1. Who is responsible
TapForNetwork, run from Athens, Greece, is responsible for your personal data (the controller). Contact: privacy@tapfornetwork.com. We have not appointed a data protection officer or a representative in the EU.
2. Who this notice is for
People who visit tapfornetwork.com, people who have an account, people who write to us, people whose details are in the account of someone who uses TapForNetwork (see “People in your network”), and people whom a customer's search found on the public web (see “People found on the public web”). It covers the website, the app and the e-mails we send.
3. What we process
Account details: your name in the app, your e-mail address and sign-in details (held by our sign-in provider, Clerk), your time zone, display choices and settings, and the record of your welcome.
What you bring in and create: the data you choose to import from your LinkedIn® data export, which includes information about your connections; notes, tags, lists of people and reminders you create, the goals you set, the short phrases you add about what a person offers or needs, the companies you watch with the notes you write about them, and the part you give a person at a company for one of your goals; your pipeline, the comparisons you keep, the searches you save in “Find new people”, the steps you log and what you decide about suggestions; your answers to the searches a goal suggests; the industries you set for companies and for yourself; the searches for new people on the public web that you start or schedule, the people they find and what you tell us about them; and, only if you choose it, the words of your messages (see “The words of your messages, if you choose to keep them”).
What we work out for you from that data: suggestions with their reasons, the industry of the companies in your network (for some, with AI help: see “AI features”), how your network changed since your last file, and your progress.
Offers of a paid plan: where the app suggests a plan, it shows counts from your own account (for example how many of your companies we could not place in an industry yet) next to what that plan includes and its price. When you close an offer with “Not now”, we note which offer and when, so that it stays away for some days.
Billing details: handled by our payment provider (see “Payments”).
Technical data: what we need to deliver and protect the service, such as the network address and browser details that every request carries, counts of how often limited actions were used, records of requests without their content, counts of the errors that the app's pages report to us, by the hour (which page, which version of the app and what kind of error; never a message or an address), a record of each kind of error that our servers or the app's pages meet (where, in which version and what kind, with addresses, keys and numbers removed from its message first) and, for 14 days, a one-way code of each account an error touched, only to count how many accounts it affected, and, when the app opens (for example to sign up or sign in), the signals from your device and browser that our sign-in provider's bot protection reads (see “Security checks”).
Use of the service: when you are signed in, how many times a day you use each part of the product, never what you write, which page you opened or who is in your network (see “Counting visits and use”).
4. Where the data comes from
From you: what you type, upload and choose. From your LinkedIn® download: what you choose to import. From Clerk: your sign-in details, and from Google if you choose to sign in with Google (your name and e-mail address). From Stripe: whether a payment went through, and the numbers of your subscription. From your browser: the technical data above. Our servers do not connect to your LinkedIn® account and never visit LinkedIn's website: LinkedIn® data reaches us only in the download you choose to import, in what you type or paste yourself and, when “Find new people” searches the public web for you, in the public pages our AI provider's web search returns, which can include LinkedIn® profile pages.
About the people in your network: from the user who imported them, out of that user's own LinkedIn® download, and from what that user writes or adds by hand. About people found by “Find new people”: from public web pages, through our AI provider's web search (see “People found on the public web”).
5. What we never open or keep
Files in your LinkedIn® download that hold your sign-in history, your security checks, identity documents, your sign-up record, payment receipts, identity verifications, or your own phone numbers and e-mail addresses are never opened: we only count them, and they are deleted with your upload.
From the files we do read, we copy out only what your workspace needs. For example, the birth date, home address and other contact handles in your own profile are never copied out.
Message text is not kept, unless you choose to keep the words of your messages (see “The words of your messages, if you choose to keep them”). We keep the dates and directions of messages, a one-way fingerprint of each message so that it is recognised when you import again, and whether an invitation came with a message. Without that choice, the text stays only inside your uploaded file until that file is deleted (see “How long we keep it”).
6. Why we process it, and on what legal basis
To give you the service you signed up for (your account, imports, your workspace and its suggestions, reminders, the e-mails you turn on, downloads and deletion): because it is needed for our agreement with you (article 6(1)(b) of the GDPR).
