Create QR Code Build Your Bio Page

TappyLinks Privacy Policy

Effective Date: September 15, 2026
Last Updated: September 15, 2026

Tappy Technologies LLC, a Washington limited liability company doing business as Tappy Links / TappyLinks and MediTappy (“Company,” “TappyLinks,” “MediTappy,” “we,” “us,” or “our”), respects your privacy and is committed to being transparent about how information is collected, used, stored, processed, and disclosed.

This Privacy Policy applies to TappyLinks.com, shop.tappylinks.com, shop.MediTappy.com, MediTappy.com, TappyLinks-hosted profiles, BioLinks, BioPages, digital business cards, QR code services, NFC-enabled services, online stores, account features, and other services operated by Tappy Technologies LLC through TappyLinks and MediTappy (collectively, the “Services”).

This policy replaces the prior TappyLinks Privacy Policy issued in the name of Plus Six Solutions. Beginning September 15, 2026, Tappy Technologies LLC is the business that decides why and how personal information is processed for the Services. Plus Six Solutions is a separate sole proprietorship that may provide hosting and technical services to the Company under a written agreement. It is not the operator of TappyLinks or MediTappy and is not authorized to use your information for its own purposes except as a service provider described in this policy.

Certain Services, including MediTappy, may allow users to provide medical, health, emergency, or other information that qualifies as consumer health data. Consumer health data is governed by our separate Consumer Health Data Privacy Policy: https://tappylinks.com/consumer-health-data-privacy

If information qualifies as consumer health data under applicable law, the Consumer Health Data Privacy Policy will control with respect to our collection, use, processing, sharing, and deletion of that information.

1. An Important Distinction: Account Information and Profile Content

TappyLinks distinguishes between Account Information and Profile Content.

Account Information is information used to establish, administer, support, secure, bill, and maintain our relationship with you. Depending on the Services you use, that may include your name, email address, username, telephone number, billing address, shipping address, account preferences, products or services purchased, subscription or account status, order and transaction history, affiliate or referral attribution, customer service and support history, and other administrative information associated with your relationship with Tappy Technologies LLC.

Account Information may be used internally by Tappy Technologies LLC across the brands and services it operates, as described in this Privacy Policy.

Profile Content means information that you or another authorized user places within a TappyLinks-hosted profile or page, including BioLinks, BioPages, digital business cards, personal profiles, business profiles, menus, landing pages, emergency profiles, MediTappy profiles, images and media uploaded to profiles, links placed within profiles, and other user-created or user-managed hosted pages.

We treat Profile Content differently from Account Information.

Profile Content is processed only as necessary to provide, host, store, maintain, secure, display, deliver, or support the profile or Service requested by the user, when the user directs us to make the information available, or when processing is otherwise required by law or necessary to protect the security or integrity of our Services.

We do not use Profile Content for cross-brand marketing, advertising, affiliate tracking, marketing segmentation, mailing-list creation, promotional personalization, or unrelated business purposes. We do not use Profile Content to build advertising audiences or marketing profiles. We do not sell Profile Content.

This restriction applies to all Profile Content, not only medical or health information.

2. Information We Collect

The information we collect depends on how you interact with us and which Services you choose to use.

Account and Registration Information. When you register for an account or use account-based features, we may collect name, email address, username, password or authentication credentials in protected form, telephone number, account preferences, and other information necessary to establish and administer your account.

Profile Content. We process information you choose to add to a TappyLinks-hosted profile so that we can provide the profile functionality you requested. Depending on the type of profile, this may include name or display name, business name, photographs, logos, contact information, website addresses, social media links, business information, hours, addresses or locations, images, videos, links, descriptions, biographical information, and other information you choose to provide. We do not repurpose this Profile Content for unrelated marketing, advertising, affiliate, analytics, or cross-brand purposes.

Consumer Health Data. Certain services, including MediTappy, may allow users to provide medical, health, emergency, medication, allergy, condition, disability, or similar information. Information that qualifies as consumer health data is governed by our separate Consumer Health Data Privacy Policy. Review that policy before providing health-related information through MediTappy or another health-related TappyLinks feature.

