Privacy Policy

1. Who we are

Tap Ads is a programme that pays merchants a monthly cash rebate for showing Tap-supplied ads on their existing point-of-sale and customer- display hardware. Jet Support Pty Ltd owns the Tap Ads business name and is the entity you contract with when you join the programme.

2. What we collect

The Service collects the following personal information:

• Account details — your name, business name, email address, mobile phone number, business address, and the bank account where we pay your rebates.
• Verification photos — when prompted by the app, you submit photos showing Tap ads are displaying correctly on your POS or payment terminal. Photos are retained for the duration of your participation in the programme as evidence supporting your rebate payments.
• Monthly transaction reports — files you upload from your POS or payment provider so we can calculate your rebate. We only read the totals and date ranges; we do not retain card numbers or individual customer transaction details.
• Device information— when you use the Tap Ads mobile app, we store an authentication token on your device using the operating system's secure storage (Keychain on iOS, KeyStore on Android). We collect basic technical information such as app version and device model for support and crash diagnostics.
• Website analytics— anonymous events (page views, scroll depth, CTA clicks), viewport size, referrer, and a pseudonymous session identifier stored in browser session storage. Your IP address is hashed with a daily-rotating salt before storage — we don't retain raw IPs. The Website honours the Do-Not-Track browser header.

The Tap Ads app may request camera permission so you can take verification photos, and push notification permission so we can remind you about daily verification checks. Both permissions are optional and can be turned off in your device's settings at any time.

3. Why we collect it

We use personal information you submit to:

• run the Tap Ads program - verify that ads are displaying on your hardware, calculate your cash rebate, and pay it into your nominated bank account;
• issue Recipient Created Tax Invoices (RCTIs) for each rebate payment, as required by Australian tax law;
• contact you about your account, the Service, or changes to the programme;
• prevent fraud — for example, detecting fake verification photos or duplicate accounts; and
• improve the Service — analysing which features get used and how we can make the programme work better for merchants.

4. Disclosure

We don't disclose your personal information to any third party except where strictly necessary to:

• host the Service and the systems that store your data (our cloud infrastructure providers, under contract and subject to confidentiality obligations);
• process your rebate payments (our banking provider);
• send you notifications (push notification providers operated by Apple and Google for the mobile app);
• analyse verification photos for authenticity (our AI processing provider — only the photo content is shared, not your identity); or
• comply with a legal obligation, court order, or request from a law enforcement or regulatory authority.

If we ever transfer personal information outside Australia, we take reasonable steps to ensure the overseas recipient handles it in a way consistent with the Australian Privacy Principles.

5. Retention

We keep your personal information only as long as we need it. Account details, verification photos, and rebate records are retained while you participate in the programme and for seven years after your last payment, as required by Australian tax record-keeping rules. Website analytics events are retained for up to two years. You can ask us to delete your data earlier where we're not required by law to keep it.

6. Your rights

You can ask us to:

• give you access to the personal information we hold about you;
• correct anything that's inaccurate or out of date; or
• delete your personal information and account where we are not required by law to keep it.

Email hello@tapads.com.au for any privacy request. We'll respond within 30 days.

7. Security

Personal information is held on systems protected by industry- standard encryption in transit and at rest, access controls, and routine security reviews. Authentication tokens on the mobile app are stored using the operating system's secure storage. No system is perfectly secure; if we ever become aware of an eligible data breach affecting your information, we'll notify you as required by the Privacy Act 1988.

8. Children

The Service is intended for business owners and operators. It isn't directed at anyone under 18 and we don't knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll let you know by email or through the Service before the changes take effect. The "Last updated" date at the top of this page shows when the current version took effect.

10. Contact and complaints

Email hello@tapads.com.au with any privacy question, request, or complaint. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner.