Privacy

Privacy summary for the public TapSign website.

This page covers the public marketing, pricing, and help routes. Customer deployment terms, enterprise contracts, and dedicated delivery terms are handled in the commercial flow that applies to that buyer path.

What this page covers

  • Public website visits, form submissions, and buyer enquiries
  • Public pricing exploration and rollout enquiries
  • How contact messages and quote requests are handled
  • The TapSign Mail browser extension — what it handles

Public website data

We collect the information you provide through public forms, quote requests, and workspace signup paths so we can respond, prepare rollout support, and manage the commercial relationship.

Product exploration and rollout guidance

Public pricing, product pages, and help routes are intended to help buyers evaluate product fit, integration scope, and rollout path before they move into protected or commercial onboarding steps.

Commercial and support follow-up

Buyer messages can be used to respond to enquiries, schedule rollout discussion, prepare quotes, and provide support related to the public website and rollout guidance.

TapSign Mail browser extension

What the extension handles, and what it never sends.

TapSign Mail runs only inside Gmail and Outlook on the web. It has one purpose: to let you approve an email you are sending with your phone, and to show recipients that a signed email is genuine.

What leaves your browser when you sign

The address you are sending from, and one-way SHA-256 fingerprints of the recipient list, the subject and the message body. These fingerprints are what your phone approves and what a recipient's TapSign later checks. They are sent only to the TapSign service your browser is linked to.

What never leaves your browser

The text of your email, its subject, its attachments and your recipients' addresses. TapSign cannot read your mail. The extension does not run on any site other than Gmail and Outlook, does not load code from the internet, and shows no advertising.

What the extension keeps

A signing key created in this browser, the link to your TapSign workspace, and your display preferences. They stay in the browser's own storage. Verifying a received email looks up its signature record by its signature id; the email itself is not uploaded.

Your control

A linked browser can be revoked at any time from the TapSign app or by your workspace administrator, after which it can neither sign nor be trusted. We do not sell this data or share it with third parties. Questions go to the contact form on this site.