Create QR Code Build Your Bio Page

TappyLinks Privacy Policy

Effective Date: January 1, 2024
Last Updated: August 18, 2026

Plus Six Solutions, doing business through TappyLinks and other brands and services (“Plus Six Solutions,” “TappyLinks,” “we,” “us,” or “our”), respects your privacy and is committed to being transparent about how information is collected, used, stored, processed, and disclosed.

This Privacy Policy applies to TappyLinks.com, tappy.myfreeqrs.com, TappyLinks-hosted profiles, BioLinks, BioPages, digital business cards, QR code services, NFC-enabled services, online stores, account features, and other services operated by Plus Six Solutions through TappyLinks (collectively, the “Services”).

Certain Services, including MediTappy, may allow users to provide medical, health, emergency, or other information that qualifies as consumer health data. Consumer health data is governed by our separate Consumer Health Data Privacy Policy.

If information qualifies as consumer health data under applicable law, the Consumer Health Data Privacy Policy will control with respect to our collection, use, processing, sharing, and deletion of that information.

1. An Important Distinction: Account Information and Profile Content

TappyLinks distinguishes between Account Information and Profile Content.

Account Information

“Account Information” is information used to establish, administer, support, secure, bill, and maintain our relationship with you.

Depending on the Services you use, Account Information may include:

Account Information may be used internally by Plus Six Solutions across the brands and services it operates as described in this Privacy Policy.

Profile Content

“Profile Content” means information that you or another authorized user places within a TappyLinks-hosted profile or page.

Profile Content includes information contained within:

We treat Profile Content differently from Account Information.

Profile Content is processed only as necessary to provide, host, store, maintain, secure, display, deliver, or support the profile or Service requested by the user, when the user directs us to make the information available, or when processing is otherwise required by law or necessary to protect the security or integrity of our Services.

We do not use Profile Content for cross-brand marketing, advertising, affiliate tracking, marketing segmentation, mailing-list creation, promotional personalization, or unrelated business purposes.

We do not use Profile Content to build advertising audiences or marketing profiles.

We do not sell Profile Content.

This restriction applies to all Profile Content, not only medical or health information.

2. Information We Collect

The information we collect depends on how you interact with us and which Services you choose to use.

Account and Registration Information

When you register for an account or use account-based features, we may collect:

Profile Content

We process information you choose to add to a TappyLinks-hosted profile so that we can provide the profile functionality you requested.

Depending on the type of profile, this information may include:

We do not repurpose this Profile Content for unrelated marketing, advertising, affiliate, analytics, or cross-brand purposes.

Consumer Health Data

Certain services, including MediTappy, may allow users to provide medical, health, emergency, medication, allergy, condition, disability, or similar information.

Information that qualifies as consumer health data is governed by our separate Consumer Health Data Privacy Policy.

The Consumer Health Data Privacy Policy should be reviewed before providing health-related information through MediTappy or another health-related TappyLinks feature.

Purchase and Transaction Information

If you purchase a product or paid Service, we may collect information necessary to process and administer the transaction, including:

We use Stripe and PayPal to process certain payments.

Payment card numbers, bank information, PayPal credentials, and similar payment credentials may be collected and processed directly by Stripe, PayPal, or applicable financial institutions rather than being stored directly by TappyLinks.

We may receive information from those providers necessary to confirm payment, fulfill an order, issue refunds, provide customer service, prevent fraud, and maintain accounting and transaction records.

Stripe and PayPal process certain information according to their own privacy policies, terms, fraud-prevention obligations, and legal requirements.

Usage, Device, and Technical Information

When you access our websites or Services, certain technical information may be collected automatically.

Depending on the Service, this may include:

We use Google Analytics to help us understand general website traffic and use of our websites.

Google Analytics may process information such as website visits, session information, browser and device characteristics, approximate geographic information, and interactions with website functionality.

We do not use Profile Content for Google Analytics. Profile Content is not intentionally transmitted to Google Analytics for advertising, audience building, marketing, or analysis of the information contained within a user’s profile.

Analytics relating to TappyLinks QR codes, links, or profile visits may also be generated as part of features provided to the applicable account holder. Such operational analytics are used to provide the requested TappyLinks functionality and are not used to analyze the substantive content users place within their profiles.

Communications With Us

If you contact us, request support, submit a form, respond to a communication, or otherwise communicate with us, we may collect:

Comments

If comments are enabled and you leave a comment on one of our websites, we may collect the information entered into the comment form along with your IP address and browser user-agent information for purposes such as spam detection, moderation, and security.

