1. Who is responsible
TAPLOOP TECHNOLOGIES INC. operates Taploop. It is an Ontario corporation, number 1001526118, incorporated on March 5, 2026.
Head office: 30 Charles Street East, Toronto, ON M4Y 1R5, Canada.
Email: hello@taploop.agency.
In this policy, “Taploop,” “we” and “us” mean TAPLOOP TECHNOLOGIES INC.. Our Privacy contact is the company at hello@taploop.agency or the head-office address above. We are responsible for personal information under our control.
This policy covers our website, accounts, workspaces and services. A business that supplies information to its own workspace, an AI client you choose, or a connected provider may have separate responsibilities and policies.
2. Information we handle
- Contact and account information: name, email, company, role, country, account status, authentication records and support correspondence.
- Inquiries: the contact and company details, website, research or marketing goal, optional timing and notes, submitting page, and contact permission you submit.
- Workspace and service information: business context, connection identity and permissions, instructions, research queries, requested public URLs, plans, approvals, deliverables and evidence.
- Commercial records: order and payment references, amount, currency, payment status, service-credit balance, usage charges, commitments and relevant creator or specialist terms.
- Technical information: request and security data, browser/device information, session records, IP-derived security identifiers, errors and operational logs. Optional analytics is described below.
Information comes from you, authorized workspace users and agents, connected services you authorize, public sources used for research, and the operation of the service. Do not put access tokens, payment-card details, sensitive personal information or unrelated third-party records into research prompts or general inquiry fields.
3. Why we use it
We use information to respond to inquiries, provide accounts and workspaces, carry out authorized research or actions, manage payments and usage, maintain approval and evidence records, support users, diagnose problems, prevent abuse and meet applicable legal obligations. We limit collection and use to the stated service purposes and other purposes permitted by law.
The research inquiry form sends its contents when you submit it. It records your permission to follow up about that inquiry; it does not create an account or enroll you in a newsletter. You can withdraw permission for further inquiry follow-up by emailing our Privacy contact. Necessary account, transaction and security messages are separate from optional promotional communications.
4. Sharing and connected services
Information is available to people who need it to operate and support Taploop, authorized members of the relevant workspace, and providers needed for the service you use. For example, public-web research sends the search query or requested URL to the research provider; a payment uses Stripe Checkout where funding is enabled.
Using a connected service can send inputs to that service and return results to your workspace or AI client. Review the destination, permissions and provider's policy before connecting it. Public creator profiles, shared deliverables or approved publishing actions may make the information you choose visible to others. A disconnect stops future access through that connection; it does not erase copies already shared or all retained transaction and audit records.
We may disclose information where required or permitted by law, including to address fraud, security incidents, legal claims or lawful requests. We do not treat permission to operate your workspace as permission to publicly publish its contents.
5. Optional website analytics
On public marketing pages, Google Analytics loads only after you choose Accept analytics. It measures page visits and selected actions, including inquiry starts, template copies and confirmed inquiry acceptance. Our event payloads exclude names, emails, form contents, inquiry references and URL query strings. Google still receives standard browser and network information and may set cookies that distinguish browsers and visits. After analytics consent, PostHog also measures visits and selected actions on our website, signup, sign-in and app pages for Taploop’s own analysis. It uses anonymous browser and session identifiers, page paths, browser/device information, referring domains and campaign labels. Selected actions include signup and verification results, agent setup, integration setup, billing access, approvals and settings changes. We also measure page engagement, scroll depth and request status and timing. Campaign labels are carried between pages in session storage for up to 30 minutes of inactivity. Form contents, customer workspace data and other URL queries are excluded. Session replay and automatic interaction capture are disabled. This is separate from PostHog accounts customers connect to Taploop. PostHog processes this analytics data in the United States.
Google signals, advertising personalization and Enhanced Measurement are disabled for this setup. Your consent choice and the configured analytics-cookie lifetime are up to 180 days. Use Cookie settings to decline or withdraw: this stops further Google Analytics and PostHog measurement and removes accessible analytics cookies. It does not erase information previously received by either provider. See our Cookie policy and Google's privacy policy.
Cloudflare separately provides hosting, security and basic website performance measurement. These services process technical request data needed to deliver and protect the website.
6. Processing outside Canada
Taploop is based in Ontario. Its service providers and the services you connect may process information in Canada, the United States or other countries where they operate. We do not promise that all information stays in Canada. Information processed abroad may be accessible to courts, law enforcement or other authorities under the laws of that jurisdiction.
We remain responsible for personal information under our control when a provider processes it for us. Contact our Privacy contact before using the service if your organization requires a particular processing location or additional contractual safeguards; those requirements must be confirmed for the service you intend to use.
7. Retention and deletion
We retain information for as long as reasonably needed for the purposes above, including service operation, resolving disputes, fraud prevention and required business or financial records. The appropriate period depends on the record and legal requirements. Taploop does not currently publish a single fixed deletion schedule or offer an automatic erase-all-data control.
You may request account closure or deletion through our Privacy contact. We review which information can be removed and which must be retained, and explain material limits where permitted. Deleting an account or disconnecting a provider does not automatically delete records held by your organization or another provider, or records needed for legal, security or transaction obligations.
8. Access, correction and choices
You can ask what personal information we hold about you, how it has been used or shared, request access to it, and challenge inaccurate or incomplete information. You can also ask to withdraw consent or delete information, subject to legal and contractual restrictions; we will explain the effect on a service that needs that information.
Email hello@taploop.agency or write to our head office, marked “Privacy contact.” Identify the request and the account or interaction involved. We may need proportionate information to verify your identity or authority and locate the records. Do not email an identity document unless we agree a suitable method with you.
Where PIPEDA applies, access requests generally require a response within 30 calendar days, with only legally permitted extensions and exceptions. We will explain an applicable refusal or extension and the available complaint route. If you need help making a request or an alternative format, tell us. You may raise a concern with the Office of the Privacy Commissioner of Canada as well as contacting us.
9. Safeguards and service limits
We use account and workspace access controls, secure transport, protected credentials and operational safeguards suited to the information involved. Access to personal information is limited to authorized service purposes. No system is risk-free; our Security page explains the current approach without claiming an independent certification.
Taploop is a business service and is not directed to children. If you believe a child has supplied personal information, contact us so we can review it. Do not use general marketing workflows for sensitive or regulated records without confirming an appropriate service arrangement.
10. Policy changes
We update this page when our practices change and revise its effective date. Where a change requires additional notice or consent, we will provide that before applying the changed practice. Questions and complaints can be directed to our Privacy contact above.