Privacy

What we collect, and what we never do with it.

Plain English, because a procurement office at a university or a city government is going to read this before they let you book us.

Draft — needs legal review before launch. This page states our intended practice accurately but has not been reviewed by counsel, and retention periods are marked where they still need to be set.

What we collect

From organizers: name, work email, organisation, event details and billing information.
From attendees: whatever the organizer's registration form asks for — typically name, title, company and email — plus check-in timestamps and, where the organizer enables it, networking connections and session attendance.
From the website: privacy-preserving, cookieless analytics. No advertising trackers, no cross-site profiles, no cookie banner because we don't need one.

Who owns attendee data

The organizer does. It lives in their dashboard and is exportable to CSV or Excel at any time. We process it on their behalf to run their event.

What we never do

We do not sell attendee data. Not to sponsors, not to data brokers, not to anyone.
We do not share one client's attendee data with another client. Sponsors see only the leads captured at their own booth, at their own event.
We do not use attendee data to build a cross-event profile that follows a person between organisations without their knowledge.

Retention

Event data stays available in the organizer's dashboard for as long as their account is active. On written request we delete an event's attendee records within [RETENTION PERIOD — to be set] days. Local caches on the kiosk are wiped when the event folder is removed from the device.

How an attendee opts out

Networking profiles are opt-in at check-in. An attendee can ask their event organizer to remove their record, or write to andrew@tapnwith.me directly and we will remove it and confirm.

Security posture, stated honestly

We are not SOC 2 certified today. We would rather say that than imply otherwise. What we can tell you: attendee data does not traverse the venue's network — Entry uses its own cellular connection; a Certificate of Insurance is available on request; and we will answer any security questionnaire you send us truthfully, including the parts where the answer is "not yet."

Questions about any of this go to andrew@tapnwith.me and reach a person, not a ticket queue.