To keep the data about people in your network inside your workspace: our and your legitimate interests (article 6(1)(f)); see “People in your network”.
To run the AI features of your paid plan that you choose (drafts, reply help, practice conversations, the company scan and “Find new people”): needed for our agreement with you; for the facts about other people that are sent or kept, legitimate interests.
To find people on the public web who fit one of your goals, and show them to you: the legitimate interest, yours and ours, in meeting professionals through what they made public about their work (article 6(1)(f)). Anyone can object, as “People found on the public web” says.
To take payments and keep invoices: needed for our agreement with you, and our duty under tax law (article 6(1)(c)).
To keep the service secure and stop abuse (sign-in checks, bot checks, limits and technical logs): our legitimate interest in a safe service, and our legal duty to keep data secure (article 32).
To count visits and which parts of the product are used, so that we can run and improve TapForNetwork: our legitimate interest in understanding and improving our service (article 6(1)(f)). We do not use the people in your network, your notes or your messages for this. You can object, as “Counting visits and use” says.
To let our operators give support, keep accounts secure and act on misuse, with the account details that “Who at TapForNetwork can see your data” lists: needed for our agreement with you, and our legitimate interest in a safe service.
To suggest a paid plan where it may help you, from counts in your own account, and to remember a “Not now”: our legitimate interest in offering our plans without repeating an offer you closed.
To send notices about your account, and to record which version of our terms you accepted: legitimate interests, and to prove our agreement.
To answer your messages and your requests about your rights, to answer a payment dispute, and to establish, exercise or defend legal claims: our legal duties and legitimate interests.
To keep the words of your messages, only if you choose it: for your own words, your consent (article 6(1)(a)), which you can withdraw at any time; see “The words of your messages, if you choose to keep them”.
We do not use your data for advertising, sell it, or use it to train AI models. Only keeping the words of your messages relies on your consent; nothing else we do does.
7. What you must give us, and what is your choice
You need an e-mail address to have an account, because we must be able to reach you about it; without one we cannot open an account. To buy a paid plan, you must give Stripe your payment details. Everything else is your choice: importing a file, writing notes, setting goals and using AI features.
8. People in your network
Your import holds information about other people: for example their names, profile links, the e-mail address a connection chose to share with you on LinkedIn®, their company and job title, when you connected, invitations between you, and the dates of your messages. Your notes and lists can hold more.
We use it only to run your private workspace: to show it to you, to keep it up to date when you import again, and to work out suggestions for you. We do not show it to other users, build a shared directory from it, use it for advertising or sell it, and we do not contact these people unless they write to us first.
Our legal basis is the legitimate interest, yours and ours, in organising your own professional relationships (article 6(1)(f) of the GDPR). It is limited to your account, sensitive files are not opened, and you can delete any person at any time. For this data too, we are the controller.
We do not tell each of these people that their data is in someone's account. Telling them would mean using their contact details, where we have them at all, for a purpose they did not expect, and it would take an effort out of proportion to the purpose (article 14(5)(b) of the GDPR). Instead, this notice is public and explains what happens.
If you are in someone's network, the words you wrote to them are kept only if they choose to keep the words of their messages, as “The words of your messages, if you choose to keep them” says.
If you are in someone's network and want to use your rights, write to privacy@tapfornetwork.com. We check our records and act on your request as the law requires: we tell you whether we hold data about you, give you a copy, and delete it if you ask. We tell you where it came from (the LinkedIn® download of a user of TapForNetwork in which you appear), but not who that user is, because that would reveal their personal data. We ask only for what we need to know that the data is about you.
9. The words of your messages, if you choose to keep them
Your LinkedIn® download holds the messages of your conversations. We keep their words only if you choose that, where the app offers you the choice: in Settings, under Privacy and data, “Message words”, and when you import a file with messages. Nothing is chosen for you; without your choice we keep only what “What we never open or keep” says.
