Privacy Policy

This Privacy Policy explains how QuickyTap (“QuickyTap”, “we”, “us”), operated by Awwad Karam Awwad Ibrahim e.v., Péterfy Sándor utca, Budapest, Hungary (tax number 62767136), collects, uses, and protects personal data. It applies to our website at quickytap.com, our business dashboard at app.quickytap.com, and the review pages your customers use.

1. Who this applies to

We serve two groups: business customers who create an account to collect reviews, and the end-customers of those businesses who leave a review by tapping a QuickyTap card or scanning a QR code. This policy covers both.

2. Information we collect

From business customers — the account owner’s name and email, business details (name, category, review links, opening hours), login credentials (passwords are stored only as secure hashes), team members you invite, and billing information processed by our payment provider (we never store full card numbers).

From end-customers leaving a review — the star rating and the multiple-choice answers they tap, the review text our system generates from those answers, and limited technical context: device type, browser, operating system, approximate country, language, timestamps, and an irreversibly hashed version of the IP address. We do not ask end-customers for their name or email, and we never store raw IP addresses.

Usage data — how the dashboard and review pages are used, for analytics and to keep the service secure and reliable.

3. How we use data

• Provide the service — generate review drafts and route customers to the right review platform.
• Give businesses analytics, insights, and staff performance reporting.
• Process subscriptions and payments, and send service emails (verification, alerts, receipts).
• Keep the platform secure, prevent abuse, and comply with legal obligations.

4. AI-generated reviews

Review drafts are produced by an AI model based on the star rating and multiple-choice answers the customer selects. Those inputs are sent to our AI provider (OpenAI) to generate the text. The customer can read, regenerate, or edit the draft before choosing to post it — the final review is always their choice and their words.

5. Legal basis (GDPR)

Where the EU/UK GDPR applies, we rely on: performance of a contract (to provide the service to businesses), legitimate interests (analytics, security, service improvement, in a privacy-protective way), consent where required, and legal obligation (e.g. tax and accounting records).

6. Service providers we share data with

We do not sell personal data. We share it only with the processors that run our service:

• Vercel — application hosting.
• Supabase — database hosting (EU region, Frankfurt).
• OpenAI — AI generation of review drafts.
• Resend — sending transactional emails.
• Stripe — subscription billing and payment processing.

Each processes data only on our instructions. Some providers may process data outside the EEA; where they do, appropriate safeguards (such as Standard Contractual Clauses) apply.

7. Data retention

We keep business account data for as long as the account is active and as needed to provide the service. Review and analytics data are retained according to the business’s plan and our operational needs. Billing records are kept as required by law. You can request deletion as described below.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. You can exercise these rights by emailing hello@quickytap.com. If you are in the EU, you may also lodge a complaint with your local data protection authority (in Hungary, the NAIH).

9. Cookies

We use strictly necessary cookies to keep you logged in and secure the service. If we enable optional analytics cookies in the future, we will ask for consent where required.

10. Security

Data is encrypted in transit (HTTPS). Passwords are hashed, IP addresses are stored only as irreversible hashes, and access to production systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.

11. Children

QuickyTap is not directed to children under 16 and we do not knowingly collect their data.

12. Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, notified to account holders.

13. Contact

Questions about privacy? Email hello@quickytap.com or write to Awwad Karam Awwad Ibrahim e.v., Péterfy Sándor utca, Budapest, Hungary.

Have this policy reviewed by a lawyer before launch to confirm it meets your specific legal obligations.