Privacy Policy

DocketTap ("we", "us") is a service that lets a business give its customers a digital receipt by having them tap an NFC tile near the till. This policy explains what personal information we collect, why, and what we do with it. It applies to both the businesses who hold a DocketTap account and the customers who tap a tile to view a receipt.

The short version

• We never ask a customer who taps a tile for their name, email, or phone number. We simply show them a receipt that a business already created for their own sale.
• Receipts are automatically deleted after 72 hours by default (a business can also delete one earlier). We don't keep transaction data longer than we have to.
• No payment card details ever pass through our systems — that stays entirely with your POS provider.

Information we collect

From waitlist signups (pre-launch)

While DocketTap is in pre-launch, joining the waitlist on our pricing page collects your email address and, optionally, your business name and how many tiles you're interested in. We use this only to contact you about ordering once the first batch of tiles is confirmed and to gauge demand for that batch — nothing else, and it's never sold or used for advertising. Contact us at dockettap@gmail.com at any time to be removed from the list.

From businesses (account holders)

When a business signs up and uses the dashboard, we collect:

• Business name, email address, and a hashed (not plaintext) password
• Optional profile details you choose to add: logo URL, Google review link
• Register names and the tag codes paired to them
• Saved items (name and price) you choose to store for faster manual entry
• If you connect a POS system: an encrypted access token that lets us fetch order details on your behalf. We never see or store your POS login credentials, and no card numbers ever reach us.
• Receipt content you or your connected POS create — item names, quantities, prices, and totals
• Billing information for your own tile purchase and subscription — handled entirely by our payment processor, Stripe. We store a reference ID for your Stripe customer record so we know your account is paid, but your card details never reach or pass through our own systems.
• A shipping address, collected by Stripe at checkout, so a physical tile can be posted to you.

From customers (people who tap a tile)

We do not collect any personal information from a customer who taps a tile. The receipt page displays data the business already has (the sale itself); we don't ask the customer to identify themselves, and nothing they do on the receipt page is sent back to us — downloading or sharing the receipt happens entirely on their own device.

Collected automatically

Like any web service, our hosting infrastructure processes IP addresses and basic request metadata to serve pages and to rate-limit abusive traffic. This is used transiently for security purposes and is not linked to any specific receipt or matched against a customer's identity.

How we use this information

• To operate the core service — pairing tiles to registers, generating and displaying receipts, sending customers to your review link
• To authenticate business accounts and keep the dashboard scoped to the correct business
• To connect to a POS system, when you choose to, so a sale can automatically become a receipt
• To protect the service — rate limiting, detecting abuse, debugging outages

We do not sell personal information, and we do not use it for advertising or profiling.

How long we keep it

• Receipts expire and are automatically deleted 72 hours after creation by default. A business can also delete a receipt earlier from their dashboard.
• Business account data is kept for as long as the account is active. If you close your account, contact us at dockettap@gmail.com and we'll delete it.
• POS credentials are deleted as soon as you disconnect your POS from your account.
• Waitlist entries are kept until we launch and reach out, or until you ask us to remove you, whichever comes first.

Who we share it with

We share information only where it's necessary to run the service:

• Our database and hosting providers, who store and process data on our behalf under their own security commitments. This may involve data being processed on servers outside Australia.
• Your point-of-sale provider, if you connect one — to fetch order details for the receipts it generates. Your POS handles all payment processing itself; we never touch card data.
• Stripe, to process your tile purchase and subscription payments and to send you the tile you ordered. Stripe handles all payment processing itself; we never touch your card data.
• Google, only in the sense that a customer clicking "Leave a review" is taken to a review page you configured — we don't send Google any data ourselves.

We don't sell or rent personal information to third parties, and we don't share it for their own marketing purposes.

Security

Passwords are hashed, never stored in plain text. POS access tokens are encrypted at rest. All traffic is served over HTTPS. Access to a business's dashboard data is scoped server-side to that business's own account — no business can see another's registers or receipts. No system is perfectly secure, but this is how we minimise the impact of anything going wrong.

Your rights

Businesses can view and update most of their own account information directly from the dashboard. For anything else — including requesting a copy of your data, a correction, or deletion — contact us at dockettap@gmail.com.

If you're a customer who tapped a tile and want a specific receipt removed before it naturally expires, the business that issued it can delete it from their dashboard — contact them directly.

If you're in Australia and believe we haven't handled your personal information properly, you can also lodge a complaint with the Office of the Australian Information Commissioner.

Cookies

We use exactly one cookie: an encrypted session cookie set when a business logs into the dashboard, so we know which account is making a request. It's not used for tracking, analytics, or advertising, and customers viewing a receipt page never receive it.

Children

DocketTap is intended for use by businesses and their adult customers, not children.

Changes to this policy

If we make a material change to how we handle personal information, we'll update this page and change the "last updated" date above.

Contact us

dockettap@gmail.com