Privacy Policy

1. Information we collect

When you fill out a form on our website

Our website has forms to suggest a product, request a refund, report a machine problem, apply as a local maker, request a cooler, and contact us. Depending on the form, we collect what you type in, such as:

• Your name, email address, and phone number
• For cooler requests: your property or business name, address, type of facility, and about how many people use it
• For local maker applications: your business name, website or social handle, products, pricing, and permit status
• For refund requests: the cooler's location, the date and time of your purchase, the items, the amount, what went wrong, and (if you choose to give it) the last 4 digits of the card you used. We use the last 4 digits only to find your transaction. We never ask for your full card number, and you should never send it to us.
• Anything else you choose to include in a message, and whether you checked the optional text message box

When you buy from one of our smart coolers or micro markets

• Payment information. Card and phone-tap payments are handled by a third-party payment processor. Tap and Take does not receive or store your full card number. We may receive limited details from the processor, such as the card type, the last 4 digits, and an authorization or transaction ID, so we can match purchases and handle refunds.
• Transaction records. What was purchased, the price, the date and time, and which machine and location it came from.
• Camera and sensor data. Our smart coolers use cameras and sensors to recognize which products are taken off the shelves so you're charged correctly. This may include images or video recorded while the door is open. We use it to calculate your purchase, check accuracy, resolve refund requests and disputes, and investigate tampering or machine problems. We do not use it for facial recognition or to identify who you are.
• Machine data. Inventory levels, temperature, door status, and error logs from the machine. This is about the machine, not about you.

Automatically, when you visit our website

Like most websites, our hosting provider automatically receives basic technical information when you visit, such as your IP address, browser type, the pages you request, and the time of your visit. This is used to deliver the site, keep it secure, and troubleshoot problems. Our pages also load fonts from Google Fonts, which means your browser connects to Google's servers.

2. How we use it

We use the information we collect to:

• Process purchases at our machines and charge for the items taken
• Review and issue refunds, and respond to questions and problem reports
• Follow up on cooler requests, local maker applications, and messages
• Stock, maintain, and repair our machines, and decide what products to carry
• Send text messages about your request, only if you opted in
• Prevent fraud, theft, and tampering, and keep our machines and website secure
• Comply with the law and enforce our Terms of Use

We don't use your information to build advertising profiles.

3. How we share it

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We only share it in these situations:

• Service providers who help us run our business and are only allowed to use it to provide services to us. These include our payment processor, our website hosting provider, our email delivery provider (used to send form submissions to our team), our text messaging provider, and the provider of the equipment and software that runs our smart coolers and micro markets.
• Your payment processor and card issuer, as needed to process a charge, refund, or chargeback.
• Legal reasons. If required by law, subpoena, or court order, or to protect the rights, property, or safety of Tap and Take, our customers, our hosts, or others.
• Business transfers. If Tap and Take is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal, subject to this policy.
• With your permission, in any other case.

We don't share personal information about shoppers with the properties that host our machines, except where needed to look into a specific problem at their location (for example, tampering or damage).

4. Text messages (SMS)

If you check the optional text message box on one of our forms, you agree that Tap and Take Technologies may send text messages to the phone number you gave us about the request you submitted (for example, a question about your refund, a machine problem you reported, or your cooler request).

• It's optional. Consent to receive texts is not a condition of buying anything or using our services.
• Message frequency varies depending on your request.
• Message and data rates may apply based on your mobile plan.
• Reply STOP to any message to opt out. We'll send one message confirming you've opted out, and then stop. You can also opt out by contacting us.
• Reply HELP for help, or contact us at sales@tapandtake.tech or (858) 922-5377.
• Mobile carriers are not liable for delayed or undelivered messages.

We do not share or sell your mobile phone number or SMS consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are excluded from all of the sharing described in this policy and will not be shared with any third parties, except service providers (such as our text messaging provider) that help us send the messages you asked for.

5. Cookies and analytics

We don't currently use advertising cookies, tracking pixels, or website analytics tools. If we add analytics in the future, we'll update this policy first. Our website doesn't respond differently to "Do Not Track" signals because we don't track you across sites. We honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information, though we don't sell or share it to begin with.

6. Your California privacy rights

If you're a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the "CCPA"), gives you the right to:

• Know what personal information we've collected about you, where it came from, why we collected it, and who we've shared it with, and get a copy of it
• Delete personal information we've collected from you, subject to some exceptions (for example, records we need to complete a transaction or comply with the law)
• Correct inaccurate personal information we have about you
• Opt out of the sale or sharing of your personal information. We don't sell or share personal information, so there's nothing to opt out of, but you're welcome to contact us anyway
• Limit the use of sensitive personal information. We don't use sensitive personal information for any purpose that would trigger this right
• Not be discriminated against for using any of these rights. We won't deny you service or charge you a different price

In the past 12 months, we have collected the categories described in section 1: identifiers (like name, email, phone, and address), commercial information (purchase and transaction records), limited payment information (like card type and last 4 digits), internet activity (basic website logs), images or video from our smart coolers, and professional or business information (for cooler requests and maker applications). We collected it from you, from our machines, and from our payment processor, for the purposes in section 2, and shared it only as described in section 3. We have not sold or shared personal information.

To make a request, email sales@tapandtake.tech or call (858) 922-5377. We'll need to verify your identity, usually by matching information you give us with what we have on file. You can also have an authorized agent make a request for you, with your signed permission. We'll respond within 45 days, as the law requires (or let you know if we need more time).

7. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy. Form submissions and refund records are kept for as long as we need to handle your request and keep normal business, tax, and accounting records, and then deleted. Transaction records are kept as long as required for accounting and legal purposes. Camera and sensor recordings from our smart coolers are kept for a limited period so we can review purchases and resolve refund requests, and then deleted or overwritten.

8. Security

We use reasonable safeguards to protect your information, including encrypted (HTTPS) connections on our website and relying on a payment processor so that full card numbers never reach us. No system is perfectly secure, though, so we can't guarantee absolute security. Please don't send full card numbers or other sensitive information through our forms or by email.

9. Children's privacy

Our website and services are not directed to children under 13, and we don't knowingly collect personal information from children under 13 through our website. If you believe a child under 13 has sent us personal information, contact us and we'll delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top of this page. If we make significant changes, we'll make that clear on our website. Using our website or machines after a change means the updated policy applies.

11. Contact us

Questions about this policy or your information? Reach out:

Tap and Take Technologies
4901 Morena Blvd Ste 300
San Diego, CA 92117
Email: sales@tapandtake.tech
Phone: (858) 922-5377