Privacy Policy
Last updated November 1, 2026
This policy explains what information Tapwright ("Tapwright", "we", "us") collects through this website, tapwright.app, and through the Tapwright apps we run for breweries and restaurants (our "customers"), and what we do with it.
This website
This website does not use cookies, advertising trackers or analytics. Our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, for security and troubleshooting. If you email us, we receive your email address and whatever you choose to write, and we use it only to reply to you.
The Tapwright apps
Our customers use the Tapwright apps (including the Host, Tip Wizard, Cash Count, Inventory Imp and Events) to run their own business. When we process information about a customer's staff, guests or operations, we do it on that customer's behalf and under our agreement with them. The customer decides what is collected and is the first place to go with questions about it.
Depending on which apps a customer uses, the information can include:
- Staff names, work email addresses, roles and assigned locations.
- Sign-in details. Personal PINs are stored only as one-way hashes and are never shown to anyone, including us.
- Business records such as tip pools and payouts, cash counts, deposits, inventory counts and deliveries.
- Event booking requests, including the name, email address and phone number a guest provides.
- An audit trail of who changed money or sign-in records, what changed and when.
We use this information only to provide, secure and support the apps for that customer. We do not sell it, we do not use it for advertising, and we do not combine one customer's data with another's.
Google sign-in and Google data
Some Tapwright apps let staff sign in with a Google account, and Events can keep a customer's own Google Calendar up to date. When you sign in with Google, we receive your name, email address and profile picture, and we use them only to identify you and check which tools your employer has given you access to. When a customer connects Google Calendar, we read and write events on the calendars that customer chooses, only to keep bookings in step.
Tapwright's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train AI models, and people at Tapwright do not read it except with your permission, for security, or where the law requires.
Service providers
We use a small number of providers to run Tapwright, and they handle data only to provide their service to us: Vercel (hosting), Neon (databases), Google Workspace (email and, where a customer uses it, Google sign-in and Calendar), and an error-monitoring service that is set up so it does not receive request contents, PINs or passwords.
Security
Every customer's data is kept separate from every other customer's, connections are encrypted, PINs are hashed, and changes to money and sign-in records are logged. No system is perfectly secure, and if a breach affects your information we will tell the affected customer promptly.
How long we keep it
We keep customer data for as long as the customer uses Tapwright and as their records obligations require. When a customer leaves, we return or delete their data as our agreement with them says. Emails to us are kept as long as needed to answer them and keep a record of the conversation.
Your choices
If you work for one of our customers, ask your employer to see, correct or delete your information; we will help them do it. You can also write to us at jon@tapwright.app. You can remove Tapwright's access to your Google account at any time from your Google account permissions.
Children
Tapwright is a workplace tool and is not meant for children under 16.
Changes
If we change this policy, we will update the date above, and for a significant change we will tell our customers before it takes effect.
Contact
Questions about privacy: jon@tapwright.app.