Privacy Policy

Introduction

Maxbuzz Technologies LLP ("we," "our," or "us") operates Tappd, a B2B SaaS platform that provides push notifications, in-app messaging, customer journey automation, and customer data platform services. This Privacy Policy explains how we collect, use, and protect information when you use our services.

As a B2B SaaS provider, we act as a data processor on behalf of our customers (workspaces/brands), who are the data controllers for their end users' data. This means we process data according to our customers' instructions and in accordance with our Data Processing Agreement.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name
• Password (hashed and encrypted)
• Workspace and team information
• Billing information (processed by Stripe)

Customer Data

When you use Tappd to manage your customers, we process data on your behalf:

• Customer identifiers (external IDs, email addresses)
• Customer attributes and custom properties
• Event tracking data
• Device information and push notification tokens
• Session and page view data

Usage Data

We automatically collect information about how you use our services:

• API usage and performance metrics
• Dashboard access logs
• Error logs and diagnostic information
• IP addresses and browser information

How We Use Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process push notifications and in-app messages
• Deliver customer journey automation
• Maintain customer data profiles and analytics
• Process payments and manage subscriptions
• Send service-related communications
• Respond to support requests
• Ensure security and prevent fraud
• Comply with legal obligations

Data Sharing

We share information with third-party service providers who help us operate our platform:

• Stripe - Payment processing and subscription management
• AWS SES - Email delivery services
• MongoDB - Primary database storage
• Redis - Caching and rate limiting
• Firebase Cloud Messaging (FCM) - Push notification delivery

All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify. We do not sell your data to third parties.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Retained while your account is active and for a reasonable period after termination
• Customer data: Retained according to your instructions and our Data Processing Agreement
• Usage logs: Retained for [period] for security and troubleshooting purposes
• Billing records: Retained as required by law (typically 7 years)

You may request deletion of your data at any time, subject to our legal obligations and the terms of our Data Processing Agreement.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access - Request a copy of your personal data
• Rectification - Correct inaccurate or incomplete data
• Erasure - Request deletion of your data
• Portability - Receive your data in a structured format
• Objection - Object to processing of your data
• Restriction - Request limitation of processing

To exercise these rights, please contact us at [legal@tappd.com] or [support@tappd.com]. We will respond to your request within 30 days (or as required by applicable law).

Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure password hashing (bcrypt with 12 rounds)
• API key encryption
• Rate limiting and DDoS protection
• Regular security audits and updates
• Access controls and authentication

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: