Privacy Policy

tapuz is a design token management platform. This policy explains what personal data we collect, how we use it, and your rights regarding that data.

Account data: Your email address, name (if provided via Google), and encrypted password hash.

Billing data: Subscription plan and status. Payment card details are handled entirely by Stripe, we never see or store them.

Project data: Project names, API keys, and design token configurations you create and save.

Usage data: We do not currently use analytics tracking or third-party behaviour monitoring.

Cookies: We use a functional session cookie (required for authentication). No tracking or advertising cookies are used.

We use your data to:

• Operate your account and authenticate your sessions
• Manage your subscription and process payments via Stripe
• Deliver design tokens to your connected projects via API
• Send transactional emails (account verification, password reset, payment confirmation)

We do not sell your data. We do not use your data for advertising.

Stripe:payment processing. Subject to Stripe's Privacy Policy.

Resend:transactional email delivery. We share your email address to send account-related emails.

Google:if you use Google sign-in, Google provides your email and name. Subject to Google's Privacy Policy.

Your data is stored on a private VPS hosted by Hostinger in the EU.

We retain your data for as long as your account is active. If you delete your account, all your data (projects, tokens, subscription records) is permanently deleted from our database immediately.

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data (available in Settings)
• Object to or restrict processing of your data
• Portability:request a copy of your data

To exercise any right other than account deletion, email support@tapuz.io.

We use one functional cookie: a session cookie required to keep you signed in. This cookie is essential for the Service to work and cannot be opted out of while using the platform.

We do not use analytics, advertising, or tracking cookies.

Passwords are hashed using bcrypt. All data is transmitted over HTTPS. Access to our database is restricted to authenticated connections only.

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform.

For privacy-related questions or to exercise your rights, email support@tapuz.io.