Purchase and Transaction Information. If you purchase a product or paid Service, we may collect name, billing address, shipping address, email address, telephone number, products or services purchased, order number, transaction amount, order history, shipping information, payment status, and refund or transaction records.

Tappy Technologies LLC uses PayPal and may use Stripe or other processors to process certain payments. Payment card numbers, bank information, PayPal credentials, and similar payment credentials may be collected and processed directly by PayPal, Stripe, or applicable financial institutions rather than being stored directly by TappyLinks. We may receive information from those providers necessary to confirm payment, fulfill an order, issue refunds, provide customer service, prevent fraud, and maintain accounting and transaction records. Those processors handle certain information according to their own privacy policies, terms, fraud-prevention obligations, and legal requirements.

Usage, Device, and Technical Information. When you access our websites or Services, certain technical information may be collected automatically, including IP address, browser type, device type, operating system, referring website or page, approximate geographic information, date and time of access, pages visited, login activity, session information, error and diagnostic information, and other technical information necessary to operate, secure, and understand use of our Services.

We use Google Analytics to help us understand general website traffic. We do not use Profile Content for Google Analytics and do not intentionally transmit Profile Content to Google Analytics for advertising, audience building, marketing, or analysis of profile contents.

Analytics relating to TappyLinks QR codes, links, or profile visits may also be generated as part of features provided to the applicable account holder. Those operational analytics are used to provide the requested functionality and are not used to analyze the substantive content users place within their profiles.

Communications With Us. If you contact us, request support, submit a form, or otherwise communicate with us, we may collect name, email address, telephone number, the contents of the communication, account or order information relevant to your request, and records of our communications.

Comments. If comments are enabled, we may collect the comment-form information plus IP address and browser user-agent information for spam detection, moderation, and security. If Gravatar or a similar profile-image service is enabled, an anonymized value derived from your email address may be provided to that service. Once a comment is approved, an associated profile image may be publicly visible with the comment.

Uploaded Media. If you upload images or other media to a publicly accessible profile, avoid including embedded location information or other file metadata you do not want others to access. Another person may be able to download the file and extract embedded metadata.

3. How We Use Account Information

We may use Account Information to establish and maintain accounts; authenticate users; process and fulfill orders; manage purchases and subscriptions; connect purchased products with user accounts; provide customer support; respond to questions and requests; communicate about accounts, products, or Services; maintain security; detect fraud, abuse, and unauthorized activity; troubleshoot technical problems; maintain transaction, tax, and accounting records; understand general website usage; improve our products and Services; administer affiliate and referral programs; send marketing communications where permitted; enforce our Terms and Conditions; comply with applicable laws; and protect the rights, property, and security of Tappy Technologies LLC, our users, and others.

4. How We Use Profile Content

We use Profile Content only for purposes reasonably related to providing the profile or Service requested by the user. That may include storing and hosting the profile, displaying information you selected, making a profile available through its web address, connecting the profile with a QR code or NFC-enabled product, delivering profile content when someone accesses the applicable link, allowing the account holder to edit or manage the profile, backing up and protecting information, preventing abuse or unauthorized access, troubleshooting, providing technical support, and maintaining platform security.

We do not use Profile Content to advertise to you or others, to decide what marketing messages to send you, or for affiliate attribution. We do not provide Profile Content to our other brands for marketing or unrelated business purposes. We do not provide Profile Content to Hostinger Reach or other email-marketing platforms for mailing-list creation, segmentation, personalization, or promotional campaigns. We do not sell Profile Content.

5. Public and Shareable Profiles

An important feature of TappyLinks is the ability to create information that can be intentionally shared through web addresses, profile links, short links, QR codes, NFC-enabled products, and other sharing methods.

Information you choose to publish through a public or shareable profile may be accessible to anyone who obtains access to that profile.

Making Profile Content publicly accessible at your direction is not the same as Tappy Technologies LLC sharing that content for marketing or unrelated purposes. We display the information because you instructed the Service to make it accessible.

You are responsible for deciding what information to make accessible. Do not place information in a publicly accessible portion of a profile that you do not want others to view.

Although you may later edit, restrict, or remove information, we cannot control copies, screenshots, photographs, downloads, recordings, or other copies made by another person while the information was accessible.

