Privacy policy
What TapThru collects when you use it, why, who can see it, how long it is kept and how to have it deleted.
Last updated
Who we are
TapThru is run by [Company name], [Company address]. You can reach us at hello@tapthru.link.
What we collect and why
When you create an account
Your name, your email address and your password, which is stored only as a secure hash. If you switch on two-factor authentication, its secret and recovery codes are stored encrypted. We use these to sign you in, to confirm your email address, and to send you emails about your account, invitations and problems with your Instagram connection.
When you connect Instagram
Your Instagram username, name, account type and profile picture, and your posts: their pictures or video covers, captions, types, dates, addresses on Instagram, and like and comment counts. If you allow insights, also the reach, saves and shares of posts from the last 30 days. We keep scaled-down copies of the pictures, so your page stays fast, and the access token Instagram gives us, encrypted. The page on Instagram permissions has the details.
When someone visits a public page
Public pages set no cookies and store no IP addresses. To count a visit, the page looks at the browser's user agent to leave out bots and to tell phones from computers, then adds one to a count for that hour, source and kind of device. A tap on a post or a header button is counted the same way before the visitor is sent on. These counts cannot identify anyone, and the organization behind the page sees them in its dashboard.
When you use the dashboard
The dashboard sets the cookies it needs to keep you signed in and to protect its forms: a session cookie, a security token and, if you choose to stay signed in, a remember-me cookie. It sets no advertising or analytics cookies.
On this website
This website sets no cookies. If you pick a light or dark theme, the choice is kept in your own browser and never sent to us.
Who can see your data
- The members of your organization see its posts, links, settings and numbers. Its admins also see the names and email addresses of its members.
- The people who run TapThru can see every organization and account, to operate and support the service.
- Our service providers process data for us: [Hosting provider] hosts the service and [Email provider] delivers its emails.
- Meta receives what Instagram Login needs when you connect an account.
We do not sell your data or use it for advertising.
Requests from public authorities
We disclose personal data to a public authority only when the law requires it. We review every request for legality, challenge requests we consider unlawful, disclose only the minimum data needed, and keep a record of each request, our response and the legal reasoning.
How long we keep it
- Your account is kept until you ask us to delete it.
- Instagram data is kept while your organization exists. Disconnecting deletes the access token at once; posts, pictures and links stay so your page keeps working. Connecting a different Instagram account deletes everything imported from the previous one, and so does a deletion request that Meta passes on from the Instagram account.
- Deleting an organization deletes its posts, pictures, links, settings and counts.
Deleting your data
Write to hello@tapthru.link from the email address of your account, and we will delete your account, and your organization with everything in it if you ask.
You can also remove TapThru's access to your Instagram account at any time, in Instagram under Settings, Apps and websites. Meta tells us straight away: we stop reading from the account and let the organization's admins know, and the posts already imported stay on its page. If you also ask Meta to have your data deleted from TapThru, we delete everything we imported from your Instagram account at once: the profile, the posts and their pictures, the links added to them and their click counts, and the access token. Meta gives you a confirmation code and a link to a page that shows the status of your request.
Your rights
Depending on where you live, you may ask us for a copy of your data, to correct it, to delete it, to limit how we use it or to hand it over in a common format, and you may object to how we use it. Write to hello@tapthru.link. You can also complain to [Supervisory authority].
Changes to this policy
When this policy changes, we update the date at the top. If a change matters to how your data is used, we also email the people who have an account.