Privacy notice

1. Controller and scope

Comercializadora Roser Urban, located at Avenida Popocatépetl 415, interior I403, colonia Santa Cruz Atoyac, alcaldía Benito Juárez, Ciudad de México, C.P. 03310, México, is the controller of personal data processed to operate Taplivo at taplivo.app. Contact the controller at anto@momentia.digital.

This notice covers account holders, profile administrators and visitors to public Taplivo pages. Restaurants and creators decide what they publish and which integrations they enable; they are responsible for their own purposes and for informing visitors where required.

2. Information we process

Account: email address, user identifier, verification status, credentials managed by our authentication service and language preference. If you choose Google, we receive your Google identifier, email and basic profile information Google provides, such as name and photograph. Google sign-in requests basic identity information only; it does not request access to Gmail, Drive, contacts or calendars.

Content: profile name, biography, any location you choose to include, photographs, links, menus, prices, and design, SEO and measurement settings. We do not request sensitive personal data to use Taplivo. Avoid including sensitive information or other people's data without authorization.

Subscriptions: plan, discounts, amount, currency, subscription and payment identifiers and status, and subscription period dates. Mercado Pago receives card details in its own checkout; Taplivo does not store your full card number or security code.

Usage: visits, clicks, visited profile and link, date, general source (such as QR, short link or referring domain) and a random session identifier. Taplivo's statistics collector does not store visitors' IP addresses, emails or full referrer URLs. Hosting and security providers may process technical data, such as IP addresses and request logs, needed to deliver and protect the service. We also process information you send us when requesting support.

3. Why we use information

Necessary purposes: create and protect your account; sign in, verify or recover access; save and publish profiles you choose; generate QR codes and short links; display menus; process and verify subscriptions; apply limits and discounts; show basic statistics to profile owners; remember language; handle support and privacy requests; prevent abuse and meet legal obligations.

Optional purposes: owners may enable Meta Pixel or Google Analytics on their profiles to measure audiences and, for Meta, build advertising audiences. These external services load after the visitor accepts them. You may reject them without losing access to a profile or menu, and change your choice under Privacy preferences. Taplivo does not use Google Sign-In data for advertising or sell it.

4. Public information and external services

Publishing a Taplivo makes its content available on the internet. Search engines may display it if you allow indexing. Uploaded images have public URLs, including before you publish a profile. Unpublishing a profile does not automatically delete images or copies other people or search engines may hold; contact us to request deletion.

We use Supabase for authentication, database and storage; Vercel for hosting and running the service; Resend for transactional emails; Google when you choose its sign-in option; and Mercado Pago when purchasing a paid plan. Providers receive information needed for their role and may process it outside Mexico. Sign-in and payments are also subject to the relevant providers' policies.

Profile owners receive visit and click statistics. If you accept a profile's pixels, Meta or Google receive browsing information according to that owner's configuration and their own policies. External links lead to sites with their own privacy notices. We do not sell personal data. Any additional disclosure requiring consent will be explained and requested in advance; information may also be disclosed where required by applicable law.

5. Cookies and browser storage

We use cookies for sign-in sessions and language preferences. Basic statistics use a random sessionStorage identifier, renewed after 30 minutes of inactivity. We store the pixel choice for each profile in localStorage. Meta and Google may use their own cookies when you accept those integrations.

You can reject or withdraw consent under a profile's Privacy preferences and clear cookies or storage in your browser. Blocking session cookies may prevent sign-in. Withdrawing consent stops new integration loads but does not automatically erase information providers previously received.

6. Retention and security

We retain information while needed to provide the service, handle requests, resolve issues and meet applicable legal obligations. You can request account closure and data deletion; we will assess whether an obligation requires retaining specific information. Backups and technical logs follow providers' cycles and may not be deleted at the same time as active data.

We apply account-based access controls, encrypted connections and separation of private credentials from the browser. No system is infallible. If we detect a breach that significantly affects your rights, we will notify you as required by applicable law.

7. Your rights and choices

You may request access, correction, cancellation or objection to processing (ARCO rights under Mexican law), withdraw consent or limit use and disclosure by emailing anto@momentia.digital with the subject “Taplivo Privacy”. Include your name, account email or contact method, the right you wish to exercise, and the relevant data or profile. For corrections, explain the requested change. We will proportionately verify identity or representation before responding; do not send passwords or full card numbers.

We will reply through the same channel. An ARCO request determination will be communicated within 20 business days of receipt and, if granted, implemented within the following 15 business days, subject to justified extensions permitted by law. Withdrawal is not retroactive and may prevent features that need the information. You can edit content, change language and unpublish profiles in the dashboard.

8. Changes to this notice

We will publish updates on this page with their date. If a new purpose requires consent, we will request it before applying it. This English version makes the same notice easier to consult. Send questions or requests to the privacy contact.