Legal
Privacy policy
What we collect, why, and the things we will never do with it.
What this covers
Quest Consulting Group LLC, doing business as Tap For Reviews (“we”), sells NFC review cards and runs the service they point to. This policy explains what we collect, why, and what we do not do with it. It applies to tapforreviews.com, the dashboard, and the landing page your customers see when they tap one of your cards.
Our use of Google APIs is additionally governed by Google's own terms and privacy policy, which are incorporated here by reference.
Information you give us
- Account details — your name, business name and email address.
- Your Google listing — the place identifier for the business your card points to.
- Payment details — handled entirely by Stripe. We never see or store your card number.
- Anything you write to us — support messages, form submissions, replies you draft.
Information collected when someone taps your card
A tap is a request to our server. We record the card identifier, the time, and the name your location and card had at that moment. We do not record the IP address or the browser type, so we cannot tell you which city a tap came from and we do not know who the person is. We do not track them anywhere else.
If they choose to send you a private message, we store the message and pass it to you. That message is yours. We do not read it for any purpose other than delivering it, generating your themes, diagnosing faults, and answering a support question you have raised with us.
If they give you a way to reply, we store that too, and only so you can answer. Giving one is always optional — a private message reaches you either way.
Names on your cards
You can label each card to tell them apart, and some owners use a person’s name — “Nadia, morning bar”. If you do, that name is stored with the card and is copied onto every tap and message it produces, so your history still reads correctly after you rename or reassign a card. It is never shown to a customer and never sent to Google. If you would rather not store a name, label the card by its place instead — “table 4”, “front desk”.
A responsibility worth naming. Those taps are your customers, not ours. If you display a notice about data collection in your premises or your own privacy policy, the tap landing page is part of what it should cover.
Google Business Profile
If you connect your Google Business Profile, we use that access only to show your reviews, post replies you have approved, and alert you to new ones. We ask for it at the point you first need it, not when you sign up. We do not store review content beyond the short period Google's API terms permit, and we never aggregate it.
You can disconnect at any time — from your dashboard, or from your Google account directly. It takes effect straight away.
If your subscription ends, we stop using the connection but do not delete it immediately, so that coming back later does not mean setting it up again. Google expires a connection that has gone unused for six months, and ours will go the same way. If you would rather it went sooner, disconnect it yourself and it goes at once.
What we never do
- Sell, rent or trade your information, or your customers'.
- Add you to a marketing list you did not ask for.
- Share private feedback with anyone but you. Our own support staff may see it while helping you with a problem, and only then.
- Use your data to train anything.
Who else touches it
Stripe processes payments. Google supplies listing and review data. An email provider delivers your alerts. Our hosting provider stores the database. Each of these sees only what it needs to do its job.
How long we keep it
- Individual tap records — 12 months, then rolled into daily and later monthly counts.
- Private messages — for as long as your account is open, or until you delete them.
- Google review content — no more than 30 days, as Google's terms require.
- Account and billing records — as long as the law requires us to keep them.
Your rights
Ask us for a copy of what we hold, correct it, or have it deleted. Email privacy@tapforreviews.com and we will respond within 30 days. Deleting your account removes your data; your card keeps redirecting unless you ask us to stop it.
Cookies
We use a small number of cookies to keep you signed in and remember your theme preference. We do not run advertising trackers.
Prospecting demo analytics
Our demo walkthrough records anonymous daily totals for views of each screen and approximate geographic origin. These totals do not include visitor identifiers, business names, messages or other information typed into the demo. Repeat screen views count again. The totals are stored in our database; demo form entries are not saved.
When you view a demo, we look up your IP address in a local database to determine an approximate country and region (state/province), and immediately discard the IP address itself. We do not store precise coordinates, we do not use GPS, and we do not track you uniquely. Approximate geography gives us aggregated insight into where our marketing efforts reach. Geolocation is provided by DB-IP (June 2026 dataset snapshot), whose data may be inaccurate for VPN or proxy connections. We do not retroactively backfill geographic data for historical views. The private analytics dashboard uses a session cookie to keep its administrator signed in.
Children
This service is for businesses. We do not knowingly collect information from anyone under 16.
Changes
If we change this policy materially we will email account holders before it takes effect. The date at the top always reflects the current version.
Contact
privacy@tapforreviews.com · Quest Consulting Group LLC d/b/a Tap For Reviews, 3138 Meadway Dr, Houston, TX 77082.