Privacy

This English version is provided for convenience. The Spanish version governs.

Who we are

Taply is the brand under which this service is provided: a platform that lets a business set up an agent to handle WhatsApp, Instagram (messages and comments), Facebook (comments), its Google Business listing (reviews) and website chat conversations. This policy explains what information we collect when you use Taply, whether as a business setting up an agent or as a person writing to one, and what we do with it.

You can write to us about any privacy question at contact@gettaply.com.

Account data and authentication

You need an account to use Taply. We store the data provided by the authentication provider you log in with, such as the name and email associated with that account, and an internal identifier for your business. Authentication is processed by Stytch on our behalf: Taply does not store your password.

What information your agent handles

When you set up an agent, Taply stores:

• The business information you choose to add: hours, services, replies, rules and automations.
• The private files you upload for the agent to share: documents and images.
• The WhatsApp templates you create and their approval status.
• The conversations your agent holds over WhatsApp, Instagram (messages and comments), Facebook (comments), your Google Business listing (reviews) and your website chat, including the messages from the people who write to it.
• Technical service usage data, such as access logs, IP address, device type and application events, to keep the service running and detect problems.

The people who write to your agent do not create a Taply account: their messages are stored as part of the conversation with your business.

What we use this information for

We use this data to:

• Provide the service: let your agent reply, share files and check availability.
• Protect the platform: detect abuse, prevent unauthorized access and keep accounts secure.
• Improve Taply: understand what fails and prioritize fixes.
• Support you when you ask for it.
• Comply with legal obligations where applicable.

We do not use your business conversations to train general-purpose models outside Taply.

Google Calendar: what we do and what we do not do

If you connect Google Calendar, Taply requests access to the list of your calendars so that you can choose which ones your agent uses. For each calendar you can select, we store its identifier, its name, whether it is your primary calendar and its time zone.

For the calendars you choose, Taply reads only the intervals marked as busy or free; we do not read titles, descriptions, guests, locations or any other content of your events. In the calendar you designate for booking, your agent can also create, modify or cancel the appointments it books for your customer, always after the customer confirms: it does not touch events it did not create, and it does not write to any other calendar.

We use that availability so your agent knows whether a slot is free or busy and, in the calendar you chose, manages the appointments it books. OAuth access tokens are stored encrypted and always travel over HTTPS. We keep a short availability cache so as not to query Google on every message; after five minutes that cache is no longer considered current, although that does not mean it is deleted automatically at that instant.

When you disconnect Google Calendar from Taply, we delete the stored tokens, the calendar selection and the availability cache associated with your account. You can also revoke Taply's access directly from your Google Account, on the official third-party connections page: https://myaccount.google.com/connections.

We do not sell the information we obtain from Google Calendar, nor do we use it for advertising, scoring, surveillance or to train general-purpose artificial intelligence models. Our use of this data complies with the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy#limited-use.

Who we share it with

We do not sell your information. We share it only with the providers we need in order to operate Taply, under their own terms of service and limited to what is necessary to provide the service to you:

• Cloudflare, which hosts the platform infrastructure, hosting and storage.
• Stytch, which processes sign-in and authentication for your account.
• Kapso and Meta, which make your agent’s connection to WhatsApp possible; Zernio, Meta and Google, which make its connection to Instagram, Facebook and your Google Business listing possible.
• Google, when you connect Google Calendar, on the terms described above.
• Artificial intelligence model providers that Taply configures to generate the agent replies.

We may also share information when the law requires it, or to protect the rights, safety or property of Taply, of our users or of third parties.

International transfers and security

Some of these providers process information outside your country. When that happens, we seek providers that offer adequate data protection safeguards.

We apply reasonable technical and organizational measures to protect your information, such as encryption in transit and access control over the systems that store it. No system is perfectly secure: we cannot guarantee absolute security, but we can guarantee that protecting your data is something we take seriously.

How long we keep it

We keep your information while your account is active and for as long as we need it for the purpose we collected it for: providing the service, complying with legal obligations or resolving disputes. When you delete a resource or disconnect an integration, we stop using it for that purpose and remove it from active systems within a reasonable period. We do not set a single retention period for all data because it depends on the purpose and on the obligations that apply in each case.

Your rights

You can ask us to access your information, correct it or delete it, and to delete your account. To exercise any of these rights, write to us at contact@gettaply.com. We will respond within a reasonable period and, if we cannot fully meet a request, we will explain why.

Cookies and storage

We use cookies and local storage strictly necessary for authentication and the dashboard to work: keeping your session open and remembering basic interface preferences. We do not use advertising or cross-site tracking cookies.

Changes to this policy

We may update this policy when the service or the applicable regulations change. We will publish the current version on this same page with the date it was last updated.