Privacy Policy

Last updated: September 8, 2026

This Privacy Policy describes how TapBloom Technologies, LLC ("TapBloom," "we," "us," or "our") collects, uses, and protects information in connection with the TapBloom platform and services (the "Services").

TapBloom has two distinct relationships that this policy addresses:

• Business Customers — the businesses who sign up for TapBloom accounts, upload their customer lists, and send campaigns through our platform.
• End Recipients — the consumers who receive SMS messages sent through TapBloom by our business customers. End recipients never interact with TapBloom directly.

If you have questions about this policy, contact us at support@trytapbloom.com.

1. Information We Collect From Business Customers

When a business creates a TapBloom account and uses our platform, we collect the following information:

Account and Business Information

• Business name and industry type
• Contact information (name, email address, phone number) for the account holder
• Employer Identification Number (EIN) — used for carrier registration and 10DLC campaign registration purposes
• Billing information — processed securely through Stripe; we do not store full credit card numbers

Uploaded Contact Lists

• Phone numbers of your customers (required for SMS campaigns)
• Email addresses (optional, used for email-to-SMS prompts)
• Associated names (optional, used for personalization)

Campaign and Engagement Data

• Campaign content — the SMS messages, offers, and social media content you create or that our AI generates for you
• Engagement metrics — delivery rates, opt-out rates, reply rates, response data, referral tracking, and redemption data
• Dashboard analytics — campaign performance, subscriber growth, referral counts, and Response Credit progress

How We Use This Information

• To provide and operate the Services
• To register your campaigns with mobile carriers (10DLC) using your business information
• To send SMS messages on your behalf through our SMS provider
• To generate AI-powered campaign content, social media images, and videos
• To track and report campaign performance
• To comply with carrier regulations and audit requirements
• To improve our platform and develop new features
• To communicate with you about your account, billing, and service updates

2. Information We Process From End Recipients

End recipients are the customers of our business customers. They do not sign up for TapBloom accounts and do not interact with our platform directly. However, certain data flows through TapBloom when business customers send campaigns.

What We Process

• Phone numbers — provided by business customers; used solely to deliver SMS messages on that business customer's behalf
• SMS message content — inbound replies from end recipients, including opt-in/opt-out keyword responses (YES, STOP, START, HELP, etc.)
• Engagement data — message delivery status, opt-out events, opt-in events, and response data

What We Do Not Collect From End Recipients

• We do not collect end recipient data directly
• We do not require end recipients to create accounts
• We do not collect end recipient names, email addresses, or demographic information (unless provided by the business customer as part of an uploaded list)
• All end recipient data is provided by business customers who have pre-existing relationships with those individuals

How We Use End Recipient Data

• To deliver SMS messages on behalf of the business customer
• To process opt-out, opt-in, and help keyword responses automatically
• To maintain the global suppression list (see Section 6 below)
• To report aggregate engagement metrics to the business customer
• To comply with carrier audit requirements

3. We Do Not Sell, Rent, or Share End Recipient Data

This is a core commitment of our business:

• TapBloom does not sell, rent, or share end recipient phone numbers or personal information with third parties.
• Phone numbers uploaded by business customers are used solely for the purpose of sending SMS messages on behalf of that business customer through the TapBloom platform.
• TapBloom does not aggregate, merge, or cross-reference contact lists between business customers.
• Each business customer's contact list is isolated and associated only with that customer's account.
• We do not use end recipient data for our own marketing purposes.

4. SMS Communications and Opt-Out

This section is provided for end recipients who receive SMS messages sent through the TapBloom platform.

Who Is Texting You

SMS messages you receive from a TapBloom number are sent on behalf of one of our business customers — a business with whom you have an existing relationship. The business name is included in the message content so you know who is contacting you.

How to Opt Out

You may opt out of receiving SMS messages at any time by replying with any of the following keywords to any message you receive:

• STOP
• UNSUBSCRIBE
• CANCEL
• QUIT
• END
• STOPALL

Opt-out requests are processed immediately. Your phone number will be suppressed across all campaigns on the TapBloom platform, meaning you will not receive further SMS messages from any business customer sending through TapBloom.

How to Re-Subscribe

If you change your mind, you may re-subscribe by replying with any of the following keywords to the business customer's number:

• START
• YES
• SUBSCRIBE
• UNSTOP

How to Get Help

For help or more information about the messages you are receiving, reply with:

• HELP
• INFO

You will receive a response with information about the message source and how to opt out.

Message and Data Rates

Standard message and data rates may apply to messages you send and receive, depending on your mobile carrier plan. TapBloom is not responsible for carrier charges.

Full SMS Terms

The complete terms governing SMS communications — including consent requirements, prohibited content, and opt-out processing — are set forth in the TapBloom Terms of Service, available at trytapbloom.com/terms.

