Privacy Policy

Depending on how you interact with Tapped, we may collect:

• Account and contact information, such as your name, email address, professional title, law firm, and account identifiers.
• Client and matter information, such as client names and email addresses, matter captions, county information, final judgment dates, representation-ending dates, responsible attorney information, handoff instructions, action items, deadlines, and related information entered by a law firm.
• Client activity information, such as handoff progress, completion status, acknowledgment information, dates and times of activity, and notes a client chooses to enter through the Service.
• Pilot and inquiry information, such as your name, law firm, email address, and message when you submit a pilot request or otherwise contact us.
• Authentication information, including information used to authenticate accounts and maintain sessions. Authentication may be provided through our service providers. Users who choose Google authentication may provide information through Google’s authentication service.
• Technical and operational information. Our infrastructure and service providers may process technical information necessary to operate, secure, troubleshoot, and maintain the Service, such as IP addresses, user-agent information, authentication/session metadata, request paths, error messages, stack information, and email-delivery information.

We do not currently use advertising pixels, behavioral advertising technology, or third-party marketing analytics within the Tapped application.

Tapped is not designed to serve as a repository for complete legal files or highly sensitive documents or information.

Law firms and users should enter only information reasonably necessary for the intended handoff.

Unless expressly authorized or necessary for an approved use of the Service, users should not enter Social Security numbers, government identification numbers, financial account credentials, medical records, immigration documentation, or other highly sensitive information into Tapped.

Because Tapped allows certain free-text information, information entered by a law firm or client could contain sensitive personal information. Where such information is provided, we process it only as reasonably necessary to provide the Service, comply with our contractual obligations, protect the Service, or comply with applicable law.

We may use personal information to:

• provide, operate, maintain, and secure Tapped;
• create and manage accounts and authentication;
• enable law firms to create and deliver handoffs;
• enable invited clients to access and interact with handoffs;
• display and maintain progress and acknowledgment information;
• send transactional and service-related communications;
• respond to pilot requests, support requests, and inquiries;
• troubleshoot errors and maintain the security and integrity of the Service;
• prevent misuse, fraud, and unauthorized access;
• comply with legal and contractual obligations; and
• establish, exercise, or defend legal rights.

We do not sell personal information.

Law firms use Tapped to provide information and guidance to their clients.

When Tapped processes client information on behalf of or under the instructions of a law firm, the law firm generally determines the purposes for which that information is processed, and Tapped acts as a service provider, processor, contractor, or similar entity as applicable under relevant law.

Law firms are responsible for determining what information is appropriate to enter into Tapped and for complying with their professional, ethical, confidentiality, privacy, and legal obligations.

If you are a law-firm client and have a question or request concerning information your law firm has provided through Tapped, we may refer or coordinate your request with the applicable law firm.

Tapped is not a law firm and does not provide legal advice or legal representation.

We may disclose personal information:

• To the law firm associated with a handoff. Information and activity associated with a client handoff may be available to authorized users of the applicable law firm.
• To invited clients. Information a law firm includes in a client’s handoff is made available to the intended client through the Service.
• To service providers. We use service providers to operate infrastructure, authentication, hosting, transactional email, and related technical functions.
• For legal and security purposes. We may disclose information when reasonably necessary to comply with law, legal process, governmental requests, protect rights or safety, investigate misuse, enforce agreements, or protect the security of the Service.
• In connection with a business transaction. Information may be transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable law.

We do not sell personal information.

Tapped currently relies on service providers that may process information on our behalf, including:

• Supabase for database, authentication, and related backend infrastructure.
• Lovable/Lovable Cloud for application infrastructure, hosting, deployment, transactional email infrastructure, and related technical services.
• Google for authentication when a user chooses to sign in using Google.

Our service providers may process information in accordance with their applicable agreements and privacy and security practices.

We may change or add service providers as the Service evolves.

Tapped may use cookies, browser storage, or similar technologies that are necessary for authentication, session management, security, and operation of the Service.

Tapped does not currently use advertising cookies, advertising pixels, behavioral advertising, or third-party marketing analytics within the application.

If our use of these technologies materially changes, we may update this Privacy Policy and implement additional notices or controls where required.

Tapped does not currently use artificial intelligence or large language models to process law-firm or client information within the Service, and we do not use law-firm or client information to train artificial-intelligence models.

If this changes materially, we will update our disclosures and practices as appropriate before introducing such functionality.

Tapped does not currently provide user-facing document-upload or document-storage functionality.

Users should not treat Tapped as a document-management system or repository for legal files.

We retain personal information for as long as reasonably necessary to provide the Service, maintain security and business records, comply with contractual and legal obligations, resolve disputes, and enforce agreements.

When information is deleted from active systems, copies may remain for a limited period in backups, authentication or security records, transactional email records, logs, or other systems maintained by us or our service providers, subject to applicable retention practices and legal requirements.

Depending on where you reside and applicable law, you may have rights concerning your personal information, which may include rights to request access, correction, deletion, or a copy of certain information.

To submit a privacy request, contact hello@hellotapped.com.

We may take reasonable steps to verify your identity and authority before fulfilling a request.

Where Tapped processes information on behalf of a law firm, we may refer or coordinate a request with that firm.

Applicable rights and exceptions vary by jurisdiction, and we will respond to verified requests as required by applicable law.

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards include measures such as authenticated access, role-based permissions, tenant-level data isolation, database access controls, and security controls provided through our infrastructure providers.

No internet-based service or information-security system can guarantee absolute security.

Tapped is intended for use by legal professionals and their clients and is not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 through the Service.

The Service may interact with or provide access to third-party services. Those third parties may have their own privacy practices and terms.

Tapped is not responsible for the privacy practices of independent third parties.

We may update this Privacy Policy from time to time as our Service, practices, or legal obligations change.

When we make changes, we will update the “Last Updated” date above and provide additional notice where required by applicable law.

Questions or privacy requests may be directed to: