TapForNetwork

Menu

Sign inCreate free account

Security and privacy

Your data. Your rules.

Plain answers about what we read, where it lives, who can see it and what we never do. If anything here changes, this page changes first.

Last reviewed: 1 November 2026

01What we read

We read only what you choose

You download your own data and upload it. Before anything is saved, you see what will change and confirm it.

Files we can read, if you select them

  • Connections.csvYour first-degree connections: name, profile link, e-mail if they allow it, company, title, date connected
  • Invitations.csvConnection invitations you sent and received
  • messages.csvYour message history, only if you choose to import it
  • Profile.csvYour own profile basics
  • Positions.csvYour own work history
  • Education.csvYour own education
  • Skills.csvYour own listed skills
  • Languages.csvLanguages you listed
  • Company Follows.csvCompanies you follow

Files we never open

  • LoginsContains your sign-in history (addresses and devices)
  • Security ChallengesContains your security checks (addresses and devices)
  • Private_identity_assetContains identity documents you gave LinkedIn
  • RegistrationContains your sign-up record (address and device)
  • ReceiptsContains your payment receipts
  • Receipts_v2Contains your payment receipts
  • VerificationsContains your identity verifications
  • PhoneNumbersContains your own phone numbers
  • Whatsapp Phone NumbersContains your own phone numbers
  • Email AddressesContains your own e-mail addresses
How the archive is checked

Parts you do not choose are left out on your device before upload: only their file names and dates are sent. Every archive is safety-checked before anything is read, and a file we read must be exactly what the archive says it is, or the whole upload is refused. Sensitive files are never opened or copied out, and everything is deleted with your upload.

02Where it lives

Where your data lives

Your network data runs in the Netherlands and in private EU storage. Some of our providers are based in the United States.

  • Database

    Hosted by Railway in the Netherlands (EU).

  • Uploaded files

    Private Cloudflare R2 storage, EU jurisdiction. Public access is off.

  • Website traffic

    Passes through Cloudflare's global network, which protects and speeds up the site.

03Who can see it

Only you, and people you add

Your workspace is private and isolated from every other one. No other user can see your network or your notes.

  • Every account verifies its e-mail address before it can use anything, Free included
  • You see your workspace; team workspaces show only what their policy shares
  • Isolation is enforced at every layer, not only in the app screens
  • Security is tested continuously as the product changes

04Protection

How your data is protected

Layers that each stop a different kind of mistake or attack.

  • Encrypted connections

    Every connection to the site uses HTTPS (TLS 1.2 or newer).

  • Encrypted storage

    Files are encrypted at rest by our storage provider.

  • Hardened by design

    Modern browser protections and strict rules on every page and request.

  • Private app pages

    App pages are never cached by the network or shown to search engines.

05AI

AI only when you choose it

Free never uses AI. On paid plans, every AI feature runs only when you start it, schedule it or switch it on, and what you start shows its price first.

  • Nothing from a Free workspace is ever sent to an AI provider
  • Only the data a feature needs is sent. Your notes go only if you tick “use my notes”
  • Your imported messages are never sent to an AI provider, except the one message you ask reply help to answer
  • The company scan sends only company names and job-role words, never a person
  • People found on the public web are kept 30 days unless you add them, and anyone can ask not to be found
  • Your data is not used to train AI models. We use two AI providers, OpenAI and Anthropic: a request goes to the second when the first is down or refused it before doing any work, and you see both names before a draft, a reply or a practice conversation is sent

06How long

How long we keep things

Short where it can be, clear everywhere.

  1. The archive you upload

    Deleted after processing, aiming for within 24 hours. A storage rule removes any leftover after 7 days at most.

  2. Export files you create

    24 hours, then deleted.

  3. Your network, notes and settings

    Until you delete them or your account. When you add or save something (a note, a goal, a reminder, a pipeline item), our servers can keep a copy of the answer they gave your browser, so that a request sent twice is carried out once. That copy can repeat what you wrote. An hourly clean-up deletes it 24 hours after the request.

  4. Technical logs (no message or note content)

    At most 30 days.

  5. Backups

    Every day, encrypted before it leaves our servers with a key our running app does not have, and kept up to 30 days in separate, locked storage in the EU (no one can delete a copy in its first 28 days). Each copy is restored and checked before it is stored. If a copy is ever restored, accounts deleted since it was made are deleted again before the service reopens.

  6. Invoices and payment records

    As long as tax law requires.

07Your rights

Export or delete, on every plan

Including Free. Download everything, or delete your account, yourself in Settings at any time.

  • Delete any note or reminder yourself, at any time
  • Download everything you added and everything worked out for you, in one file that is deleted after 24 hours
  • Delete your account: it is locked at once and erased after 7 days, and you can cancel until then
  • Both ask you to have signed in within the last 10 minutes
  • Records that tax law requires are kept separately, for as long as tax law requires

08Vendors

Who helps us run it

The companies that process data for us, and what for.

  • CloudflareWebsite delivery, private file storage (EU), bot protection, and passing e-mails sent to our addresses on to our mailboxIn use
  • RailwayApplication servers and database (Netherlands, EU)In use
  • ClerkSign-in and account securityIn use
  • StripePayments; we never see card numbersIn use
  • OpenAI or AnthropicAI drafts, replies and practice, the company scan and the web search of Find new people, on paid plans only and only when you choose them. The main one answers; the other takes over only when the first is busy or downIn use
  • ResendThe e-mails you choose to get, notices about your account and our replies. Our sending domain is set up in its EU regionIn use
  • Our mailbox providerOur mailbox: e-mails you send to our addresses arrive there (Cloudflare passes them on) and are answered thereIn use

09Report

Found a problem?

E-mail security@tapfornetwork.com with steps to reproduce.

Please never access other people's data while testing. More detail is in our privacy notice.

Private by design, from the first file

Free with a verified e-mail. No LinkedIn® password, no extension and no AI on the Free plan.

Create free account