MediTappy emergency profiles have additional privacy considerations described in our Consumer Health Data Privacy Policy.

6. Internal Use Across Company Brands

Tappy Technologies LLC operates Tappy Links / TappyLinks and MediTappy as brands of the same company. They are not separate legal entities.

We may use Account Information internally across Company brands when reasonably necessary for account administration, customer service, order fulfillment, billing, product support, fraud prevention, security, customer communications, maintaining business records, and marketing permitted by applicable law.

For example, if a customer purchases a MediTappy product and that product uses a TappyLinks account, relevant Account Information may be used to connect the purchase with the appropriate account and provide customer support.

Profile Content is excluded from this cross-brand marketing use. Information contained within a BioLink, BioPage, digital business card, MediTappy profile, or other TappyLinks-hosted profile is not shared across our brands for marketing, advertising, affiliate tracking, customer profiling, mailing-list segmentation, or unrelated business purposes.

Plus Six Solutions is not a Company brand. It is a separate sole proprietorship. Account Information and Profile Content are provided to Plus Six Solutions only as needed for it to perform hosting, maintenance, backup, and technical support for the Company, as described in Section 10.

7. We Do Not Sell Personal Information

Tappy Technologies LLC does not sell personal information. That includes Account Information, Profile Content, customer contact information, purchase history, mailing-list information, affiliate information, and consumer health data.

We do not sell personal information to data brokers. We do not exchange personal information for money or other consideration as a business model. Our use of service providers to perform necessary functions on our behalf is not intended to constitute a sale of personal information.

Consumer health data is subject to additional restrictions in our Consumer Health Data Privacy Policy.

8. Cookies and Similar Technologies

We use cookies and similar technologies to operate our websites, maintain account sessions, provide requested functionality, measure general website performance, and administer affiliate programs. Cookies may be used to maintain login sessions, remember preferences, keep users signed in when requested, maintain security, remember display settings, support shopping carts and checkout, measure general website traffic, support Google Analytics, track affiliate and referral activity, attribute registrations or purchases to an affiliate or referral source, and provide other requested website functionality.

Login and Functional Cookies. A temporary cookie may be used on a login page to determine whether your browser accepts cookies. Login cookies may maintain your session and preferences. “Remember Me” may cause login information to persist longer. Logging out generally removes or invalidates applicable authentication cookies.

Affiliate and Referral Cookies. Tappy Technologies LLC operates affiliate and referral programs, including the TappyLinks Physical Products Affiliate Program. When you follow an affiliate or referral link, a cookie or similar identifier may be stored or read so we can determine the source of the referral, the campaign, when the referral occurred, whether a qualifying registration or purchase occurred, and information needed to calculate or administer a commission.

Affiliate tracking does not use Profile Content. Affiliates do not receive access to profile contents through the affiliate program. Attribution is based on referral and account or transaction-level information.

Analytics Cookies. We use Google Analytics to understand general website traffic. Profile contents are off-limits for those analytics. We do not intentionally transmit Profile Content to Google Analytics for analysis, advertising, audience building, or marketing.

Payment-Related Cookies. PayPal, Stripe, and other payment providers may use cookies or similar technologies for payment, security, authentication, and fraud prevention.

Managing Cookies. You may configure your browser to block or remove cookies. Blocking certain cookies may affect login, carts, checkout, saved preferences, affiliate attribution, analytics, or other features.

9. Email and Communications

We currently use Zoho and Hostinger Reach for certain email and communication functions.

Zoho may be used for business email, customer correspondence, support, account communications, order-related communications, and other direct communications.

Hostinger Reach may be used for mailing-list management, newsletters, product announcements, promotional communications, launch information, and related campaign functions.

These providers may process account-level information such as name, email address, subscriber status, delivery status, opens, clicks, and unsubscribe requests.

Profile Content is not provided to Hostinger Reach for marketing purposes. We do not use the contents of a BioLink, BioPage, digital business card, MediTappy profile, or other profile to determine mailing-list membership, segment marketing audiences, personalize promotional communications, or otherwise target marketing messages.