If Gravatar or a similar profile-image service is enabled, an anonymized value derived from your email address may be provided to that service to determine whether you have an associated profile image.

Once a comment is approved, an associated profile image may be publicly visible with the comment.

Uploaded Media

If you upload images or other media to a publicly accessible profile or other public portion of the Services, you should avoid including embedded location information or other file metadata that you do not want others to access.

Depending on the file and how it is made available, another person may be able to download the file and extract embedded metadata.

3. How We Use Account Information

We may use Account Information to:

4. How We Use Profile Content

We use Profile Content only for purposes reasonably related to providing the profile or Service requested by the user.

This may include:

We do not use Profile Content to advertise to you or others.

We do not use Profile Content to decide what marketing messages to send you.

We do not use Profile Content for affiliate attribution.

We do not provide Profile Content to our other brands for marketing or unrelated business purposes.

We do not provide Profile Content to Hostinger Reach or other email-marketing platforms for mailing-list creation, segmentation, personalization, or promotional campaigns.

We do not sell Profile Content.

5. Public and Shareable Profiles

An important feature of TappyLinks is the ability to create information that can be intentionally shared with others through mechanisms such as:

Information you choose to publish through a public or shareable profile may be accessible to anyone who obtains access to that profile.

For example, someone who receives your profile link, scans your QR code, taps an NFC-enabled product, receives the link from another person, or otherwise obtains the profile address may be able to view information that you made accessible.

Making Profile Content publicly accessible at your direction is not the same as Plus Six Solutions sharing that content for marketing or unrelated purposes.

We display the information because you have instructed the Service to make that information accessible through your profile.

You are responsible for deciding what information you choose to make publicly or otherwise accessible.

Do not place information in a publicly accessible portion of a profile that you do not want others to view.

Although you may later edit, restrict, or remove information, we cannot control copies, screenshots, photographs, downloads, recordings, or other copies made by another person while the information was accessible.

MediTappy emergency profiles have additional privacy considerations described in our Consumer Health Data Privacy Policy.

6. Internal Use Across Plus Six Solutions Brands

Plus Six Solutions operates multiple brands, products, websites, and Services, including TappyLinks and MediTappy.

We may use Account Information internally across Plus Six Solutions brands when reasonably necessary for legitimate administrative and business purposes such as:

For example, if a customer purchases a MediTappy product and that product uses a TappyLinks account, relevant Account Information may be used to connect the customer’s purchase with the appropriate account and provide customer support.

Profile Content is excluded from this cross-brand use.

Information contained within a BioLink, BioPage, digital business card, MediTappy profile, or other TappyLinks-hosted profile is not shared across our brands for marketing, advertising, affiliate tracking, customer profiling, mailing-list segmentation, or unrelated business purposes.

7. We Do Not Sell Personal Information

Plus Six Solutions does not sell personal information.

This includes:

We do not sell personal information to data brokers.

We do not exchange personal information for money or other consideration as a business model.

Our use of service providers to perform necessary functions on our behalf is not intended to constitute a sale of personal information.

Consumer health data is subject to additional restrictions described in our Consumer Health Data Privacy Policy.

8. Cookies and Similar Technologies

We use cookies and similar technologies to operate our websites, maintain account sessions, provide requested functionality, measure general website performance, and administer affiliate programs.

Cookies may be used to:

Login and Functional Cookies

When you visit a login page, a temporary cookie may be used to determine whether your browser accepts cookies.

When you log in, cookies may be used to maintain your login session and remember preferences.

Selecting “Remember Me” or similar functionality may cause login information to persist for a longer period.

Logging out generally removes or invalidates applicable authentication cookies.

Affiliate and Referral Cookies

Plus Six Solutions operates affiliate and referral programs.

When you follow an affiliate or referral link, a cookie or similar identifier may be stored or read so that we can determine the source of the referral.

Affiliate tracking may include information necessary to determine:

Affiliate tracking does not use Profile Content.

Affiliates do not receive access to the information users place within TappyLinks profiles, BioLinks, BioPages, MediTappy profiles, or similar hosted pages through the affiliate program.

Affiliate attribution is based on referral and account or transaction-level information necessary to administer the program.

Analytics Cookies

We use Google Analytics to understand general website traffic and interactions.

