Privacy

Last updated 8 October 2026 · Epic House SIA, Riga, Latvia

Tap is a video-call workspace for small teams. This page says plainly what we collect, why, where it goes, and how to get rid of it. Epic House SIA is the controller for account and billing data; for what is said and made in a workspace’s calls we process data on behalf of the workspace that runs them.

What we collect

• Your account. Name, email address and profile picture from your Google account, used to sign you in and show who said what. We do not see your Google password.
• Calls. Audio is recorded and transcribed while recording is on; every participant sees a notice and can pause recording for everyone. Video and shared screens are live only and never recorded. Transcripts, ideas, tasks, prompts and chat messages are stored with the session.
• Guests. A guest gives a display name only. No account is created for them.
• Billing. Payments are handled by Stripe. At checkout Stripe collects the card, the billing address and, for a business, its VAT number, and works out VAT from them (Stripe Tax). We store the workspace’s subscription status and Stripe customer id, never card numbers.
• Integrations you connect. Linear, GitHub and Forge tokens you paste into Settings are stored encrypted and used only to do what you asked: create issues, open pull requests, run work.
• Work handed to Forge. When a workspace owner or admin starts a Forge session or hands an idea or prompt to Forge, Tap sends a brief made from that session: the agreed prompt, the ideas, the tasks, the last part of the transcript and any note they add. We keep the brief, the session’s status, a short log of what the coding agent did, and links to the pull request and preview.
• Technical logs. Server logs with timestamps, room names and errors, kept for debugging.

How audio and text are processed

Speech is transcribed and text is summarised by third-party AI models reached through Vercel’s AI Gateway with zero data retention configured on our side. Prompts contain the words said in the call and the ideas on the board. Nothing is used to train models.

A Forge session runs on Forge, the agent host the workspace connected. There a coding agent, Claude (by Anthropic) or Codex (by OpenAI) as the person chose, reads the brief and the repository, writes code on a branch, and opens a pull request on GitHub; Vercel builds a preview of it. Those services process the brief and the code under their own terms and the workspace’s accounts with them.

Where it is stored

Accounts and session data live in a MongoDB database and audio recordings on a server we operate in the European Union (Hetzner, Germany). The web app runs on Vercel. Stripe processes payments under its own policy.

Service providers

• Hetzner (Germany): the realtime server, the database and audio recordings.
• Vercel: the web app, and the AI Gateway that reaches the speech and language models.
• Google: sign-in.
• Stripe: payments, invoices and VAT.
• Only when a workspace connects them: Linear (issues), GitHub (repositories, pull requests), Forge and the coding agents it runs (Anthropic, OpenAI), and Vercel previews of the workspace’s own projects.

Some of these providers are outside the European Union; where data leaves it, transfers rely on the European Commission’s standard contractual clauses or an adequacy decision.

Who can see what

Members of a workspace see that workspace’s rooms, sessions, transcripts and recordings, except private rooms, which are visible only to their owner and invited people. Guests see only the call they joined. We access customer data only to operate the service or when you ask us to.

Retention and deletion

Sessions, transcripts, recordings and Forge session records are kept until the workspace owner deletes them or closes the workspace. Code, branches and pull requests made by a Forge session live in the workspace’s own repository and are removed there. Email hello@ttapp.app to delete your account or a workspace; we complete deletion within 30 days and confirm it.

Your rights

Under the GDPR you may ask what we hold about you, correct it, export it or have it erased, and you may complain to the Latvian Data State Inspectorate. Write to the address above.

Cookies

Tap sets a sign-in session cookie and a few local preferences (microphone choice, panel size), also when it is installed as an app on your phone or computer. No advertising or tracking cookies.

Changes

We will post changes here and note the date at the top.