5. Third-Party Services

TapBloom uses the following third-party services to operate the platform. Each service processes only the data necessary for its specific function:

Telnyx — SMS Delivery Provider

Telnyx processes phone numbers and SMS message content for the purpose of delivering SMS messages through carrier networks. Telnyx handles the actual message routing and delivery to mobile carriers. Telnyx Privacy Policy

Replicate — AI Content Generation

Replicate processes campaign message text and business information for the purpose of generating AI-written SMS content, social media images, and videos. Replicate does not process end recipient phone numbers. Replicate Privacy Policy

Stripe — Payment Processing

Stripe processes billing information for business customer subscriptions. Stripe does not process end recipient data. Stripe Privacy Policy

Railway — Hosting and Infrastructure

Railway hosts the TapBloom application and database infrastructure, including campaign data, contact lists, and engagement records.

Resend — Email Delivery

Resend processes email addresses (provided by business customers) for the purpose of sending email-to-SMS prompts to existing email subscribers. Resend does not process end recipient phone numbers. Resend Privacy Policy

6. Data Retention

Business Customer Data

Business customer data (account information, campaign content, engagement metrics) is retained for the duration of your active account and for a period of 12 months following account cancellation, after which it is deleted or anonymized — unless retention is required for legal, audit, or compliance purposes.

Consent Audit Logs and Opt-Out Records

TapBloom retains consent audit logs, list attestation records, and opt-out records for a minimum of two (2) years to comply with carrier audit requirements. This includes records of when contacts were uploaded, consent attestations made by business customers, and opt-out events processed by the platform.

Global Suppression List

End recipient phone numbers that have opted out remain on the global suppression list indefinitely to prevent unauthorized re-engagement. This means that once a phone number has opted out, it cannot be re-added to any contact list on the TapBloom platform by any business customer. This is a carrier compliance requirement and a consumer protection measure.

Campaign and Message Data

SMS campaign content, delivery records, and engagement data are retained for a minimum of 2 years for audit and compliance purposes, and may be retained longer where required by law or carrier agreement.

7. Data Security

TapBloom takes reasonable measures to protect the data on our platform, including:

• Encryption in transit — all data transmitted between your browser, our servers, and our SMS provider is encrypted using TLS/SSL
• Secure payment processing — billing data is handled by Stripe and is not stored on our servers
• Access controls — access to contact lists and campaign data is restricted to authorized personnel
• Isolated contact lists — each business customer's contact list is logically separated; lists are not shared or cross-referenced between accounts

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights and Choices

Business Customer Rights

As a business customer, you have the right to:

• Access your account data, contact lists, and campaign history at any time through your dashboard
• Export your contact lists and campaign data
• Update or correct your business information
• Delete your account, which will initiate deletion of your data subject to the retention periods described in Section 6
• Opt out of promotional communications from TapBloom about our own services (this does not affect your ability to send campaigns to your customers)

End Recipient Rights

As an end recipient, you have the right to:

• Opt out of SMS communications at any time by replying STOP (or any opt-out keyword listed in Section 4)
• Request information about what data has been processed about you by contacting the business that texted you or by contacting us at support@trytapbloom.com
• Request deletion of your phone number from our system, subject to the suppression list retention requirement (your number will remain on the suppression list to prevent re-engagement, but will not be used for any marketing purpose)

How to Exercise Your Rights

To exercise any of these rights, contact us at support@trytapbloom.com or by mail at the address in Section 11. We will respond to your request within 30 days.

9. Children's Privacy

TapBloom is a business-to-business platform. Our Services are not directed to children under 18, and we do not knowingly collect information from children. Business customers are responsible for ensuring their contact lists do not include phone numbers belonging to minors where consent requirements differ.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or carrier regulations. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify business customers by email or through the platform at least 30 days before material changes take effect
• Post the updated policy at trytapbloom.com/privacy

For end recipients, the most current version is always available at the URL above. Continued receipt of messages after changes take effect constitutes acknowledgment of the updated policy, subject to your right to opt out at any time.

11. Contact Us

If you have questions about this Privacy Policy, your data, or your rights, please contact us:

For SMS-related questions or to report an issue with messages you've received, email support@trytapbloom.com with the phone number that contacted you and the business name mentioned in the message.

12. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of the State of Florida, USA. For end recipients located outside the United States, TapBloom processes data in the United States and your information is subject to U.S. law. If your country of residence has specific data protection laws (such as the GDPR in the European Union), some rights and protections may differ. Contact us if you have questions about your jurisdiction.

This Privacy Policy is intended to work alongside the TapBloom Terms of Service. For the full terms governing SMS communications, consent requirements, and platform responsibilities, please review the Terms of Service.