Privacy policy

Updated October 1, 2026. This policy describes the Location service provided under Tap Point.

Information we process

When you create or manage an account, we process your name, email, organization details, selected plan, Tap Points, uploaded artwork, team permissions, and settings. Authentication is handled through Supabase.

When a visitor follows a Location URL or uses a Tap Page, the service can record the time, Tap Point, browser/device information, referring page, and a first-party visitor identifier. Tap counts represent recorded visits, not unique people. Hosting services may also process network and security logs.

Cookies and local storage

The dashboard stores authentication sessions in the browser. Tap visits use a first-party visitor cookie, which can last up to one year. The Connector stores its scoped connection credential using operating-system encryption and keeps mappings on the production computer.

Integration information

If you connect Planning Center, we store encrypted authorization credentials and retrieve service information needed for your selected mappings. The ProPresenter Connector reads current slide notes locally and uses explicit keywords; it does not upload sermon text or raw slide notes. Connection names and permissions identify approved computers.

Why we use information

We use information to provide Tap Point routing, account access, analytics, team controls, requested integrations, security, and support. Church administrators can access their organization's activity and settings according to their permissions.

Service providers and public content

Vercel hosts the website and app downloads; Supabase provides account authentication and database storage. Planning Center processes information under its own policies when you connect it. Public Tap Pages, organization names, artwork, and Tap Point links you publish can be visible to anyone with their URL. Tap Point websites have their own privacy practices.

Retention and your choices

Account information and service activity are retained while needed to operate the service, address support or security issues, and meet applicable obligations. You can edit your profile and artwork, remove pages and mappings, and revoke production connections. Contact us to request access, correction, or deletion; we may need to verify account ownership. Backup copies may remain until normal backup expiration.

Contact and updates

Use our contact page for privacy questions. Updates to this policy will appear here with a revised date.