If you choose it, we keep the words of the newest 50 messages of each conversation between you and one person who is in your network, each up to 4,000 characters (a longer one is shortened, and marked so), and at most 100,000 messages in your workspace; older messages keep only their dates. Group conversations, drafts, messages in your spam folder and a workspace you share with others keep no words.
We use them for one thing: to show you a conversation next to the person it is with. They are shown only to you, in the app and in your download. No tool of ours shows them to our team, nobody at TapForNetwork opens them in any other way unless the law obliges us to, and they are never put in our logs, e-mails, notifications or analytics.
We encrypt the words of each message on their own (AES-256) before they are stored, with keys that are never kept in our database, so our database and its backups hold them only in that encrypted form. No system is perfectly safe, ours included.
We do not sell them or use them for advertising. We send them to an AI provider only when you ask for reply help on a paid plan, and only if your choice to keep them includes reply help: then the one message you answer goes with your request, and you see it before anything is sent (see “AI features”). No other AI feature uses them.
For your own words, our legal basis is your consent (article 6(1)(a) of the GDPR). You can withdraw it at any time, as easily as you gave it; that does not make what we did before unlawful. A choice you made under earlier words still lets us keep your words; reply help uses them only under the words that name it, and otherwise asks you to paste the message or to choose again. If the words of the choice ever change in what they allow us to keep, a new import keeps no words until you choose again. Your messages also hold the words other people wrote to you: they are kept with yours, protected and shown in the same way, and removed with yours. Keep them only if you are allowed to.
We keep the words until you remove them in Settings, under Privacy and data, “Message words”, which withdraws your choice and deletes them all at once; until you delete your account; or, for one conversation, until you remove that person from your network. A new import of the same messages replaces their words, and when newer messages arrive, the words beyond the newest 50 of a conversation are deleted. Copies stay in our encrypted backups for up to 30 days after that; then they are gone.
10. Suggestions are not automated decisions about you
TapForNetwork makes no decisions about you or anyone else that have legal or similarly significant effects. Its suggestions, for example who might help with a goal or which step to take today, are worked out automatically from what is in your account, the goals you set, your answers to earlier suggestions and our own general information about companies. They are advice for you alone, each comes with a plain reason, and you decide what to do. They are worked out by our own software, not written by AI.
What is worked out about the people in your network is shown only to you.
The industry shown for a company is worked out by our software from our own information about companies and what is in your network; on paid plans, AI helps with the companies we cannot place (see “AI features”). You can correct it. Suggestions are grouped by the kind of help they may give, and each plan shows a set number of people for a goal; beyond that number you see only counts.
Progress can show where you stand among other accounts, as a percentage only, and only when at least 50 active accounts are counted. Other users never see your progress or your name.
11. AI features
AI features are part of paid plans only, and each runs only when you choose it: drafts, reply help, practice conversations and “Find new people” when you start them or switch on a weekly search, and the company scan when you start it or switch on its setting, as described below. A feature you start shows its credit cost first. We use two AI providers, Anthropic and OpenAI. A request goes to the main one first. Only if it refuses the request before doing any work (it is busy, over its limit, or does not accept our connection) do we send the same request to the other one; a request that the first provider may already have worked on is never sent to the other. So either provider may receive your request and answer it, and the same data is sent to whichever one that is. A request that the first provider refused has already reached it, so in that case both received it; and while the main one is known to be down, a request goes to the other one first. Before a draft, a reply or a practice conversation, you can see, under “What we send”, what will be sent and to which providers (“Anthropic or OpenAI” when both can answer). “Find new people” uses only the main provider (see “People found on the public web”). Free workspaces are never sent to an AI provider.
For a message draft or a practice conversation we send that provider only what that feature needs: the name you would use for the person, their title and company, simple facts such as when you connected and when you last talked, the words of a goal you choose, what you type, and your notes about that person only when you tick “use my notes”. We do not send the e-mail addresses or profile links from your import, your imported messages or anything from another workspace; the only exception is reply help, below. If a name, a title, a company, the words of your goal or one of your notes holds an e-mail address or a web link that we recognise, we replace it with a neutral word before sending; a line you type is refused when it holds one. This recognition can miss an address or a link that is written in an unusual way.
