Privacy for businesses
Business information
TapDibs Ltd. uses owner and staff identities, business profile and contact details, locations, uploaded material, staff permissions and owner acceptance records to operate your business account. Acceptance records include identity, document version and time.
Promotions and reports
Published business names, locations, logos and promotion content are visible to viewers. Private business details are limited to authorized access. Promotion and redemption records connect videos, offers and Dib identity references to outcomes and amounts for your reports, statements and account support. Use information about your Dib holders only for authorized business purposes.
Billing and service providers
TapDibs retains the billing references and records needed to calculate, collect and report its fees, not customer sale payments. Providers support hosting, sign-in, private media and email, and may process information outside your province or country under applicable safeguards. TapDibs may use third-party automation providers to send claim links in response to comments and messages, and a commenter’s public profile information is processed for that purpose. Some of our service providers are located outside Canada, including in the United States — they help with sign-in, email delivery, phone alerts and data storage. Their written policies about personal information are available from the Privacy Officer, TapDibs Ltd. (info@tapdibs.com), who can also answer questions about them.
Staff and counter security
Owner permissions control business settings and individual staff access. Counter-device capabilities and four-digit codes are protected; code entry is attempt-limited and email verification gates resets. Private media uses time-limited links. Sessions use browser storage or cookies. No online service can guarantee absolute security.
Retention and business closure
We retain billing, promotion and redemption history needed for accounting, record integrity, disputes and legal obligations after business closure. Closing the business does not delete all historic records. When your business account closes, we settle any amount owing, then delete the personal information in the account within 30 days. Our business records are different: Canada's Income Tax Act (section 230) requires us to keep our books — your billing history, fees charged, and the redemption volumes those fees were based on — for six years from the end of the tax year they belong to. Where those records name a person, we remove or anonymize the name when it is no longer needed. Message consent records are kept at least three years. Backup copies are overwritten within 30 days. Records caught in an active dispute or legal hold are kept until it ends. Three records outlive the 30 days where the law requires it: information about a decision we made about your account is kept at least one year so you can ask for it; breach records are kept at least 24 months; and if you unsubscribe from marketing messages we keep just enough to honour that choice — that record is not deleted.
Privacy contact and breaches
The person responsible for privacy at TapDibs is the Privacy Officer, TapDibs Ltd. — contact: info@tapdibs.com. If a privacy breach creates a real risk of significant harm, we report it to Alberta's Information and Privacy Commissioner without unreasonable delay, and we tell the people affected when the law requires it. If a breach involves information handled across provincial or national borders, we also report it to the Privacy Commissioner of Canada as soon as feasible, we tell the people affected as soon as feasible, and we keep a record of every breach for at least 24 months.
Your rights and updates
Ask about access to or correction of business-associated personal information and applicable privacy rights. Identity verification may be required. Material policy updates will be communicated where required by law.
Rewards
Your business can see a customer's locks and redemptions at your own business and can send that customer rewards inside TapDibs. You never see a customer's activity at any other business.
Connected services — calendars and QuickBooks
B1. Connecting a service is always your choice. Some TapDibs features work with services you already use, such as Google Calendar and QuickBooks Online. You connect them from the Integrations tab. Connecting is optional, it is off until you turn it on, and nothing in this section happens before you connect. You can disconnect at any time from the same tab (see B8). B2. When you connect Google Calendar — what we read. When you connect a Google Calendar — yours as the owner, or a staff member connecting their own — TapDibs reads only the times you are busy and the times you are free. We use those busy and free times for one purpose: to find the open slots in your week so you (or that staff member) can plan promotions into them. We do not read the titles, descriptions, guests or locations of events already in your calendar, and we never change or delete an event that was already there. B3. When you connect Google Calendar — what we write. When a slot you planned is filled — a Dibber takes a lock for it — TapDibs adds a booking event to the connected calendar, showing the time, the promotion and that it came from TapDibs. TapDibs changes or removes only booking events TapDibs itself added, for example when a planned date is moved or a promotion is ended before it starts. A booking that has been redeemed, or whose time has passed, is never changed. B4. Your TapDibs record is the one that counts. Your records in TapDibs are the source of truth for every promotion, lock and redemption. A connected calendar holds a copy of a booking, never the booking itself. If a calendar copy is edited or deleted — by you, by a staff member, or by anyone else — nothing in TapDibs changes: the lock still stands on the terms it was taken. If TapDibs and a calendar ever disagree, the TapDibs record governs. B5. How we use Google data — our Limited Use commitments. TapDibs' use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. That means: (a) we use Google Calendar data only to provide and improve the calendar features described in this section, as they appear in TapDibs; (b) we do not sell Google data, and we do not transfer it to anyone except as needed to run these features, for security, to comply with the law, or as part of a sale of the business with your explicit consent first; (c) we never use Google data for advertising of any kind, to decide anyone's creditworthiness, or to train general artificial-intelligence or machine-learning models; and (d) no person at TapDibs reads your calendar data, except with your documented consent (for example, if you ask us to look at a specific booking while helping you), where data has been aggregated and anonymised for internal operations, for security, or where the law requires it. B6. Staff calendars belong to the staff member. A staff member connects their own calendar, with their own consent, and can disconnect it themselves at any time. An owner cannot connect, read or disconnect a staff member's calendar for them. A staff member's busy and free times are used only to plan that staff member's own promotions. Owners see a staff member's planned promotions and their results; they do not see the staff member's other calendar entries or busy times beyond the promotions planned in TapDibs. B7. When you connect QuickBooks Online — what we send, and what we do not. When you connect QuickBooks Online from the Integrations tab, you can direct TapDibs to send summaries from your own TapDibs reports into your QuickBooks books. What we send is limited to: your redeemed sales totals for the period, the TapDibs fees charged to your business, and the tax amounts shown in your TapDibs reports, together with the dates and your business name so the entries land in the right books. We do not send the names, email addresses or any other personal information of your customers (Dibbers), any staff member's personal information, or any card numbers — TapDibs never holds card numbers. Sending is off until you turn it on, it sends only the periods you choose, and what lands in your QuickBooks is then governed by Intuit's terms and your own QuickBooks settings. If the connection also brings information back — such as your business name, address and tax registration, used to address invoices — we use it only for that purpose. B8. Disconnecting. When you disconnect a service in the Integrations tab, TapDibs' access ends immediately: we stop reading, stop writing and stop sending, and we delete the access tokens that let us connect. Copies already delivered stay where they were delivered — booking events already in a calendar remain yours to keep or delete in that calendar, and entries already sent to QuickBooks remain in your books, because both are yours. Your TapDibs records are unaffected. B9. Fill suggestions (the advisor). When this feature is available and turned on, TapDibs may suggest promotions that could fill open times in your week. A suggestion is built from two things only: the open times in a calendar connected under this section, and your own TapDibs history — which of your past promotions took locks and were redeemed, on which days and at which times. A suggestion is never posted for you: a person always reviews and approves it first, and staff suggestions remain subject to the owner's approval settings. Suggestions are never built from another business's identifiable information, and this data is never used for advertising. The feature has its own off switch, in the same place it is turned on. B10. Service providers outside Canada (calendars and QuickBooks). When you connect Google Calendar or QuickBooks Online, your information is collected, used and stored by Google or Intuit as our service provider in the United States, for the purposes in this section. Our written policy on service providers outside Canada, listing the countries and purposes, is available at [link to foreign-provider policy]. Questions about collection, use, disclosure or storage by a provider outside Canada: Privacy Officer, TapDibs, [contact email / mailing address].
Contact
Questions: info@tapdibs.com.