Privacy Policy

What we collect

• Account details: your name, email, business name and password (stored only as a secure hash).
• License details: the business names and addresses of the locations you register.
• Orders: what you bought, amounts, dates and payment references from our provider. We don't receive your full card number.
• Usage: which tracks you download, and basic play counts per track (not tied to your identity) so we can show what's trending.
• Security logs: a shortened, one-way hash of your IP address on downloads and sign-in attempts, to prevent abuse.

How we use it

To run your account and license, show proof of license, send emails you need (verification, receipts, renewal reminders), prevent misuse, and improve the catalogue. We don't sell your data and we don't use advertising trackers.

Who we share it with

• Paddle, our reseller and Merchant of Record, which takes payments and handles tax and invoices. Paddle receives your name, email, country and payment details directly at checkout.
• Cloudflare, which hosts the site, database and files.
• Brevo, which delivers our account emails (and, if you sign up, our newsletter).
• Zoho, which hosts our support and business mailboxes.

Each processes data on our behalf under its own privacy commitments.

Cookies

We use a sign-in cookie and two preference cookies (language and theme). They're needed for the site to work, so there's no cookie banner.

How long we keep it

Account and license records are kept while your account is open and for up to 7 years after for tax and dispute purposes. Sign-in sessions expire after 30 days. Security logs are kept for up to 12 months.

Your choices

You can update your details in your account, and email support@tapiros.com to get a copy of your data or ask us to delete it. Some records may need to be kept for legal reasons, and we'll tell you if so.