail.com. Include the account or business concerned and what you are requesting. Do not send passwords, reset links or payment-card details. Requests may require identity and business-authority verification. This contact does not provide automatic deletion or guarantee that billing, security or provider records can all be removed.

Other services

Opening Google takes you to Google's service. Reviews you choose to post there are governed by Google's policies. The following links explain our providers' practices; they do not replace the agreements applicable to Taply's use of those services.

• Vercel
• Supabase
• Resend
• Stripe
• OpenAI business data
• Google