Privacy Policy

1. Who we are

Go Tap Talk ("we", "us", "our") operates the communications platform available at app.gotaptalk.com and this website at gotaptalk.com. To contact us: [email protected].

2. What we collect

When you create an account we collect:

• Username — your chosen display name
• Email address — for account verification and password resets
• Password — stored as a one-way hash (PBKDF2-SHA256). We cannot read your password.
• Billing information — if you subscribe to a paid plan, payment is handled by Stripe. We never see or store your card number.

We also collect basic usage data for the purpose of running and improving the service:

• Session timestamps (when you connected and disconnected)
• Feature usage counts (number of calls, PTT events, etc.) — not content
• Server logs including IP addresses (retained for up to 90 days)

3. What we do NOT collect

Go Tap Talk is built on WebRTC peer-to-peer technology. This means:

• Your voice, audio, and video calls travel directly between participants. Our servers are not in the media path and cannot see, hear, or record call content.
• Screen share content is transmitted peer-to-peer and is never processed or stored by our servers.
• Chat messages sent during sessions are relayed through our server but are not logged or stored.

4. How we use your information

• To authenticate you when you sign in
• To send password reset emails when you request them
• To process subscription payments via Stripe
• To enforce plan limits (peer counts, group limits)
• To maintain service security and prevent abuse

We do not currently share your personal information with third parties for advertising purposes. We reserve the right to do so in the future, in which case we will update this policy and notify users by email before doing so. You will always have the option to delete your account before any such change takes effect.

5. Data sharing

We share your data with the following third parties only as necessary to operate the service:

• Stripe — payment processing. Subject to Stripe's privacy policy.
• Let's Encrypt — SSL certificate issuance. Your domain name is included in the public Certificate Transparency log.

We do not share your data with any other third parties for commercial purposes.

6. Data retention

• Account data is retained as long as your account is active.
• Session and usage analytics are retained for 90 days on a rolling basis.
• Server logs are retained for up to 90 days.
• When you delete your account, your username, email, and password hash are deleted within 30 days.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format

To exercise any of these rights, email [email protected].

8. Security

We use HTTPS (TLS) for all connections. Passwords are hashed using PBKDF2 with 100,000 iterations. Authentication tokens are signed with HMAC-SHA256. We do not store plaintext credentials.

9. Cookies

Go Tap Talk does not use tracking cookies. The app uses browser localStorage to store your session token and preferences (theme, server address). This data stays on your device and is not transmitted to us except as part of normal API authentication.

10. Children

Go Tap Talk is not directed at children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this policy: [email protected]