Privacy Policy

1. Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, and authentication credentials
• Profile Data: Profile photo, preferences, and facility memberships
• Payment Information: Billing address and payment method details (processed securely by third-party processors)
• Communication Data: Messages, feedback, and support requests

Usage Information

We automatically collect certain information about your use of our services:

• Access Data: Locker access times, duration of use, and facility locations
• Device Information: Device type, operating system, app version, and unique device identifiers
• Location Data: Approximate location based on IP address and precise location when using our mobile app (with your permission)
• Log Data: Server logs, error reports, and performance metrics

Third-Party Information

We may receive information from:

• Facility Partners: Membership status and facility-specific information
• Analytics Providers: Aggregated usage statistics and performance data
• Social Media: Public profile information if you connect social media accounts

2. How We Use Your Information

We use your information for the following purposes:

Service Provision

• Authenticate your identity and provide secure locker access
• Process reservations and manage locker assignments
• Facilitate payments and billing
• Provide customer support and respond to inquiries

Service Improvement

• Analyze usage patterns to optimize locker availability
• Develop new features and enhance user experience
• Monitor system performance and security
• Conduct research and analytics to improve our services

Communication

• Send service-related notifications and updates
• Provide important security alerts
• Share relevant promotions and features (with your consent)
• Conduct surveys and gather feedback

Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud and unauthorized access
• Enforce our terms of service
• Resolve disputes and investigate issues

3. Information Sharing

We share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our business:

• Cloud Infrastructure: AWS, Google Cloud, and Microsoft Azure for hosting and data storage
• Payment Processing: Stripe and PayPal for secure payment processing
• Analytics: Google Analytics and Mixpanel for usage analytics
• Communication: SendGrid and Twilio for email and SMS notifications

Facility Partners

We share limited information with facility partners to provide our services:

• User identification for access control
• Usage statistics for facility management
• Incident reports for security purposes

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes and government requests
• Protect our rights and property
• Ensure user safety and security
• Investigate fraud or security incidents

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. Data Security

We implement comprehensive security measures to protect your information:

Technical Safeguards

• Encryption: AES-256 encryption for data at rest and TLS 1.3 for data in transit
• Access Controls: Multi-factor authentication and role-based access
• Network Security: Firewalls, intrusion detection, and regular security monitoring
• Secure Development: Regular security audits and penetration testing

Organizational Safeguards

• Employee training on data protection and privacy
• Background checks for employees with data access
• Incident response procedures and breach notification protocols
• Regular security awareness training and updates

Compliance

• SOC 2 Type II compliance
• GDPR compliance for European users
• CCPA compliance for California residents
• HIPAA compliance for healthcare facilities

5. Your Privacy Rights

You have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal information
• Download your data in a machine-readable format
• Receive information about how your data is processed

Correction and Deletion

• Update or correct inaccurate information
• Request deletion of your personal information
• Object to certain types of data processing

Communication Preferences

• Opt out of marketing communications
• Manage notification preferences
• Control cookie and tracking preferences

Exercising Your Rights

To exercise any of these rights, please contact us at privacy@taplocker.com or use the privacy controls in your account settings. We will respond to your request within 30 days.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for 3 years after account closure
• Usage Data: Aggregated usage statistics retained for 7 years for business analytics
• Financial Records: Payment and billing information retained for 7 years as required by law
• Support Communications: Retained for 5 years to improve customer service
• Security Logs: Retained for 2 years for security monitoring and incident response

7. International Data Transfers

TapLocker operates globally, and your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for transfers to countries with adequate data protection
• Certification under recognized privacy frameworks
• Additional safeguards for sensitive data transfers

8. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

For users between 13 and 18 years of age, we require parental consent before collecting personal information.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Notify you of material changes via email or app notification
• Post the updated policy on our website with the effective date
• Maintain previous versions for your reference
• Provide a summary of key changes when possible

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: