Privacy Policy

JomTap (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our website, dashboard, NFC cards, and related services (the “Service”).

By using the Service, you agree to the practices described here. If you do not agree, please discontinue use of the Service.

We collect information in the following ways:

• Account information: Your name, email address, profile photo, and password (managed via Clerk).
• Profile content: The display name, bio, social links, contact details, custom links, and theme preferences you publish to your profile.
• Payment information: For paid plans and NFC card purchases, billing details are collected and processed by Stripe. We do not store full card numbers on our servers.
• Usage data: Pages visited, taps and views on your profile, device type, browser, approximate location (from IP), and similar diagnostic information.
• Cookies: Small data files used for authentication, preferences, and analytics. See our cookies section below.

We use your information to:

• Provide, operate, and maintain the Service.
• Process orders, subscriptions, and payments through our payment processor.
• Authenticate your account and prevent abuse or fraud.
• Send transactional messages (order confirmations, security alerts, billing notifications).
• Improve our products through analytics and aggregated usage patterns.
• Send occasional product updates and marketing emails — only if you have opted in. You may unsubscribe at any time.
• Comply with legal obligations.

We do not sell your personal information. We share information only as follows:

• Public profile data: Information you choose to publish (e.g. name, bio, social links) is intentionally public at your profile URL.
• Service providers: With trusted vendors that help us operate the Service — including Clerk (authentication), Stripe (payments), Cloudinary (media), Supabase (data storage), and hosting providers — under strict data-processing agreements.
• Legal requirements: When we are required by law, regulation, court order, or to protect the rights, safety, and property of JomTap or others.
• Business transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before any transfer that changes the terms of this Policy.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used.

• Essential cookies: Required for authentication and core functionality. These cannot be disabled without breaking the Service.
• Analytics cookies: Help us measure usage and improve features. You can opt out through your browser settings.

You can configure your browser to block or alert you about cookies, but parts of the Service may not function properly without them.

We take security seriously. We use industry-standard safeguards to protect your information, including:

• TLS 1.2+ encryption for all data in transit.
• Encryption at rest for sensitive data and credentials within our trusted infrastructure providers.
• Role-based access controls for internal systems.
• Regular monitoring, audits, and dependency updates to mitigate vulnerabilities.

No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g. tax and accounting records).

Depending on where you live, you may have the following rights regarding your personal data:

• Access, correct, or update the information we hold.
• Request deletion of your personal data.
• Object to or restrict certain processing activities.
• Request a portable copy of your data in a machine-readable format.
• Withdraw consent for marketing communications at any time.

To exercise any of these rights, email us at hello@jomtap.com. We will respond within 30 days.

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided personal information to us, please contact us and we will delete it.

Your information may be processed in countries outside your country of residence, including in countries that do not have the same data protection laws as your jurisdiction. We rely on appropriate legal safeguards (such as standard contractual clauses) for cross-border transfers.

Your JomTap profile may include links to third-party websites and social platforms. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via a prominent notice on the Service prior to the changes taking effect. The “Last updated” date at the top of this page reflects the most recent revision.

Questions, complaints, or privacy requests? Email us at hello@jomtap.com or visit our contact page.