You may unsubscribe from promotional email using the method in the message. Unsubscribing from promotional communications does not stop necessary account, order, security, support, transactional, or service-related communications.

10. Service Providers and Infrastructure

We use third-party providers and contracted infrastructure to operate the Services.

Payment processing: PayPal and, where used, Stripe.

Analytics: Google Analytics.

Hosting and infrastructure: Plus Six Solutions, a separate sole proprietorship, provides hosting, ordinary repair, and backup services to Tappy Technologies LLC under a written services agreement. Servers used for those services are housed with infrastructure providers that currently include Hosting.com and Hostinger.com. Plus Six Solutions also maintains a home-office backup server used for disaster recovery.

Hosting providers and infrastructure may process or store Profile Content as part of hosting, storage, transmission, backup, security, and technical functionality. That processing does not give Plus Six Solutions or a hosting provider permission to use Profile Content for its own marketing, advertising, affiliate, or unrelated purposes.

Email and communications: Zoho and Hostinger Reach.

Other operational providers may include security, spam detection, software functionality, website maintenance, fraud prevention, shipping, order fulfillment, accounting and tax administration, and other operational services.

Service providers may process information only as appropriate for the function they perform for us, subject to applicable contractual and legal obligations. Consumer health data is subject to additional requirements in our Consumer Health Data Privacy Policy.

11. How We Disclose Information

We do not sell personal information. We may disclose or make information available in these limited circumstances:

At your direction. We display or make Profile Content available when you direct us to do so. For example, when you configure a profile to be accessible through a QR code, NFC-enabled product, or public link, we display the Profile Content you selected to people who access that profile.

Service providers. Information may be processed by service providers where necessary to provide services on our behalf. Profile Content is provided to or processed by a service provider only when necessary to provide, host, secure, maintain, transmit, or support the applicable Service.

Within Tappy Technologies LLC. Account Information may be used internally across Company brands for the purposes described in this Privacy Policy. Profile Content is not shared internally across our brands for unrelated business, marketing, advertising, affiliate, or promotional purposes.

Legal and safety reasons. We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, respond to valid legal process or lawful government requests, protect against fraud or abuse, investigate security incidents, protect system integrity, enforce our agreements, protect our legal rights, or protect the safety or rights of our users or others.

Business transactions. If Tappy Technologies LLC or a portion of its business is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred or processed as part of that transaction subject to applicable law. Consumer health data remains subject to applicable health-data privacy requirements.

12. Embedded and Third-Party Content

Profiles and pages may contain embedded content or links from third parties, including videos, images, social media, maps, payment services, websites, forms, and media players.

When you interact directly with embedded third-party content, that third party may collect information according to its own privacy policy. We do not control third-party privacy practices.

A user’s decision to place a third-party link or embed within a profile does not authorize Tappy Technologies LLC to use the other Profile Content on that profile for marketing or unrelated purposes.

13. Password Resets and Account Security

If you request a password reset, information such as your IP address or other security information may be associated with the reset process. You are responsible for maintaining the confidentiality of your login credentials. If you believe your account has been accessed without authorization, change your credentials and contact us promptly.

14. Data Retention

We retain information only as long as reasonably necessary for the purposes for which it is processed, including providing the Services, maintaining security, satisfying legal and accounting obligations, resolving disputes, and enforcing agreements.

Account Information may generally be retained while your account remains active and for an appropriate period afterward where necessary for legitimate administrative, legal, accounting, security, or fraud-prevention purposes.

Profile Content may generally be retained while you maintain the associated profile or account and as otherwise necessary to provide the Service.

When Profile Content is deleted, some copies may remain temporarily in backups, caches, logs, or disaster-recovery systems until those copies are deleted or overwritten through normal system processes. System backups used for TappyLinks and MediTappy, including backups maintained by Plus Six Solutions, are not retained for longer than 60 days.

Transaction, tax, accounting, security, and legal records may be retained where necessary to satisfy applicable requirements.

Consumer health data is subject to the additional retention and deletion provisions in our Consumer Health Data Privacy Policy.

15. Your Privacy Choices and Rights

Depending on the Services you use, you may be able to access, correct, update, or delete certain information directly through your TappyLinks account. You may also contact us for assistance.

