How TapIn handles your information

1.What TapIn is and who this policy covers

TapIn is an AI-assisted online platform, integrated with trusted service providers, for families going through relationship difficulty, separation or divorce, and for the licensed professionals who help them — counselors, mediators, family law attorneys and financial experts. It is operated by TapIn Family Law, LLC, a Louisiana limited liability company (“TapIn”, “we”, “us”). TapIn is available across the United States.

TapIn is not a law firm and not a lawyer referral service. It does not give legal, financial or mental-health advice. It is a neutral platform that represents neither party. The professionals who use TapIn are independent of us.

This policy covers three groups of people:

• Families — people who use TapIn to organize their own situation and share it with professionals they choose.
• Professionals — licensed counselors, mediators, attorneys, financial experts and their staff who use TapIn in their work.
• Visitors — anyone browsing tapinfamily.com.

Professionals who use TapIn with their own clients are responsible for the information they place in it, and for their own professional and confidentiality obligations. TapIn processes that information on their instructions and under this policy.

2.Information we collect

Your account

Your name, email address and the role you hold on TapIn (for example, parent, attorney, mediator, financial expert). Professionals also give us their firm or practice name and, where we ask for it, their license or bar information so we can confirm they are who they say they are. If you create a TapIn password, we store only a salted hash of it — never the password itself.

What you and your professionals add

TapIn exists to hold the record of a hard chapter, so what you put in it can be sensitive. Depending on how you use it, that may include financial records and statements, documents you upload, information about assets, debts and income, family logistics such as custody schedules and shared expenses, notes, messages, and information about your children and the other party. Professionals may add their own work product. You decide what goes in and who may see it (see section 5).

Connected financial accounts (through Plaid)

If you choose to connect a bank, card, loan or investment account, the connection is made through Plaid. You log in to your institution inside Plaid’s own interface; TapIn never sees or stores your bank login credentials. With your consent, Plaid then provides TapIn with:

• Account details — institution, account name and type, and the last digits of the account number;
• Balances;
• Transactions, including merchant names and, where the institution supplies them, merchant location details, for a look-back window of up to 24 months;
• Account-holder details on file at the institution — owner names, addresses, email addresses and phone numbers;
• Investment and loan details where the institution supports them; and
• Statements (PDF), only if you grant the separate statement permission inside Plaid.

What we send to Plaid is minimal: an internal identifier for the connection — not your name. Plaid’s handling of your information is described in Plaid’s End User Privacy Policy. You can disconnect at any time (see section 8).

Payments

Payments are processed by Stripe. Card details are entered on Stripe’s secure checkout, not on our servers, and TapIn never stores card numbers. We keep the payer’s name and email, the amount, a generic description, our own reference numbers, and a record of whether the payment succeeded.

Usage and technical data

When you use TapIn we record the ordinary technical details of the visit — IP address, browser and device type, the pages and features you use, and timestamps. Because TapIn holds sensitive records, we also keep access logs: who signed in, from where, and who viewed or changed what. Those logs exist so that there is a record to look back on.

Our web app includes self-hosted performance and error monitoring. It records page errors, load timings and which screens were visited, and sends that only to our own servers. We do not use third-party analytics services.

Cookies and similar technologies

TapIn uses only cookies that are necessary to run the service:

• a session cookie that keeps you signed in (server-side sessions expire after eight hours of inactivity, or when you sign out);
• a “remember me” cookie, only if you choose it, valid for up to 14 days;
• a security token that protects forms against cross-site request forgery; and
• on the sign-in page, hCaptcha — a bot-protection service that may set its own cookie.

We do not use advertising cookies, tracking pixels or third-party analytics cookies, and we do not respond differently to “Do Not Track” signals because we do not track you across other sites in the first place.

Information from public sources (professional use only)

Professionals may use TapIn to run public-records and court-records lookups in connection with a matter — for example to locate a party or check a docket. Those lookups send the details of the person being searched (such as a name, date of birth, city and state) to the providers listed in section 6, and the results come back into the matter. These features are available only to licensed professionals, only for a permissible purpose, and the professional is responsible for that use (see our Terms).

3.Signing in with Google or Microsoft

You can sign in to TapIn with a Google account, a Microsoft account, or a TapIn password. If you choose Google or Microsoft, here is exactly what happens.

What we ask for

Only the basic sign-in scopes: openid, email and profile. We do not request access to your email messages, contacts, calendar, files or anything else in your Google or Microsoft account.

What we receive

Your name, your email address (and whether the provider has verified it), a profile picture link if you have one, and the provider’s unique identifier for your account.

How we use it

To create your TapIn account the first time, to match you to your existing account after that, to sign you in securely, and to show your name inside TapIn.

How we store it

Your name, email, picture link and the provider identifier are stored in your TapIn account record. We never see your Google or Microsoft password, and we do not keep the sign-in tokens once the sign-in completes.

