Privacy Policy

This policy explains what information One Tap Commerce collects when you visit onetapcommerce.com, request a demo, or take the guided tour, how we use it, and the choices you have.

It does not cover data our platform customers store or process about their own shoppers and staff — that data is governed by the customer's own agreement with us and, where applicable, their own privacy notice to their customers — except for the marketing performance data described in "Connected marketing accounts (Google, Meta and similar)," below, which explains how we handle data read from a retailer's connected Google and Meta accounts.

Site analytics: pages visited, referring source, device and browser type, and approximate location from IP address, collected automatically through our own first-party analytics.

Form submissions: your name, work email, phone number, store name, and any details you choose to share when you request a demo, unlock the guided tour, or contact us.

Communications: a record of correspondence if you email us or reply to a message from us.

To respond to a demo or tour request, follow up about the platform, operate and improve this website, and understand which pages and messages are working.

We do not use information collected on this website to build advertising profiles.

We use a small number of first-party cookies and similar technologies to keep the site working and to understand traffic. We do not run third-party advertising trackers on this site.

You can block or delete cookies in your browser at any time; some site features may work less well without them.

If your business runs on One Tap Commerce, the data you and your customers put into the platform — catalog, orders, payments, customer records — is governed by your customer agreement with us, not this policy. We act as a data processor for that data and never sell it.

When a retailer's authorized admin connects a Google account (Search Console, Google Analytics, Google Ads) or a Meta account (Meta Ads) to One Tap Commerce, we read performance data for the connected accounts — search impressions, clicks, and average position; website sessions and conversions; and campaign spend, impressions, clicks, and conversions. This data is used by One Tap Commerce and its affiliated companies and services, including One Tap Media, which operate the platform. Access is read-only: we do not change campaigns, budgets, settings, or content in a retailer's connected accounts.

We use this data only to: (a) show the retailer their own performance inside their One Tap Commerce console; (b) compute trends, forecasts, alerts, and recommendations; (c) generate AI-assisted summaries and recommendations, where enabled; (d) improve, maintain, and develop One Tap Commerce's features and services; (e) produce aggregated, de-identified statistics and benchmarks — e.g., category or market averages — that never identify a retailer, which we may show to retailers and use to improve our services; and (f) security, fraud prevention, support, and legal compliance.

One Tap Commerce's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising, sell it, or transfer it to third parties except to service providers, as required by law, or in a merger or acquisition under equivalent protections. No one at One Tap Commerce reads this data except with the retailer's consent, for support, a security issue, or to comply with law, and we do not use Google user data to develop, improve, or train generalized AI or machine-learning models. A retailer's own platform data — orders, inventory, POS records — is governed by their customer agreement, not this section, though we may combine it with connected-account data to produce these insights.

Access tokens are encrypted at rest, and performance data is stored per retailer, isolated from others'. We retain it while the connection is active and for up to 90 days after disconnection, except aggregated, de-identified data, which we may retain.

A retailer can disconnect a Google or Meta account anytime from their console under Marketing → Connections, or by revoking access at myaccount.google.com/permissions or in Meta Business settings. Once disconnected, we stop pulling new data and delete stored access tokens.

Our use of data from Meta platforms is consistent with Meta's Platform Terms and Developer Policies; the same permitted uses, access restrictions, and retention and deletion practices above apply.

We may update this section as we add integrations; material changes will be posted here with a new effective date.

To request deletion of data read from a connected account, email hello@onetapcommerce.com.

We do not sell personal data. We share information only with service providers who help us run this website and respond to inquiries (for example, email delivery and hosting providers), under agreements that limit their use of it, or when required by law.

We keep demo and tour submissions as long as reasonably needed to follow up and for our business records, then delete or anonymize them.

We use industry-standard safeguards to protect information in transit and at rest, though no system is perfectly secure.

You can ask us what information we hold about you, ask us to correct or delete it, or opt out of further contact, by emailing hello@onetapcommerce.com. We'll respond promptly.

This website is intended for business use and is not directed to children. We do not knowingly collect information from anyone under 16.

We may update this policy as our website and practices change. The date at the top always reflects the current version.

Questions about this policy or your information can go to hello@onetapcommerce.com.