Google Analytics may use cookies and similar technologies as part of providing analytics functionality.

The contents of user profiles are off-limits for our general website analytics purposes. We do not intentionally transmit Profile Content to Google Analytics for analysis, advertising, audience building, or marketing.

Payment-Related Cookies

Stripe and PayPal may use cookies or similar technologies as part of their payment, security, authentication, and fraud-prevention functionality.

Managing Cookies

Cookies may be temporary or remain on a device for a defined period depending on their purpose and configuration.

You may configure your browser to block or remove cookies. Blocking certain cookies may affect login functionality, shopping carts, checkout, saved preferences, affiliate attribution, analytics, or other website features.

9. Email and Communications

We currently use Zoho and Hostinger Reach for certain email and communication functions.

Zoho

Zoho may be used for:

Hostinger Reach

Hostinger Reach may be used for:

Depending on the service being used, these providers may process account-level information such as:

Profile Content is not provided to Hostinger Reach for marketing purposes.

We do not use the contents of a user’s BioLink, BioPage, digital business card, MediTappy profile, or other profile to determine mailing-list membership, segment marketing audiences, personalize promotional communications, or otherwise target marketing messages.

You may unsubscribe from promotional email communications using the unsubscribe method contained in the applicable message.

Unsubscribing from promotional communications does not prevent us from sending necessary account, order, security, support, transactional, or service-related communications.

10. Service Providers and Infrastructure

We use third-party providers and our own infrastructure to operate the Services.

Payment Processing

Stripe and PayPal provide payment-processing functionality.

Analytics

Google Analytics provides general website analytics functionality.

Hosting and Infrastructure

Hosting.com provides hosting and infrastructure used in connection with portions of our Services.

Plus Six Solutions also directly manages hosting, servers, systems, or technical infrastructure used to operate portions of the Services.

Hosting providers and infrastructure necessarily may process or store Profile Content as part of providing the hosting, storage, transmission, backup, security, and technical functionality required to operate the Service.

This processing does not give a hosting provider permission to use Profile Content for its own marketing, advertising, affiliate, or unrelated purposes.

Email and Communications

Zoho provides email and communications functionality.

Hostinger Reach provides email-marketing and mailing-list functionality.

Other Operational Providers

We may also use providers for functions such as:

Service providers may process information only as appropriate for the function they perform for us, subject to applicable contractual and legal obligations.

Consumer health data is subject to additional processor and security requirements described in our Consumer Health Data Privacy Policy.

11. How We Disclose Information

We do not sell personal information.

We may disclose or make information available in the following limited circumstances.

At Your Direction

We display or make Profile Content available when you direct us to do so through the features of the Service.

For example, when you configure a profile to be accessible through a QR code, NFC-enabled product, or public link, we display the Profile Content you selected to people who access that profile.

Service Providers

Information may be processed by service providers where necessary to provide services on our behalf, as described above.

Profile Content is provided to or processed by a service provider only when necessary to provide, host, secure, maintain, transmit, or support the applicable Service.

Within Plus Six Solutions

Account Information may be used internally across Plus Six Solutions brands for the purposes described in this Privacy Policy.

Profile Content is not shared internally across our brands for unrelated business, marketing, advertising, affiliate, or promotional purposes.

Legal and Safety Reasons

We may disclose information when we reasonably believe disclosure is necessary to:

Business Transactions

If Plus Six Solutions or a portion of its business is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, information may be transferred or processed as part of that transaction subject to applicable law.

Consumer health data remains subject to applicable health-data privacy requirements.

12. Embedded and Third-Party Content

Profiles, websites, articles, and other pages may contain embedded content or links provided by third parties, including:

When you interact directly with embedded third-party content, the third party may collect information about that interaction according to its own privacy policy.

We do not control third-party privacy practices.

A user’s decision to place a third-party link or embedded service within their profile does not authorize Plus Six Solutions to use the other Profile Content on that profile for marketing or unrelated purposes.

13. Password Resets and Account Security

If you request a password reset, information such as your IP address or other security information may be included in or associated with the reset process to help protect your account.

You are responsible for maintaining the confidentiality of your login credentials.

If you believe your account has been accessed without authorization, you should change your credentials and contact us promptly.

14. Data Retention

We retain information only for as long as reasonably necessary for the purposes for which it is processed, including providing the Services, maintaining security, satisfying legal and accounting obligations, resolving disputes, and enforcing agreements.