Reply help: on a paid plan, when you ask for help to answer a message, we send the AI provider the one message you answer: the last message that person sent you, taken from the words of your messages if your choice to keep them includes reply help, or a message you paste, cut to a set length; the kind of answer you pick from a fixed list (for example to thank, accept or propose a time); and what a message draft uses, as above. You see what will be sent, and its credit cost, before anything is sent. A message you paste stays in our server's working memory for at most 10 minutes, for the price you confirm, and is then dropped. The other person's words in that message are sent only for this. The answer is a draft, kept like other drafts, and you change it and send it yourself.
The company scan: on paid plans, when you start a scan, or after each import if you switch on the setting that does this (it is off until you do), we ask the AI provider to place in an industry the companies of your network that our own information cannot place. We send only each company's name, cleaned of anything that looks like contact details or a web address, and up to three words for the kinds of jobs people there do, such as “sales”, which our own software works out from their job titles. We never send a person's name, a job title, a message, a note, a place or contact details. Every answer is checked a second time, by a separate AI model that Anthropic runs, and we keep it only when both agree; so Anthropic receives these names and words even when OpenAI answers first. The scan uses your plan's AI credits only for the companies it places, never more than you have left. We keep only the industry it gives, in your workspace, where you can change it; it is part of your download and is deleted with your account.
So that a company that many customers have is placed once, we also keep coded forms of company names with the industry the AI gave, and coded marks of which scans agreed. They hold no name and no account number, an answer is reused only when several customers' scans agreed, and each is deleted 365 days after the scan, also when the account it came from was deleted earlier.
When the provider is OpenAI, every request except the company scan also carries a code that stands for your account, so that misuse by one account can be stopped there. The code is made from your account's internal number with a secret key; it is not your name, your e-mail address or that number.
We do not save drafts. A draft, and the line you typed for it, stay only in our server's working memory, each for at most 10 minutes, so that a request sent twice is answered once and charged once; then they are gone. What you type in a practice conversation is not kept after the practice ends. We keep only a record of each AI request without its content: when, which feature, its size, its cost in credits and what the provider charged us. We do not use your data to train AI models.
Both AI providers say in their published terms for business customers that what is sent through their paid interfaces is not used to train their models, and that they may keep it for a limited time, for example to detect misuse. Their own privacy notices say what they keep and for how long.
12. Find new people: searches you open yourself
On every plan, “Find new people” prepares searches for people outside your network who fit one of your goals. Our servers build each search as a link, from the goal and the words you choose: kinds of work, levels, job titles, places, industries and words to leave out. When you start from a person of your network, the search uses their kind of work, level and place and the kind of company they work for, never their name or their employer's name; when you start from a company, it can use the company's name.
You open a search yourself, in a new tab of your own browser, on LinkedIn® or on the search engine you choose (Google, Bing or DuckDuckGo). Your browser then sends the words of the search to that website, under its own terms and privacy notice. Our servers do not open the search, do not fetch or keep what it finds, and do not learn whether you opened it.
You can save a search under a name to use it again, up to 20 searches. A saved search holds its name and the words you chose, never a link or anything a search found. We keep it until you remove it or delete your account, and it is part of your download.
To keep someone you found, you paste the address of their LinkedIn® profile and add them yourself, as with anyone you add by hand. The app reads the name from the address; we never open that page.
13. Searches by role and company
For a goal, TapForNetwork can suggest short searches made of a role and a company that your network does not reach yet, for example a finance director at a company in an industry you chose. A suggestion holds no person's name.
You open a search yourself, in a new tab of your own browser, on LinkedIn®. Your browser then sends its words to LinkedIn®, under LinkedIn's own terms and privacy notice. Our servers do not open the search and do not see what it finds.
When you come back, you can tell us what happened, for example that you sent an invitation, found no profile, or want to try later. Your answers stay in your workspace, shape your next suggestions, are never shown to anyone else, and are part of your download. We keep them as long as your other workspace data (see “How long we keep it”).