How we share it

We don’t. Sign-in information is not shared with anyone, is not sold, and is not used for advertising.

TapIn’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we use Google user data only to provide and improve the TapIn sign-in and account features you see, we do not sell it, we do not use it for advertising, and we do not use it to develop or train AI or machine-learning models.

4.How we use information

We use the information described above to:

• provide TapIn — create and secure your account, store what you add, organize your financial and family picture, and show it to the people you have invited;
• run the features you use — connected accounts, document reading, calculations, calendars, messaging and the professional tools;
• send you service email — invitations, notifications, password resets and receipts;
• keep TapIn secure — detect misuse, prevent unauthorized access, and keep the access logs described above;
• support you when you ask for help;
• comply with the law and our own legal obligations; and
• improve TapIn, using aggregated or technical information that does not identify you.

We do not use your information for advertising, and we do not use the contents of your matter to train AI models — ours or anyone else’s.

AI-assisted processing

Some TapIn features use an AI service provider to help read and organize records: for example, extracting the transactions from a bank statement, reading the lines of a credit report, sorting transactions into spending categories, and the in-app assistant that answers questions about how TapIn works and about family law in general. Here is how that works and what protects you:

• It is consent-based. Every matter in TapIn carries an external-AI consent setting. When it is off, no document or message from that matter is sent to an AI provider; TapIn falls back to its built-in, on-premises processing (which can take longer or require more manual review). Professionals can record their client’s choice on the matter at any time.
• Sensitive identifiers are masked first. Before statement or credit-report text is sent, Social Security numbers are removed and account numbers are reduced to their last four digits. For scanned images, we mask using the document’s text layer where one exists; a pure image scan with no text layer cannot be masked that way and is sent as-is, which is why we say “masked where feasible”. Check images sent for handwriting reading have the account-number strip and signature cropped out first.
• Only what the feature needs is sent. Transaction categorization, for instance, sends short merchant descriptions and amounts — not dates, balances, account numbers or your name. The assistant sends what you type to it, not your case file.
• Providers may not train on it. Our AI providers are OpenAI (OpenAI’s business API) and, for one narrow task, Anthropic. Under their API terms, neither uses data sent through the API to train their models. We have a data-processing agreement in effect with each. OpenAI retains API inputs for up to 30 days for abuse monitoring, then deletes them; we have asked OpenAI to reduce that to zero retention and will update this policy if that is granted. Anthropic retains the masked check images for up to about 30 days, then deletes them.
• Calculations are never done by AI. Child-support, spousal-support and similar figures are computed by TapIn’s own code, not by a language model.
• AI output is assistance, not advice. It can be wrong. Anything it produces should be checked by you and your professional before it is relied on.

One tool for professionals — converting an uploaded form into a reusable template — sends the whole document to the AI provider by design, because its job is to find the names and figures to replace with blanks. It is a firm-level tool that is not tied to a matter, so it is not governed by a matter’s consent setting. Professionals should not use it on a live client filing unless they have that client’s consent.

5.How information is shared

We share information in only four situations.

With the people you invite

Access in TapIn is by invitation and by role. The professionals you choose see what you share with them, and only that. A professional who invites you sees what you place in the matter they are working on. Nobody sees anything on TapIn without a role on the matter. If the other parent or party is given a role — for example on a shared co-parenting calendar or expense ledger — they see only what that role covers. You can see who has access and change it.

With our service providers

A small number of carefully chosen companies help us run TapIn — for sign-in, bank connections, payments, email, AI-assisted document processing, bot protection and hosting. Each is limited to providing its service to us, may not sell your data, and may not use it to train its own models. They are named in section 6.

When the law requires it

We may disclose information if we are required to by a subpoena, court order or other legal process, or where we believe in good faith it is necessary to protect the safety of a person, to prevent fraud or abuse, or to protect our legal rights. Where the law allows, we will tell the affected account holder before we comply. Our legal-process page explains what we require, how we notify you, and what we produce: only records within the scope of the process, and only records the named account holder could themselves see — so information about children or the other party is not swept in by a request aimed at one person.

If TapIn changes hands

If TapIn Family Law, LLC is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction. We would require the new owner to honor this policy, and we would notify you before your information became subject to a different one.

We never sell your data, and we never use it for advertising. We have not sold personal information and have no plans to. We do not “share” personal information for cross-context behavioral advertising, as those terms are used in state privacy laws.

6.Our service providers

This is the full list of companies and sources that receive personal information in the course of running TapIn, what each does for us, and what each receives. We keep an internal inventory of every external data flow and update this list when it changes.

A few resources are loaded directly by your browser from third-party servers, which see your IP address and browser type but no account or case data: Google Fonts (above), the Font Awesome icon set from Cloudflare’s cdnjs, and — only on directory maps — OpenStreetMap map tiles and Leaflet marker images from unpkg. Plaid Link and hCaptcha also load in your browser when you use those features.