Account Information may generally be retained while your account remains active and for an appropriate period afterward where necessary for legitimate administrative, legal, accounting, security, or fraud-prevention purposes.

Profile Content may generally be retained while you maintain the associated profile or account and as otherwise necessary to provide the Service.

When Profile Content is deleted, some copies may remain temporarily in backups, caches, logs, or disaster-recovery systems until those copies are deleted or overwritten through normal system processes.

Transaction, tax, accounting, security, and legal records may be retained where necessary to satisfy applicable requirements.

Consumer health data is subject to the additional retention and deletion provisions in our Consumer Health Data Privacy Policy.

15. Your Privacy Choices and Rights

Depending on the Services you use, you may be able to access, correct, update, or delete certain information directly through your TappyLinks account.

You may also contact us to request assistance concerning personal information associated with your account.

Depending on applicable law, you may have rights that include:

We may need to verify your identity before completing a request in order to protect your information and account.

We will not unlawfully discriminate against you for exercising rights provided by applicable privacy law.

Privacy requests may be submitted through the Contact page on TappyLinks.com or another privacy-request method we make available.

Rights relating specifically to consumer health data are described in our Consumer Health Data Privacy Policy.

16. Data Security

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Access to systems and information is restricted according to operational need.

Profile Content is not made available internally merely because it exists within a user’s profile. Access should be limited to circumstances in which access is reasonably necessary to provide support, maintain or secure the Service, respond to a user request, investigate abuse or a security issue, or satisfy a legal requirement.

No Internet-based service or electronic storage system can guarantee absolute security.

Users are responsible for taking reasonable precautions to protect their accounts, login credentials, devices, QR codes, profile links, and other access methods.

If you believe your account or information has been compromised, please contact us promptly.

17. Children and Minors

TappyLinks is not directed to children under 13, and children under 13 should not independently create or manage a TappyLinks account.

A parent, legal guardian, caregiver, or other appropriately authorized adult may create or manage a profile concerning a child or dependent when that adult has appropriate authority to provide the information.

If such a profile contains consumer health data, that information is also governed by our Consumer Health Data Privacy Policy.

If we learn that a child under 13 has independently provided personal information directly to us in circumstances requiring parental consent under applicable law, we will take appropriate action.

If you believe a child has created an account or provided information without appropriate authorization, please contact us.

18. Information About Other People

Users may create profiles or content concerning themselves, businesses, employees, family members, dependents, or other persons.

The account holder is responsible for having appropriate authority to submit and publish information concerning another person.

If you believe someone has published personal information about you through TappyLinks without appropriate authorization, please contact us so that we can review the matter.

19. Automated Spam Detection and Security

Comments, contact forms, login attempts, and other submissions may be processed using automated systems designed to detect spam, fraud, malicious activity, unauthorized access, or security threats.

Information processed for these purposes may include submission content, IP address, browser or device information, and other technical information relevant to security or abuse prevention.

20. Third-Party Privacy Practices

Certain providers we use maintain their own privacy policies and legal obligations.

These include, where applicable:

Their independent processing of information is governed by their applicable privacy policies and legal obligations.

Our use of a provider does not authorize that provider to use Profile Content for our marketing, advertising, affiliate tracking, or unrelated business purposes.

21. Links to Other Websites

TappyLinks profiles and websites may contain links to websites or services not operated by Plus Six Solutions.

We are not responsible for the privacy, security, content, or data practices of those external services.

This Privacy Policy governs Services operated by Plus Six Solutions.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our Services, technology, business practices, providers, or legal obligations.

When we make changes, we will update the “Last Updated” date at the beginning of the policy.

If a change materially affects how we handle personal information, we may provide additional notice when appropriate or required.

Changes apply prospectively from their effective date unless applicable law requires otherwise.

23. Contact Us

If you have questions regarding this Privacy Policy, believe information about you has been submitted without authorization, or wish to make a privacy request, please contact:

Plus Six Solutions
TappyLinks

Privacy and support requests may be submitted through the Contact page on TappyLinks.com.

For requests involving medical, health, or other consumer health data submitted through MediTappy or another health-related TappyLinks Service, please follow the procedures provided in our Consumer Health Data Privacy Policy.

24. Related Policies

This Privacy Policy should be read together with:

If this Privacy Policy and the Consumer Health Data Privacy Policy both address information that qualifies as consumer health data, the Consumer Health Data Privacy Policy will control with respect to that information.