14. People found on the public web
On paid plans, “Find new people” can also look on the public web for people who fit one of your goals. It runs only when you start it, or when you switch on a weekly search for a goal, and shows its credit cost first. Free never uses it, and it is offered in every country where TapForNetwork is.
When we pause AI features, it pauses too, including a search that was waiting to run: nothing is sent and no credits are used. We ask the main AI provider that is switched on, Anthropic or OpenAI, to search the web with its own web-search tool (a search is not handed to the other provider); our servers do not visit those pages, do not sign in anywhere and do not call LinkedIn® or a search engine. We send the provider the kind of people you are looking for, from the roles, levels, places and companies of your goal that you pick. We do not send your notes, the people in your imported network or the name of a person you are looking for: a search is never about one named person. A company's own name is sent as it is, even when it is a person's name.
For each person found, we keep and show their name, job title, organisation and place as the public page gives them, a link to that page, the page's title, the day we found them and a sentence of our own about why the person may fit your goal. We do not ask for e-mail addresses, telephone numbers or home addresses, and we drop a result that holds one. We do not use characteristics such as health, beliefs, union membership, age or gender, and we drop a result that mentions one. Before you see a person, our software checks that the page really names them and their organisation, and a second, separate AI check must agree with what we show; we drop what we cannot support from the page, including a page about a job the person has left.
The people found are shown only to the members of the workspace that asked for the search, never to other customers, and we do not contact them. A person you do not add is deleted 30 days after the search. A person you add becomes an ordinary person in your workspace, marked “Found on the web” with the page and the day, and stays until you remove them. What you tell us about the people shown, for example that someone is at the wrong level, is kept for that goal as choices from a fixed list, never as your own words; it steers your next searches and is never sent to the AI provider as information about a person. While they are kept, the people found are part of your download.
So that you are never shown the same person twice, we keep one-way codes of the pages and of the name-and-company pairs already shown in your workspace, made with a key of your workspace's own. They hold no readable text. We keep them as long as your workspace exists; you can clear them in Settings to see people you skipped again, and they are deleted with your account.
Anyone can ask not to be found, without an account, on the page “Ask not to be found” (app.tapfornetwork.com/find-people/do-not-find), by giving the link of a web page. We keep one-way codes of that link, nothing else, for as long as the request must be honoured, and no later search shows anyone from that page. If the link is the person's own LinkedIn® profile page, we also delete at once every result about that profile that a customer has not added. A link to a page that names many people, such as a team page or an article, deletes no result that exists already, because it does not show which of those people is asking; it only stops later searches from showing anyone from that page.
Our legal basis for finding these people and showing them to you is the legitimate interest, yours and ours, in meeting professionals through what they made public about their work (article 6(1)(f) of the GDPR). We keep only the few work details above, for a short time unless you add the person, and anyone can object. We do not tell each person found that they were found: we keep no way to reach them, and finding one would mean collecting more about them (article 14(5)(b) of the GDPR). Instead, this notice is public and explains what happens. A person found can write to privacy@tapfornetwork.com to use their rights.
15. E-mails from us
We send you an e-mail when something you started is finished (an import is saved, a copy of your data is ready) and when you ask us to remind you to import your LinkedIn® file and when the plan of your workspace changes, also when you did not start that change (for example a payment that could not be collected, a refund or a payment dispute), unless you turn these off in Settings → Notifications. We send the daily and the weekly e-mail only if you turn them on there. Each of these e-mails has a link that stops that kind of e-mail in one click, without signing in.
We send a notice about your account when its deletion is scheduled, cancelled or done, and when we must tell you about a change to our terms, prices or service, when we confirm a purchase or a withdrawal, and when we suspend your account (with the statement of reasons), because it protects your account and your rights. You cannot turn these notices off; the links in them stop all the other e-mails, and the last one, sent when your account is deleted, has none. We do not send them, or any other e-mail, to a mailbox that refused our e-mails or reported one as spam.
To send an e-mail, our server reads your sign-in e-mail address from Clerk at that moment and does not keep it. Only for the notice that your account was deleted do we keep the address: we read it when the deletion is complete, and delete it when that e-mail is sent or, if it cannot be sent, after 3 days.