Depending on applicable law, you may have rights that include confirming whether we process personal information about you; accessing personal information; correcting inaccurate information; requesting deletion; obtaining a copy of certain information; withdrawing consent where applicable; opting out of certain processing where required by law; and appealing certain privacy-request decisions where applicable.

We may need to verify your identity before completing a request. We will not unlawfully discriminate against you for exercising rights provided by applicable privacy law.

Privacy requests may be submitted to support@tappylinks.com, through the Contact page on TappyLinks.com, or another method we make available.

Rights relating specifically to consumer health data are described in our Consumer Health Data Privacy Policy.

16. Data Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction. Access is restricted according to operational need.

Profile Content is not made available internally merely because it exists within a user’s profile. Access should be limited to circumstances reasonably necessary to provide support, maintain or secure the Service, respond to a user request, investigate abuse or a security issue, or satisfy a legal requirement.

No Internet-based service can guarantee absolute security. Users are responsible for taking reasonable precautions to protect accounts, credentials, devices, QR codes, profile links, and other access methods. If you believe your account or information has been compromised, contact us promptly.

17. Children and Minors

TappyLinks is not directed to children under 13, and children under 13 should not independently create or manage a TappyLinks account. We do not knowingly allow children under 13 to create accounts for themselves.

A parent, legal guardian, caregiver, or other appropriately authorized adult may create or manage a profile concerning a child or dependent when that adult has appropriate authority. If such a profile contains consumer health data, that information is also governed by our Consumer Health Data Privacy Policy.

If we learn that a child under 13 has independently provided personal information in circumstances requiring parental consent, we will take appropriate action. If you believe a child has created an account or provided information without appropriate authorization, contact us.

18. Information About Other People

Users may create profiles or content concerning themselves, businesses, employees, family members, dependents, or other persons. The account holder is responsible for having appropriate authority to submit and publish that information.

If you believe someone has published personal information about you through TappyLinks without appropriate authorization, contact us so we can review the matter.

19. Automated Spam Detection and Security

Comments, contact forms, login attempts, and other submissions may be processed using automated systems designed to detect spam, fraud, malicious activity, unauthorized access, or security threats. Information processed for these purposes may include submission content, IP address, browser or device information, and other technical information relevant to security or abuse prevention.

20. Third-Party Privacy Practices

Certain providers maintain their own privacy policies. These include, where applicable, PayPal, Stripe, Google, Hosting.com, Hostinger, Zoho, and Plus Six Solutions solely in its capacity as a hosting and technical service provider.

Their independent processing is governed by their applicable privacy policies and legal obligations, and, for Plus Six Solutions, by its written services agreement with Tappy Technologies LLC.

Our use of a provider does not authorize that provider to use Profile Content for our marketing, advertising, affiliate tracking, or unrelated business purposes.

21. Links to Other Websites

TappyLinks profiles and websites may contain links to websites or services not operated by Tappy Technologies LLC. We are not responsible for the privacy, security, content, or data practices of those external services. This Privacy Policy governs Services operated by Tappy Technologies LLC.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Services, technology, business practices, providers, or legal obligations. When we make changes, we will update the “Last Updated” date. If a change materially affects how we handle personal information, we may provide additional notice when appropriate or required. Changes apply prospectively from their effective date unless applicable law requires otherwise.

23. Contact Us

If you have questions regarding this Privacy Policy, believe information about you has been submitted without authorization, or wish to make a privacy request, please contact:

Tappy Technologies LLC
dba Tappy Links / MediTappy
5212 NE 72nd Cir
Vancouver, WA 98661-1485
Email: support@tappylinks.com
Website: https://tappylinks.com

Privacy and support requests may also be submitted through the Contact page on TappyLinks.com.

For requests involving medical, health, or other consumer health data submitted through MediTappy or another health-related TappyLinks Service, follow the procedures in our Consumer Health Data Privacy Policy and identify the message as a Consumer Health Data Privacy Request.

24. Related Policies

This Privacy Policy should be read together with:

If this Privacy Policy and the Consumer Health Data Privacy Policy both address information that qualifies as consumer health data, the Consumer Health Data Privacy Policy will control with respect to that information.