1. Scope
This policy applies to Taploop's public website, authenticated Taploop workspaces, and the Taploop marketing control plane. A connected provider or AI client may apply its own terms and privacy policy.
2. Data we process
- Account and contact data, including name, email, role, company, country, and authentication state.
- Workspace context such as company information, website, configured permissions, and connection metadata.
- Agent and execution records, including goals, plans, approval requests, commands, costs, status, audit events, wallet usage, and evidence.
- Public-web query inputs, requested URLs, and normalized results when a user or authorized workspace agent invokes a metered capability.
- Creator and commercial workflow records where those pilot features are used.
- Essential technical data needed for security, rate limits, diagnostics, and service operation.
3. How we use data
We use data to authenticate users, configure workspaces, evaluate policy, execute approved actions, reconcile provider costs, return evidence, prevent abuse, support users, and improve reliability. Taploop does not treat a provider receipt or click as proof of a lead, booking, sale, or conversion.
If you submit a company inquiry through the website guide, we store the company and contact details, marketing goal, optional timeframe and notes, submitting page, and contact permission you provide. Taploop administrators can review these details and track follow-up. Form details are sent only when you submit; the inquiry does not create an account or subscribe you to a mailing list.
4. Service providers
Taploop uses infrastructure, transactional-email, and approved execution providers. The current list is maintained on the Subprocessors page. A provider receives only the inputs required for the enabled capability.
Optional website analytics
When configured, Google Analytics is loaded on public marketing pages only after you choose Accept analytics. It measures page visits and selected actions such as opening an inquiry, copying a template, or receiving confirmation that an inquiry was accepted. Taploop excludes form details, contact information, inquiry identifiers, and URL queries from these events. Analytics cookies and standard technical information used by Google may still distinguish visits and browsers. Advertising personalization and Google signals are disabled.
Your choice is stored on your device for up to 180 days. Use Cookie settings to change it; declining stops further Google Analytics measurement and removes accessible analytics cookies. Cloudflare also provides basic website performance measurements. See our Cookie policy and Google's privacy policy for more context.
5. Connected systems
When you connect a third-party system, Taploop processes authorized data according to the scopes you enable. Early-access integrations may use separate provider credentials and provider terms. Disconnecting a provider stops future access but does not automatically erase completed audit or financial records that Taploop must retain.
6. Retention and deletion
Taploop retains account, audit, approval, execution, cost, and evidence records for service operation, security, dispute handling, and legal obligations. A finalized production retention schedule and self-service deletion tooling are still being developed. Contact us to request access, correction, export, or deletion; some records may need to be retained.
7. Security
Taploop applies technical and organizational safeguards appropriate to the early-access service, including secret-backed provider credentials, bounded capability access, and workspace-bound MCP tokens stored as digests. No system is perfectly secure. The current production MCP flow uses revocable bearer tokens; interactive MCP OAuth is not yet available.
8. International processing
Taploop and its providers may process data in countries other than yours. Production transfer terms and any required data-processing agreement will be supplied before enterprise production use.
9. Children
Taploop is a business service and is not directed to children under 16.
10. Contact and changes
Questions or privacy requests can be sent to hello@taploop.agency. We may update this policy as the service changes and will revise the effective date.