We keep a record of each e-mail we sent you (its kind, when, whether it arrived, and a coded form of the address it went to; never its content or the address itself) for 30 days. If your mailbox refuses our e-mails or reports one as spam, we keep that coded form of your address so that we do not write to it again until you ask us to in Settings. If you delete your account, we keep it without any link to your account, so that we still do not write to that address.
We do not send newsletters or advertising e-mails.
16. When you write to us
When you e-mail one of our addresses, Cloudflare's e-mail routing passes the e-mail on to our mailbox at an e-mail provider, where we read and answer it. When we reply from one of our addresses, the reply is sent through Resend. We keep these e-mails as long as we need them to answer you and to keep a record of what was agreed; we have not set a fixed number of days for this.
17. Payments
You pay for a paid plan on Stripe's own page. Stripe collects your card details, name, e-mail address and billing address. We receive and keep Stripe's numbers for you and your subscription, your plan, the paid periods, the amounts and status of invoices, and refunds and disputes. We never see your full card number.
If you dispute a payment with your bank, we may give Stripe, and through it your bank and the card network, the facts that show the payment was owed: your account's e-mail address, when you signed up and which version of our terms you accepted, your plan and payment dates, and records of use without their content. We do not send your notes, the people in your network or your messages. We keep the record of a dispute with Stripe's numbers, its state and its dates; that record has no end date yet.
18. Your acceptance of our terms
When you accept a document such as our terms, we record which version you accepted, when, and where (at sign-up, after a change, or at checkout), as proof of our agreement. You find this record in your download. We keep it after your account is deleted, as proof of what was agreed; it has no end date yet.
19. Security checks
When the app opens, for example to sign up or sign in, our sign-in provider Clerk checks that you are a person and not an automated program, before you click anything. For this, Clerk's sign-in code loads a script from Clerk Protect, which reads signals from your device and browser and connects to Clerk Protect on several network ports. It keeps a random number for this browser, and the result of its last check, in your browser's storage; the cookie and device storage notice lists them. This is security processing for signing in; we do not use these signals for anything else. Clerk's own privacy notice says what Clerk keeps.
Before an import, and on the page “Ask not to be found”, Cloudflare's bot check (Turnstile) runs in your browser for the same reason. Clerk's sign-up form also uses it.
Our software also points out patterns that suggest abuse to an operator, who decides what to do. To stop an attack or abuse, we may block a network address, a range of addresses, a network or a country for a while; that can also stop other people on the same network. If that happens to you, write to us.
We count how often each account and each network address uses limited actions, so that no one can overload the service or probe it. These counts are kept for the time “How long we keep it” says.
20. Counting visits and use
To know how many people visit, our servers count visits from what each request carries. At the edge of our network, the network address and the kind of browser are turned into a code with a secret key that never leaves the edge, and the day is part of that code, so the same visitor gets a new code every day. We keep only counts of different visitors by hour, by part of the site and by country, for 400 days; they cannot list who visited. We also count which website or campaign brought a visit (the site's name and campaign tags), only as totals; this cannot tell who visited. This uses no cookie and saves or reads nothing on your device.
When you are signed in, we count how many times each day you use each part of the product, for example goals or imports; never what you write, which page you opened or who is in your network, and nothing finer than the day. We keep these counts for 395 days (about 13 months). We use them to run and improve TapForNetwork and to spot misuse, never for advertising. You can object by writing to privacy@tapfornetwork.com: we then stop counting for you and delete what we counted.
21. Who at TapForNetwork can see your data
Our operators work in a separate console, with its own sign-in in two steps. To give support, keep accounts secure and act on misuse, it shows account details: your name in the app, whether your e-mail address is verified, your plan, its payments and its credits, how many imports you made and how they went, the main events of your account (for example when you signed up or changed plan), the last day you were active, how often you used each part of the product, and notes our operators write about the account. It does not show your e-mail address. An operator must give a reason before opening an account, and every opening and every action is recorded. The console never shows the people in your network, the notes you write, your goals or your messages.
