Privacy Policy
Last updated 19 September 2026
The short version. TapTap reads messages in the channels you explicitly add, so it can tell when somebody was tagged and hasn't replied. It keeps message identifiers, a short excerpt for context, and your Slack timezone. It does not archive your conversations, sell data, or use it to train anything.
Who we are
QBX Consulting L.L.C. operates TapTap, a Slack application available at trytaptap.com. For any privacy question, or to request deletion, write to support@trytaptap.com.
Where your data is stored
TapTap's application and database run on servers in the European Union — Hetzner Online GmbH, in Nuremberg, Germany. Everything described below is stored there. The sub-processors listed further down may process data in other regions under their own terms.
QBX Consulting L.L.C. is registered in Kosovo. If you need details of the safeguards that apply to your workspace, write to support@trytaptap.com and we will provide them.
What we collect
Workspace and installation data
When someone installs TapTap we store the Slack workspace identifier, the installing user's identifier, and the access tokens Slack issues. Tokens are encrypted at rest with AES-256-GCM and are only ever used to call the Slack API on your behalf.
Message data from monitored channels
TapTap only processes messages in channels a workspace administrator has added. For each triggering message we store:
- The channel and message identifiers, and the thread identifier
- The identifiers of the person who posted it and the people mentioned
- An excerpt of up to 400 characters, so the nudge has context
- The time it was posted, used to calculate when a nudge is due
We do not store full message history, files, images, or messages from channels you have not added. Messages in channels TapTap is not watching are discarded without being written to storage.
Profile data
For anyone who may receive a nudge, we cache their display name and the timezone set on their Slack profile. The timezone is essential: it is what stops a nudge arriving in the middle of someone's night.
Billing data
Paid plans are sold by Paddle.com Market Ltd, which acts as the merchant of record for every purchase and handles payment processing and sales tax. We never see or store card details. We keep a Paddle customer identifier and your current plan so we know what your workspace is entitled to.
What we do not do
- We do not sell or rent your data to anyone
- We do not use your messages to train machine learning models
- We do not post nudges in your channels — every nudge is a private DM. TapTap writes in a channel only when someone @mentions it there, to answer them
- We do not tell anyone else that a person was nudged
- We do not read direct messages between your team members
How long we keep it
A daily job deletes data once it passes these periods. Nothing is kept indefinitely.
- Message excerpts — 30 days. The excerpt stored with a nudge is deleted 30 days after that nudge is answered, dismissed or cancelled. Excerpts for nudges still waiting are kept, because the reminder itself displays them. Afterwards only identifiers and timestamps remain, which record that a nudge happened, not what anyone wrote.
- Uninstalled workspaces — 30 days. Uninstalling stops all processing immediately. Thirty days later the workspace's data is deleted in full: its settings, watched channels, nudge records and cached profiles. Reinstalling within those 30 days finds its settings intact.
- Billing records. Kept while a subscription exists, and afterwards for as long as tax and accounting law requires. Paddle, as merchant of record, keeps its own records of every purchase.
When a channel is removed from monitoring, its pending nudges are cancelled immediately. You can ask us to erase your workspace's records sooner by emailing support@trytaptap.com.
Sub-processors
The third parties TapTap relies on to operate. Each is bound by its own contract and processes data only to provide the service described here. We will update this list before adding a new one.
- Slack Technologies, LLC — the platform TapTap runs on; the source of the messages it watches and the destination of every nudge
- Paddle.com Market Ltd (United Kingdom) — merchant of record for paid plans: payment processing, subscription management, invoicing and sales tax. Card details never reach TapTap
- Hetzner Online GmbH — application hosting and database storage in Nuremberg, Germany
- Cloudflare, Inc. — serves this marketing website. It handles no customer data from your Slack workspace
Your rights
Depending on where you live, you may have the right to access, correct, export or erase the data we hold about you, and to object to processing. Email support@trytaptap.com and we will respond within 30 days. A workspace administrator can exercise these rights on behalf of their workspace.
Security
Access tokens are encrypted at rest. All traffic is served over TLS. Requests from Slack are verified against a signing secret, and billing webhooks are verified against Paddle's signature, so neither can be forged.
Changes
If this policy changes materially, we will update this page and notify workspace administrators before the change takes effect.