What we never send to anyone: your bank login credentials (we never have them), Plaid access tokens, and meeting audio — transcription happens on our own servers.

7.Security

TapIn holds the kind of information that must not leak. We protect it with:

• Encryption in transit and at rest. Connections to TapIn use TLS. Stored data is encrypted at rest, and the Plaid access tokens that let us refresh connected accounts are encrypted a second time at the application level.
• Multi-factor authentication, available on every account using an authenticator app. When it is on, a password alone is not enough to get in.
• Role-based access. Every request is checked against the role you hold on the matter. Access is by invitation only.
• Access logging. Sign-ins and access to information are logged so that there is a record to look back on.
• Account protection. Passwords are stored only as salted hashes; repeated failed sign-ins lock the account temporarily; sign-in attempts are rate-limited.
• Minimization and masking before anything is sent to a service provider, as described in section 4.

No system is perfectly secure, and we cannot promise that unauthorized access will never happen. If we learn of a breach that affects your information, we will notify you and any regulator we are required to notify, without unreasonable delay. Please help by keeping your sign-in credentials private, turning on multi-factor authentication, and telling us at [email protected] if you see something wrong.

8.Retention and deletion

We keep your information for as long as your account is open and you or your professionals are using it. After an account is closed, we delete or de-identify the information within 90 days, except where we must keep it longer: to meet a legal obligation, to resolve a dispute, to honor a legal hold, or because a professional has a separate record-keeping duty for their own client file. Backups are kept for no longer than 30 days on access-restricted storage in the United States and then overwritten. Access logs may be kept longer than the data they describe so that the record survives the account for as long as needed to meet legal obligations, resolve disputes and investigate security incidents.

Disconnecting a financial account

You can disconnect any connected account from the Account Registry inside TapIn, or by emailing us. When you do, we delete the Plaid access token and stop refreshing that account. Information already imported into your matter stays until you delete it or close your account, because it is part of the record you built. You can also remove TapIn’s access from Plaid’s side through Plaid Portal.

Closing your account, exporting or deleting your data

Email [email protected] from the address on your account and tell us whether you want a copy of your information, deletion, or both. We will confirm your identity and respond within 30 days.

Two honest limits: information you shared with a professional may also exist in that professional’s own files, which we do not control; and information that another account holder entered about you (for example, the other party in a matter) belongs to their record and is handled through them or through legal process.

9.Your choices and rights

Whoever you are and wherever you live, you can:

• See and correct your account information inside TapIn, and ask us for a copy of the information we hold about you;
• Delete information you added, disconnect accounts, and close your account;
• Control access — decide which professionals see what, and revoke it;
• Decline AI processing for a matter through its consent setting (families: ask your professional, or ask us);
• Choose how you sign in, and turn multi-factor authentication on;
• Opt out of non-essential email. Service messages — invitations, security notices, receipts — are part of the service and cannot be switched off while your account is open.

State privacy rights

Residents of states with comprehensive privacy laws (including California, Colorado, Connecticut, Oregon, Texas, Virginia and others) may have the rights to access, correct, delete and obtain a portable copy of their personal information, to opt out of its sale, sharing for targeted advertising or use in profiling, and to appeal a decision we make about a request. We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of; the other rights are honored for everyone, as described above. We will not treat you differently for exercising them. To make a request, or to appeal, email [email protected]. You may use an authorized agent where your state allows it; we will ask for proof of the agent’s authority.

Sensitive information

Much of what TapIn holds is sensitive by any definition — financial account information, information about children, and sometimes information about health or safety. We process it only to provide the service you and your professionals ask for, and only with the consent and access controls described in this policy.

Where your information is stored

TapIn is operated from the United States and your information is stored in the United States. If you use TapIn from outside the United States, you are sending your information here.

10.Children

TapIn is for adults. It is not directed to anyone under 18, and we do not knowingly create accounts for them. If you believe a minor has created an account, tell us at [email protected] and we will remove it.

Information about children — names, ages, schedules, expenses, school and medical details — is a normal and necessary part of a family matter. It is entered by parents and by the professionals helping them, it belongs to the family’s record, and it is protected by everything in this policy. It is never sold, never used for advertising, and never used to train AI models.

11.Changes to this policy

We will update this policy when TapIn changes — for example, when we add or replace a service provider. The date at the top tells you when. For changes that matter to you, such as a new category of sharing or a new AI use, we will tell you by email or in the app before the change takes effect, and where a change requires your consent we will ask for it. Earlier versions are available on request.

12.Contact

Questions about your data, requests, or complaints: [email protected]. Anything else: [email protected].

By mail: TapIn Family Law, LLC, at the registered address shown in the footer of this page.

If you are not satisfied with our answer, you may also contact the attorney general or privacy regulator in your state.