Reading what is inside an account is possible only with direct access to our servers. We do it only when you ask us to (for example to solve a problem you report), when the law requires it, or to stop serious misuse. The words of your messages are opened only when the law obliges us to (see “The words of your messages, if you choose to keep them”).
22. Who receives data
Service providers that process data for us, each only for its task: Cloudflare (website delivery, file storage, bot protection, and passing on e-mails you send to our addresses); Railway (servers and database); Clerk (sign-in and its security checks, including Clerk Protect; if you choose to sign in with Google, Google also learns that you signed in to TapForNetwork); the AI providers, Anthropic and OpenAI (the main one answers, and the other takes over when it is busy or down, so either may receive a request; AI features on paid plans only; the web search of “Find new people” uses only the main provider's web search); Stripe (payments for paid plans); and Resend (the e-mails you choose to get and notices about your account, once our e-mail sending is switched on: it receives your e-mail address and the e-mail). The sub-processors page says what each one receives and where it is.
E-mails you send to our addresses are kept in our mailbox at an e-mail provider, under that provider's terms; it may keep them outside the EU.
When you open a search that “Find new people” prepared, your own browser sends its words to LinkedIn® or to the search engine you chose; we do not send it (see “Find new people: searches you open yourself”).
Stripe also uses some payment data for its own purposes, such as preventing fraud and meeting its legal duties, under its own privacy notice.
Others, only when needed: our accountant and tax authorities, for invoices and tax records; our lawyers and insurers, when a legal claim needs it; courts or authorities, when the law requires it; and a company that takes over TapForNetwork, after we tell you (see the terms). We do not sell personal data or share it for advertising.
23. Where data is stored, and transfers outside the EU
Our servers and our database run in the Netherlands (EU); uploaded files, download files and backups are stored in the EU. Website traffic passes through Cloudflare's global network.
Several providers are companies based in the United States (Clerk, OpenAI, Anthropic, Stripe, Resend, and Railway and Cloudflare as companies), so data can be sent to or reached from the United States. What an AI feature sends can be processed in the United States.
The European Commission has decided that companies in the United States that are certified under the EU–US Data Privacy Framework protect personal data adequately. A transfer to a company that is not certified needs another safeguard that the law accepts, such as the European Commission's standard contractual clauses.
You can ask us which safeguard covers a transfer, and for a copy of it, by writing to privacy@tapfornetwork.com.
24. How long we keep it
Uploaded archives: deleted after processing, aiming for within 24 hours and at most 7 days. Import previews: a preview of the people in an import, kept only while it waits for your confirmation, at most 24 hours. Export files: 24 hours. Your workspace data: until you delete it or your account; a copy of something you wrote can stay for about a day longer, as the next paragraph says. Your account's settings, the record of your welcome (its steps, when you finished it, the tips you tried) and your achievements: until you delete your account. Technical logs: 30 days. Backups: up to 30 days. Billing records: as long as tax law requires.
When you add something or save a goal (for example a note, a logged step, a reminder, a pipeline item or a person you add by hand), our servers can keep a copy of the answer they gave your browser, so that a request sent twice is carried out once. That copy can repeat what you wrote. An hourly clean-up deletes it 24 hours after the request. So if you delete a note or remove a person within that time, a copy of those words stays with us until that clean-up.
When you delete your account, it is locked at once and erased after 7 days; until then you can cancel. We then keep only billing records, as long as tax law requires, and records without your content (ids, amounts, actions and times) that show what happened, including the deletion itself, the record of which version of our texts you accepted, and the statement of reasons of a suspension. Backups that still hold your data expire within 30 days; if one is ever restored, your deletion is applied again before the service reopens.
