Read our complete, always-current privacy policy below (powered by iubenda).
View the full Privacy PolicyThis section adds to the policy above. We protect registration (/users/register) and password reset (/users/reset_password) in the Tappla dashboard against automated sign-ups and abuse with Cloudflare Turnstile from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your browser loads a script from challenges.cloudflare.com for this. It checks technical characteristics of your browser and connection, such as IP address and user agent. It does not read what you type into the form and does not set tracking cookies.
Cloudflare acts as our processor and also uses the data as a controller in its own right to improve its bot detection. Transfers to the USA are based on the EU-US Data Privacy Framework and the standard contractual clauses in the data processing agreement. The legal basis is our legitimate interest in protection against abuse (Art. 6(1)(f) GDPR). We load the script without consent because it is strictly necessary for the service you request (Section 25(2) No. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act). Further information: cloudflare.com/turnstile-privacy-policy.
This section adds to the policy above. Customers can connect an AI assistant they use, such as Claude or ChatGPT, to their Tappla account through our MCP server at dashboard.tappla.com/mcp. The connection is made only when you sign in to Tappla and press Allow on our consent page, and you can disconnect it at any time under My profile, Connected AI assistants, which ends the assistant's access immediately.
What we process: the assistant receives the information about your apps that you ask it for (for example names, design settings, playlists and the state of your video source) and can change the app name, Brand & Design settings and brand images. We store the access granted to the assistant (the assistant's registered name, the permissions, and access tokens as one-way hashes). Access tokens are valid for one hour, refresh tokens for 60 days; tokens that are revoked or expired are deleted 30 days later. For each day we count the calls per account, assistant and tool and whether they succeeded, without their content, and we log each change an assistant makes (account, assistant, tool, result) in our server logs. These counts are deleted with your account.
What we do not receive: your conversation with the assistant. We only receive the requests the assistant sends to our tools. When you ask it to read a website or import an image from a link, our server fetches that address. Searches of our help center are sent to help.tappla.com, which is operated by Intercom, Inc.
The provider of the assistant (for example Anthropic or OpenAI) processes what you write and what our tools return under its own terms and privacy policy, as the controller of that service. The legal basis for our processing is the performance of our contract with you (Art. 6(1)(b) GDPR).