Privacy Policy

Information we collect

• Customer booking/request data: name, email, phone, event date, guest count, venue or address, and any notes you share.
• Provider and venue listing data: business details, service areas, self-reported credentials, photos and pricing submitted by providers and venues.
• Payment tokens and processor identifiers: card numbers are never received or stored by Tap & Toast — payments are tokenized by our payment processor, and we store only the resulting token and transaction identifiers.
• Communications: messages sent through or in connection with the platform, including support requests.
• Security and access logs: basic technical logs used to secure the platform and diagnose issues.
• Document/credential verification metadata: where a provider or venue uploads a license, permit or insurance document in an authenticated provider/admin context, we record limited metadata about that document (such as upload date and status); the file itself is kept in private storage.

Data we do not collect through public forms

Tap & Toast does not collect Social Security numbers, bank account numbers, tax forms, card numbers or identity document scans through public website forms. Credential documents are handled only in authenticated admin or provider contexts and are kept in private storage.

Cookies and analytics

We do not currently use third-party advertising or analytics cookies. If that changes, this policy will be updated before the change takes effect.

How we use information

• To operate the marketplace: matching requests with providers and venues.
• To process bookings, deposits and balances through our payment processor.
• To send confirmations, reminders and account or listing communications.
• To maintain security logs and investigate misuse or incidents.
• To keep records required for accounting, tax and legal purposes.

Sharing

We do not sell your information. We share it only with the service providers needed to run the platform (payment processing, email delivery, hosting and database), and with the third-party provider or venue you request to be connected with.

Retention and deletion

We keep booking and listing records for as long as needed for the purposes described above and for tax and legal recordkeeping. You may request access to, correction of, or deletion of your information by emailing hello@tapandtoastusa.com.

State privacy rights

We do not claim compliance with GDPR, CCPA or CPRA. State-specific privacy rights language is pending legal review. If you have a privacy request, contact hello@tapandtoastusa.com and we will respond directly.

Security

We use reasonable technical and organizational measures to protect information, but no platform can guarantee absolute security.

Contact

Tap & Toast · hello@tapandtoastusa.com ·