Other clocks: counts of how often you used a limited action, 30 days; records of the e-mails we sent you, 30 days (see “E-mails from us”); the comparisons you open for a goal, at most 12 per goal, where opening one more removes the oldest that holds none of your own words; a draft written by AI, at most 10 minutes in our server's working memory; a practice conversation, until it ends; counts of the errors that the app's pages report, 14 days; the record of each kind of error, 90 days after it was last seen, without any account; the searches you save in “Find new people”, until you remove them or delete your account; the people “Find new people” found on the public web, 30 days unless you add them, and the codes of the people already shown to you, while your workspace exists; the industries the company scan gives, with your workspace, and the coded company names of its shared cache, 365 days; the counts of which parts of the product you use, 395 days (about 13 months); our operators' notes about your account, until you delete your account; which offers of a paid plan you closed with “Not now”, at most one record per place in the app, until a later “Not now” replaces it or clears it after the offer has come back, you leave the workspace, or you delete your account; the words of your messages, if you chose to keep them, as “The words of your messages, if you choose to keep them” says.
So that a restored backup applies your deletion again, we keep a short record that you asked for it, with our own random numbers and times only (never your name, e-mail address or content), outside our main systems for about 60 days.
Billing records are kept for as long as tax law requires. Records without your content are kept to prove what happened. Neither has a fixed end date in our systems yet. The record of your acceptance of our terms, payment disputes and e-mails you send us: see their sections. Clerk keeps your sign-in details until your account is deleted, when we delete your account at Clerk too; what Clerk keeps after that is set by Clerk's own terms.
25. Security
We protect your data with encrypted connections between your browser and us, sign-in through a specialist provider, accounts kept apart from each other, short-lived download links, encrypted backups, the words of your messages, if you keep them, encrypted again on their own, and an operator console that never shows the people in your network, your notes or your messages. No system is perfectly safe. Please report security problems to security@tapfornetwork.com; the page “Security and responsible disclosure” says how.
If a breach puts personal data at risk, we tell the competent data protection authority within 72 hours of learning of it, where the law requires that, and we tell you without undue delay when the risk to you is high, with what happened and what you can do.
26. Your rights
You can access, export, correct and delete your data, object to certain processing and complain to a supervisory authority. These rights do not depend on your plan. In Settings, under Privacy and data, you can download everything you added and everything worked out for you in one file (kept for 24 hours, up to 3 a day), and delete your account. Both ask you to have signed in within the last 10 minutes. The file also holds how often you used each part of the product, and our operators' notes about your account, without who wrote them.
To correct something, change it in the app or write to us. To delete one person or one note, remove it in the app. The download is in common formats (JSON and CSV), so you can take it to another service.
Where we rely on your consent, only for the words of your messages, you can withdraw it at any time (article 7(3) of the GDPR) in Settings, under Privacy and data, “Message words”. If you kept them, your download includes them as plain text.
You can object at any time to processing that relies on our legitimate interests, or ask us to restrict processing, by writing to privacy@tapfornetwork.com; we then stop unless we have compelling reasons the law accepts. We answer requests within one month and may ask you to sign in first, so we know it is you.
In the words of the law, your rights are: access (article 15 of the GDPR), correction (article 16), erasure (article 17), restriction (article 18), data portability (article 20), objection (article 21), and not to be subject to a decision based only on automated processing that significantly affects you (article 22). We tell the providers who received your data when we correct or delete it, where that is needed (article 19).
27. How to use your rights
Use Settings, or write to privacy@tapfornetwork.com. It costs nothing. We answer within one month; if a request is complex, we may take up to two more months and tell you why within the first month. If a request is clearly unfounded or excessive, we may refuse it or ask for a reasonable fee, and we say why.
We ask only for what we need to know that it is you. A person who has no account, for example someone in another user's network, may need to show that the data is about them.
28. Complaints
If you think we have not handled your data properly, please tell us first at privacy@tapfornetwork.com. You can also complain to the data protection authority of the EU country where you live or work, or where you think the problem happened.
29. Children
TapForNetwork is for people aged 18 or older. If you think a child has an account, tell us and we will delete it.
30. Changes to this notice
We update this notice when what we do with data changes. When a new version applies to you, the app shows what changed before you continue and, once our e-mail sending is switched on, we also tell you by e-mail. Each version has a number and the date it takes effect.
What changed in this version
- Adds that we also count which website or campaign brought a visit (the site's name and campaign tags), only as totals; this cannot tell who visited.
- Corrects one sentence: suggestions do not use the industries that AI placed yet.